Privacy policy

Privacy Policy

Last Updated: September 17, 2024

This Privacy Policy outlines Our policies regarding the collection, use, and disclosure of Your personal data when You use Our Service and explains Your privacy rights and how legal protections apply to You. We are committed to safeguarding Your privacy and ensuring that Your personal information is secure.

By using the Service, You consent to the collection and use of Your information in accordance with this Privacy Policy.

Key Improvements for Client Protection:

  • Encryption & Security Enhancements: Added sections on encryption protocols and how we ensure the secure transfer and storage of personal data.
  • Clarified User Rights: Expanded the section on user rights under GDPR and CCPA to provide more detailed steps for users to access, delete, and manage their data.
  • Cookie and Tracking Updates: Updated the tracking section to include more information about modern tracking tools like device fingerprinting and clear instructions on how users can opt out.
  • Data Breach Notifications: Included protocols on notifying users in case of a data breach, following GDPR’s 72-hour notification rule.
  • Third-Party Vendor Transparency: Enhanced transparency by listing third-party service providers and explaining how they use Your data.
  • Explicit Consent for Minors: Strengthened protections for users under 16, including the need for verifiable parental consent for data collection.
  • Clear Opt-Out Mechanisms: Updated methods for opting out of targeted advertising, data sharing, and sale of personal information with detailed instructions for each platform.

Definitions and Interpretation

  • Account: A unique profile created for You to access the Service.
  • Company: Cold Coco, referred to as "We", "Us", or "Our".
  • Personal Data: Any information that can identify an individual, such as email, address, phone number, and payment details.
  • Usage Data: Data collected automatically (e.g., IP address, browser type).
  • Cookies: Small files placed on Your device to track usage.
  • Data Controller: Cold Coco, responsible for the handling of personal data under GDPR.

Updates to Data Collection

We may collect the following data:

  • Personal Data: Name, email, phone, address, payment info.
  • Usage Data: Device details, browser type, IP address.
  • Sensitive Information: In case of a transaction, we may request ID verification.

Use of Your Data

Your data is used to:

  • Provide and improve our Service.
  • Manage your Account and transactions.
  • Communicate with You (e.g., updates, marketing materials).
  • Comply with legal obligations.

Data Security Measures

We take Your privacy seriously and employ encryption protocols (such as SSL/TLS) to secure data during transmission and at rest. However, while we strive to use commercially reasonable security practices, no system is entirely foolproof.

SMS Communications

We may use your phone number to send SMS notifications regarding your orders, promotional offers, or updates related to our services. By providing your phone number, you consent to receive SMS messages from us. Message and data rates may apply.

  • Opting Out: You can opt out of receiving promotional SMS messages at any time by replying with “STOP” to any message received. For support, reply with “HELP,” or contact us at support@coldcoco.com.

We will not share your phone number with third parties for marketing purposes without your explicit consent. However, we may share your phone number with service providers who assist us in sending SMS communications, and they are bound by this Privacy Policy.

Retention and Deletion of Data

We only retain Your personal data for as long as necessary to fulfill the purposes outlined in this policy or as required by law. You have the right to request deletion of Your data, and we will comply unless legally obligated to retain it.

Sharing and Disclosure

We may share Your data with:

  • Service Providers: To perform functions on our behalf (e.g., payments).
  • Business Partners: For joint marketing or promotional activities.
  • Legal Authorities: In compliance with legal requirements.

Your Rights Under GDPR & CCPA

  • Right to Access: Request access to the data we hold on You.
  • Right to Rectification: Correct any inaccuracies in Your personal data.
  • Right to Erasure: Request deletion of Your data.
  • Right to Object: Opt-out of data processing for marketing or legitimate interests.
  • Right to Data Portability: Request that Your data be transferred to another service.

Cookie Policy

We use both Session Cookies (temporary) and Persistent Cookies (remain on Your device). You can control cookie preferences through Your browser settings.

Data Breach Protocol

In the unlikely event of a data breach, We will notify affected users within 72 hours, following GDPR regulations. Affected users will receive guidance on steps to protect their information.

Changes to This Policy

We may update this Privacy Policy as necessary. Significant changes will be communicated to You via email or a notice on our Website.

Contact Us

For any questions or requests regarding this Privacy Policy, contact us at support@coldcoco.com.