Privacy Policy
Introduction
- We, cosysleepwear.com, operate this Privacy and Cookies Policy because we are committed to safeguarding the privacy of our customers and those using our website and the confidentiality of any information that we collect about you. This Privacy and Cookies Policy sets out how we will use any personal information that we may obtain from you. If we change any of the terms of our Privacy and Cookies Policy we will post the revised policy on our website at https://www.cosysleepwear.com behind the “Privacy and Cookies Policy” link at the bottom of each page.
- Our website is not intended for children and we do not knowingly collect data relating to children.
- Whenever you submit your information to us, whether it be by using our website, by email, over the telephone, in person or by any other means, you acknowledge that we will collect and use such information in accordance with the terms of this Privacy and Cookies Policy. You will also be opting to be added to our mailing list for receiving direct marketing messages from us (a) by email and/or SMS if you specifically opt in to receive such communications (e.g. using our website), and/or (b) by email if you purchase any goods via our website and do not (when requested during our website’s ordering process) untick the corresponding box to not receive such communications by email. Please see section 4 below for further information if you no longer wish to receive such marketing communications from us.
- We are committed to ensuring that all personal information we hold is treated properly and in accordance with applicable data protection legislation. We are registered as a data controller with the Information Commissioner’s Office (“ICO”). In accordance with applicable data protection legislation, we are required to explain to you how we will treat any personal data which we collect from you.
- You have the right to lodge a complaint with the ICO if you have any concerns with regard to the way in which we process your personal data. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance.
- You warrant that any information you supply to us is accurate and up to date (whether or not the information is about you), that you will inform us if any information that you provide us with requires updating (e.g. email address/mobile number), and that if you submit a third party’s details to us (including but not limited to via our website) you have that third party’s permission or an alternative legal basis to do so.
What information do we collect and how do we use it?
- It is possible to visit and browse some sections of our website without being required to tell us who you are or reveal any information about yourself.
- If you register with our website, place an order, request to open a customer account with us or enter a promotion or competition using our website, we will ask for certain information which may include your name, invoice address, delivery address, credit or debit card number, expiry date and issue number (where applicable), other account details, payment account details (e.g. Shop Pay (operated by Shopify), PayPal, Zip Pay, Google Pay, Amazon Pay or Clearpay), e-mail address and telephone number. If you contact us, we may keep a copy or a record of your correspondence. We may also keep details of your use of our website, including but not limited to traffic data, location data and other communication data and those pages that you visit on our website.
- We may use the information about you described in section 2.2 above where necessary for our legitimate interests in the following ways (so long as our interests are not overridden by the impact on you):
- to create a customer account for you (which will be used to manage and administer our relationship with you);
- to send you postal marketing from time to time in relation to goods that we think may be of interest to you (please see section 4 below for further information if you do not (or no longer) wish to receive such postal marketing communications);
- where you purchase any goods via our website and do not untick the corresponding box to not receive marketing communications by email (when requested during our website’s ordering process) or click on any subsequent ‘unsubscribe’ link in any related email;
- to develop our systems and services and ensure that content from our website is presented in the most effective manner for you and for your electronic device used to access our website;
- to provide you with information, goods or services that you request from us or access (including but not limited to via our website). This may include using personal information to personalise products as per your order;
- to monitor your compliance with the terms and conditions applicable to any contracts entered into between us (including our Terms of Service);
- to allow you to participate in interactive features of our website;
- to allow you to participate in our loyalty reward scheme (Pajama Perks) should you register for that scheme;
- to notify you about changes or prospective changes to our goods, services and/or our website;
- to carry out market research so that we can improve the goods and services we offer (please note that you have the right to opt-out of receiving or participating in our surveys at any time); and
- to create anonymised reports based on your usage of our website.
- If you order any products or services using our website, we will use your name, contact and delivery details, bank account details, payment card details and/or chosen payment account details (e.g. Shop Pay (operated by Shopify), PayPal, Zip Pay, Google Pay, Amazon Pay or Clearpay where relevant) where necessary for the performance of any contract between us (for example, to take payment from you of the price of the relevant goods/services, to deliver any products that you order and to issue any refunds that may become payable). Where you are paying by card or by other payment method, you will be redirected to the website of our relevant payment services provider (each a “Payment Service Provider”) in order to make your payment; we do not store any card details on our servers). After the payment has been completed you will be redirected back to our website. Please note that each chosen Payment Service Provider may collect personal information from you which will be used in accordance with their own privacy policy (which you should read). More information regarding each Payment Service Provider can be accessed via the relevant Payment Service Provider’s website. We are not liable for the practices of any Payment Service Provider in respect of your personal information.
- If you enter into a promotion or competition (e.g. using our website), we will use your name and contact details for our legitimate interests in processing your entry in accordance with the relevant promotion/competition terms and conditions (which you should familiarise yourself with before entering).
- In the event that you provide us with feedback regarding our website or any of our products and services, we may use and disclose that feedback to our suppliers and other users of our website where it is in our legitimate interests to do so in order to improve our website and the products and services that we provide. This includes any information that you provide to us if you report a problem with our website or any of our products and services.
- Where you have given consent or where you purchase any goods via our website and do not opt out of receiving marketing emails from us during the order process, we may use your information to inform you of special offers, promotions, new products, competitions and changes to our website via email. Where you have provided consent to receive SMS from us we may also send you such information via SMS and our SMS service may also use information automatically collected based on your actions on our website and pay prompt messaging (such as ‘cart abandon’ messages). If you subsequently decide that you no longer wish to receive any such mailings please see section 4 below.
- If you correspond with us (e.g. using email), we may retain a record of or the content of your correspondence together with your contact details and our responses where necessary for our and your legitimate interests in order that we can appropriately manage your relationship with us, to reply to your correspondence and for training and quality purposes. This may include us recording and monitoring our telephone calls with you for such purposes.
- Where we need to collect personal data in connection with any products or services which you request or order from us and you fail to provide that data when requested, we may not be able to provide such products or services or perform any related contract that we have or are trying to enter into with you.
- In limited circumstances, we may approach you for your consent to allow us to process certain information for purposes not referred to in this Privacy and Cookies Statement. If we do so, we will provide you with full details of the information we would like and the reason we need it, so that you can carefully consider whether you wish to consent. You should be aware that it is not a condition of any contract with us that you agree to any such request for consent from us. If you do provide us with consent, you will be able to withdraw it at any time via the method that we notify you of when obtaining your consent. Any such withdrawal will not affect the lawfulness of our processing of your personal information for the relevant purpose(s) before you withdrew consent.
Pajama Perks and ‘Refer a Friend’ affiliates
- If you register with our reward scheme Pajama Perks (https://www.cosysleepwear.com), we may collect additional personal information including age, gender, social media handles, payment account details (for the purpose of paying any rewards earned). We will use such information (in addition to details of orders placed and any other relevant details referred to in section 2.2) for our legitimate interests in maintaining and administering your Pajama Perks account and to make available to you any Pajama Perks to which you become entitled in accordance with the scheme.
‘Refer a Friend’
- If you refer any other person to us using our website’s referral programme (https://www.cosysleepwear.com) we will generate a link for you to send to that other person. We will not ask you to provide any personal data of any other person to cosysleepwear.com.
- If you create an account with us or make a purchase from us using a referral link, then the person who provided you with the link may be notified that they have accumulated points in their Pajama Perks account in connection with the referral, but we will not share any of your personal information with them.
Third Party Disclosures
- We may disclose personal information about you:
- to third parties who are directly involved in dealing with any request, enquiry, order, competition/promotion entry, complaint or other correspondence submitted by you or in the performance of any contract between us and you. This may include our affiliated US company if you place an order for delivery to an address in the United States of America;
- to third parties who are processing your information on our behalf for specified purposes in accordance with our instructions;
- where we are legally required to do so;
- to third parties who are providing us with professional advice where necessary for our legitimate interests in obtaining such advice and permitted by law;
- in connection with criminal investigations, legal proceedings or prospective legal proceedings where necessary for our related legitimate interests and where permitted by law;
- where necessary for our legitimate interests and permitted by law in establishing, exercising or defending our legal rights (including providing information to others for the purposes of fraud prevention, debt collection and debt tracing actions) and protecting the rights, property or safety of cosysleepwear.com, our customers, our employees, suppliers or others; and
- where we have stated or informed you otherwise (e.g. in this Privacy and Cookies Policy or on our website).
- We may also disclose your personal information to third parties in the event that we propose to dispose of or acquire any business or assets (in which case we may disclose your personal information to the prospective acquirer or seller of such business or assets and/or their professional advisors) or if we or substantially all of our assets are proposed to be acquired by a third party. Any such disclosure will be made where necessary for the legitimate interests of us and/or the third party in respect of the proposed transaction; however we will not transfer your personal information to any such third party unless we are satisfied that they are able to provide an adequate level of protection in respect of your personal information.
- Except as provided in this Privacy and Cookies Policy, we will not provide or disclose your information to third parties without your express consent for any purpose (including but not limited to direct marketing). We do not sell personal information under any circumstances.
How do you stop marketing information being sent to you?
You can ask that such information is no longer sent to you by (i) emailing us at the contact address specified below, (ii) clicking the ‘unsubscribe’ link in any email marketing communication sent to you, or (iii) where applicable, updating your preferences in your account management area of our website. Please allow a few days for any request to become effective.
Use of Cookies
- Our website uses cookies to distinguish you from other users of our website. This helps us to provide you with a good experience when you browse our website and also allows us to improve our website. By continuing to browse the website, you are agreeing to our use of cookies.
- A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer’s hard drive.
- We use the following cookies:
- Strictly necessary cookies. These are cookies that are required for the operation of our website. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services.
- Analytical/performance cookies. They allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
- Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
- Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose.
- Please note that third parties (including, for example, advertising networks and providers of external services like web traffic analysis services) may also use cookies, over which we have no control. These cookies are likely to be analytical/performance cookies or targeting cookies.
- You block cookies by activating the setting on your browser that allows you to refuse the setting of all or some cookies. However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.
Where your data is stored
- Your personal data will be held by us on our secure servers and/or those of our trusted service providers. We may transfer your personal data to, and store it at, a destination outside the United Kingdom (UK) and/or the European Economic Area (EEA) (for example, if our service providers are located outside of the UK/EEA). It may also be processed by staff operating outside the UK/EEA who work for us or for one of our suppliers.
- Where we transfer your personal data outside of the UK/EEA, we will ensure that it is protected in a manner that is consistent with how your personal data will be protected by us in the UK/EEA. This can be done in a number of ways, for instance: the country that we send the data to might be approved by the relevant UK or European authority as offering an adequate level of protection; or the recipient might have signed up to a contract based on “model contractual clauses” approved by the relevant UK or European authorities, obliging them to protect your personal data; or where the recipient is located in the US, it might be a certified member of the EU-US Privacy Shield scheme. In other circumstances the law may permit us to otherwise transfer your personal data outside the UK/EEA. In all cases, however, any transfer of your personal data will be compliant with applicable data protection law.
- Unfortunately, the transmission of information via the internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to our website; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
How long do we store your data for?
- We will only retain your personal data for as long as necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
- To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
- In some circumstances we may anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes in which case we may use this information indefinitely without further notice to you.
Your Rights
- Under certain circumstances, you have rights under data protection laws in relation to your personal data. You have the right to:
- Request access to your personal data (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you and to check that we are lawfully processing it.
- Request correction of the personal data that we hold about you. This enables you to have any incomplete or inaccurate data we hold about you corrected, though we may need to verify the accuracy of the new data you provide to us.
- Request erasure of your personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove your personal data where you have successfully exercised your right to object to processing (see below), where we may have processed your information unlawfully or where we are required to erase your personal data to comply with local law. Note, however, that we may not always be able to comply with your request of erasure for specific legal reasons which will be notified to you, if applicable, at the time of your request.
- Object to processing of your personal data where we are relying on a legitimate interest (or those of a third party) and there is something about your particular situation which makes you want to object to processing on this ground as you feel it impacts on your fundamental rights and freedoms. You also have the right to object where we are processing your personal data for direct marketing purposes. In some cases, we may demonstrate that we have compelling legitimate grounds to process your information which override your rights and freedoms.
- Request restriction of processing of your personal data. This enables you to ask us to suspend the processing of your personal data in the following scenarios: (a) if you want us to establish the data’s accuracy; (b) where our use of the data is unlawful but you do not want us to erase it; (c) where you need us to hold the data even if we no longer require it as you need it to establish, exercise or defend legal claims; or (d) you have objected to our use of your data but we need to verify whether we have overriding legitimate grounds to use it.
- Request the transfer of your personal data to you or to a third party. We will provide to you, or a third party you have chosen, your personal data in a structured, commonly used, machine-readable format. Note that this right only applies to automated information which you initially provided consent for us to use or where we used the information to perform a contract with you.
- Withdraw consent at any time where we are relying on consent to process your personal data. However, this will not affect the lawfulness of any processing carried out before you withdraw your consent. If you withdraw your consent, we may not be able to provide certain products or services to you. We will advise you if this is the case at the time you withdraw your consent.
- If you wish to exercise any of the rights set out above, please contact us.
- You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request is clearly unfounded, repetitive or excessive. Alternatively, we may refuse to comply with your request in these circumstances.
- We may need to request specific information from you to help us confirm your identity and ensure your right to access your personal data (or to exercise any of your other rights). This is a security measure to ensure that personal data is not disclosed to any person who has no right to receive it. We may also contact you to ask you for further information in relation to your request to speed up our response.
- We try to respond to all legitimate requests within one month. Occasionally it may take us longer than a month if your request is particularly complex or you have made a number of requests. In this case, we will notify you and keep you updated.
Changes to our Privacy and Cookies Policy
We may change this Privacy and Cookies Policy from time to time. You should check this policy occasionally to ensure you are aware of the most recent version that will apply each time you use our website or provide us with your information in other ways.
Contact
If you have any questions about this Privacy and Cookies Policy or about our use of your information, please contact us.
