Cocoon Blankets INC | www.cocoonblanket.com | Effective Date: July 1, 2026

1. Introduction

Cocoon Blankets INC ("Cocoon," "we," "us," or "our") operates the website www.cocoonblanket.com (the "Site"). This Privacy Policy describes how we collect, use, disclose, and protect your personal information when you visit our Site, create an account, make a purchase, or interact with us in any other way.

By using our Site, you agree to the collection and use of information in accordance with this Privacy Policy. If you do not agree, please do not use our Site.

2. Information We Collect

2.1 Information You Provide Directly

We collect information you voluntarily provide, including:

· Name, email address, shipping address, and billing address

· Phone number

· Payment information (credit card details are processed directly by Shopify Payments and are not stored on our servers)

· Account login credentials if you create an account

· Communications you send to our customer support team

· Email address submitted through lead generation forms, sign-up forms, or promotional campaigns

2.2 Information Collected Automatically

When you visit our Site, we and our third-party service providers automatically collect certain information, including:

· IP address and approximate geographic location

· Device type, operating system, and browser type and version

· Pages visited, time spent on each page, and links clicked

· Referring URLs (the page you visited before arriving at our Site)

· Shopping cart contents and browsing behaviour on our Site

· Data collected via cookies, web beacons, pixels, and similar tracking technologies (see Section 4)

2.3 Information from Third Parties

We may receive information about you from third parties, including:

· Meta (Facebook/Instagram) when you submit your details via lead generation ads

· Google when you interact with our advertisements

· Analytics providers such as Google Analytics

3. How We Use Your Information

We use the information we collect for the following purposes:

· To process and fulfil your orders, including coordinating shipping through our fulfilment partner ShipBob

· To send order confirmations, shipping updates, and other transactional communications

· To send you marketing and promotional emails via Klaviyo, where you have opted in or where permitted by applicable law. You may unsubscribe at any time using the link in any email we send

· To personalise your experience on our Site and show you relevant content

· To serve you targeted advertisements on Google Search, Google Display Network, YouTube, and other platforms using cookie data and Customer Match audiences (see Section 5)

· To measure the effectiveness of our advertising campaigns

· To improve our Site, products, and customer service

· To prevent fraud and maintain the security of our Site

· To comply with legal obligations

4. Cookies and Tracking Technologies

4.1 Types of Cookies We Use

We use the following categories of cookies and similar tracking technologies:

· Essential cookies: Necessary for the Site to function, including maintaining your shopping cart and processing your login session. These cannot be disabled.

· Analytics cookies: Help us understand how visitors use our Site (e.g., Google Analytics). This data is aggregated and used to improve our website performance.

· Marketing and advertising cookies: Used to track your browsing activity and deliver relevant advertisements to you on third-party platforms including Google Search, Google Display Network, YouTube, and social media. These cookies enable us to show you Cocoon ads after you have visited our Site (remarketing).

4.2 Google Advertising and Remarketing

We use Google Ads, including remarketing features, to advertise to people who have previously visited our Site. Google uses cookies stored on your browser to serve ads based on your past visits to www.cocoonblanket.com. This means you may see Cocoon advertisements on Google Search results, Google Display Network websites, YouTube, and other Google partner sites after visiting our Site.

You can opt out of Google's use of cookies for advertising purposes by visiting Google's Ads Settings at https://www.google.com/settings/ads or by visiting the Network Advertising Initiative opt-out page at https://optout.networkadvertising.org.

4.3 Customer Match

We may use Google's Customer Match feature, which allows us to upload hashed (encrypted) customer email addresses to Google. Google uses this data to match your email address to your Google account and serve Cocoon advertisements to you across Google services. This data is transmitted securely, is not used by Google for any other purpose, and is governed by Google's Customer Match Policy. You may opt out of Customer Match targeting by visiting your Google Ads Settings.

4.4 Managing Cookies

Most browsers allow you to refuse or delete cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of our Site. For more information on managing cookies, visit www.allaboutcookies.org.

5. How We Share Your Information

We do not sell your personal information. We may share your information with the following categories of third parties:

· Shopify: Our e-commerce platform provider. Shopify hosts our store, processes payments, and stores order data. Shopify's privacy practices are governed by Shopify's Privacy Policy at https://www.shopify.com/legal/privacy.

· ShipBob: Our third-party fulfilment and logistics provider. We share your name, shipping address, and order details with ShipBob to pack and deliver your order.

· Klaviyo: Our email marketing platform. We share your email address and purchase history with Klaviyo to send transactional and marketing emails.

· Google: We share data with Google for advertising, remarketing, and analytics purposes as described in Section 4.

· Loox: Our product reviews platform. We may share your name, email address, and order information with Loox to invite you to leave a product review.

· Legal authorities: We may disclose your information where required to do so by law, court order, or to protect the rights and safety of Cocoon Blankets INC or others.

6. Email Marketing

We use Klaviyo to send you marketing emails, including promotional campaigns, product launches, and exclusive early access offers. All marketing emails include an unsubscribe link. You may opt out of marketing emails at any time by clicking the unsubscribe link in any email or by contacting us at contact@cocoonblanket.com.

We comply with the CAN-SPAM Act. Our emails will always identify Cocoon Blankets INC as the sender, include a valid physical mailing address, and provide a clear and easy mechanism to opt out.

7. Your Privacy Rights

7.1 California Residents (CCPA)

If you are a California resident, you have the following rights under the California Consumer Privacy Act (CCPA):

· Right to know: You may request information about the categories and specific pieces of personal information we have collected about you, and the purposes for which it is used.

· Right to deletion: You may request that we delete your personal information, subject to certain exceptions.

· Right to opt out of sale: We do not sell personal information. However, our sharing of data with advertising partners for targeted advertising may constitute a "share" under California law. You may opt out by contacting us or by using the cookie management settings on our Site.

· Right to non-discrimination: We will not discriminate against you for exercising any of your CCPA rights.

To exercise your California privacy rights, please contact us at contact@cocoonblanket.com.

7.2 All Users

Regardless of your location, you may:

· Request access to the personal information we hold about you

· Request correction of inaccurate personal information

· Opt out of marketing communications at any time

· Request deletion of your personal information, subject to our legal obligations

8. Data Retention

We retain your personal information for as long as necessary to fulfil the purposes described in this Privacy Policy, including complying with legal, accounting, and reporting obligations. Order data is typically retained for seven years. Marketing data is retained until you unsubscribe or request deletion.

9. Data Security

We implement commercially reasonable technical and organisational measures to protect your personal information against unauthorised access, loss, misuse, or alteration. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Children's Privacy

Our Site is not directed to children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us and we will delete it promptly.

11. Third-Party Links

Our Site may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We encourage you to review the privacy policies of any third-party sites you visit.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. When we do, we will post the updated policy on this page and update the "Last Updated" date at the top. We encourage you to review this policy periodically.