Privacy Policy

We collect and process personal data to provide and improve our services, process orders, and comply with legal obligations. This policy explains what we collect, why, how we use it, your rights, and how to contact us.

1. Who We Are

Cozydcor is an online home décor retailer operated by UPZAARIA LLC. We are the data controller for your personal information under UK GDPR and the Data Protection Act 2018.

2. Information We Collect

  • Account Information: Name, email, phone, billing/shipping address when you create an account or place an order.
  • Transaction Data: Order details, payment method, purchase history to process and manage orders.
  • Technical Data: IP address, browser type, device identifiers, pages visited, and cookies data to operate and secure our site, and for analytics.
  • Marketing Data: Preferences and consent choices for newsletters and promotional communications if you opt-in.

3. How We Use Your Data

  • Order Fulfilment: To process purchases, arrange delivery, handle returns/refunds, and communicate about your orders.
  • Account Management: To create and manage your account, provide customer support, and authenticate access.
  • Site Improvement: To analyse site usage, improve functionality, personalise content and offers.
  • Marketing: To send you updates, newsletters, and offers (with your consent). You may opt out at any time.
  • Legal Compliance: To meet our legal obligations (e.g., tax, fraud prevention, dispute resolution).

4. Legal Basis for Processing

We rely on the following lawful bases under UK GDPR:

  • Contractual Necessity – for order fulfilment and account services.
  • Consent – for marketing communications and non-essential cookies.
  • Legal Obligation – to comply with financial, tax, and regulatory requirements.
  • Legitimate Interests – to improve our services, website security, and prevent fraud, balanced against your rights and freedoms.

5. Cookies & Tracking

We use cookies and similar technologies to:

  • Enable site functionality (strictly necessary cookies).
  • Analyse usage and performance (analytics cookies).
  • Personalise marketing (advertising cookies with your consent).

You can manage your cookie preferences via our cookie banner or your browser settings. For more on UK ePrivacy rules, see ICO guidance on cookies and tracking technologies.

6. Data Sharing & Third Parties

We may share your data with:

  • Delivery Partners: To ship your orders (e.g., Royal Mail, Evri).
  • Payment Processors: To process payments securely (e.g., Stripe, PayPal).
  • IT & Analytics Providers: To host our site, provide analytics and marketing tools.
  • Legal & Compliance: When required by law or to protect our legal rights.

All third parties are contractually bound to handle your data in accordance with UK data protection law.

7. Data Retention

We retain your personal data only as long as necessary for the purposes described, typically:

  • Order & Transaction Data: 7 years for tax and accounting purposes.
  • Account Data: Until you delete your account or inactivity for 3 years.
  • Marketing Data: Until you withdraw consent.
    We regularly review retention periods in line with ICO guidance on data minimization and retention.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access your data and receive a copy.
  • Rectify inaccurate or incomplete data.
  • Erase data (right to be forgotten) where no longer needed.
  • Restrict Processing in certain circumstances.
  • Data Portability to receive your data in a structured format.
  • Object to processing based on legitimate interests or marketing.
  • Withdraw Consent at any time for marketing or cookies.

To exercise these rights, contact us as below. We will respond within one month, as required by law.

9. Security

We implement appropriate technical and organizational measures such as SSL encryption, access controls, and secure hosting to protect your data against unauthorized access, alteration, or loss.

10. Changes to This Policy

We may update this policy to reflect changes in law, our practices, or Google Merchant Center requirements. We will post the revised date at the top and notify you if changes are significant.

11. Contact Us

For privacy queries or to exercise your rights, please contact: