Cosocial is committed to protecting all personal information that we collect and hold, and we comply with all applicable privacy and data protection laws openly and transparently. We have policies and procedures in place covering our data protection responsibilities to ensure we follow the data protection principles and process all personal information fairly and lawfully in a way that respects your rights under the United Kingdom (UK) Data Protection Act 2018 (DPA). This commitment includes compliance with the General Data Protection Regulation (GDPR) 2016/679 as implemented in the UK as part of the DPA and compliance with the California Consumer Privacy Act (CCPA).
When we gather personal information from you, we will ensure that what we collect is adequate, relevant, and not excessive to our needs. We take care to ensure your personal information is accurate and up to date, used solely for the reasons for which it was collected and retained only for as long as is necessary. We will not transfer any personal information outside of the UK or European Union (EU) unless the country receiving your information has the same or higher data protection standards than those in the UK and EU.
Use of Personal Information
Our legal basis for obtaining, holding, and processing personal information via this website is as follows:
- We process personal information where necessary for the performance of a contract;
- If you contact us to make a general enquiry, we use your personal information to respond to your query and provide the information you have requested.
We collect the following information from you using a secure third-party provider (stripe.com) to process payments when you place an order:
- Contact information including email address, postal address, and phone numbers;
- Delivery postal address;
- Payment details, including payment card details and billing address.
We access the contact and delivery information for the performance of our contracted services. No payment details are accessed and remain private between you and the third-party payment processor.
At our discretion, we may disclose your personal contact information to third parties such as delivery companies to fulfil our contractual obligations.
We only keep personal information for as long as we have a use for it or are legally obliged to keep it. Personal data held in our electronic and paper filing systems is destroyed or deleted when it is no longer required.
We will not sell, share, distribute, or disclose your personal information without your consent unless it is necessary to deliver our services or believe a regulator or law enforcement agency requires it or to comply with any other applicable legal obligation safeguarding.
We do not process any special categories of personal information, and we do not undertake any automated processing or profiling of any personal information.
We use SSL encryption to protect personal information online and in transit to and from this website.
You have the right to:
- Request a copy of the information we hold about you. Requests should be emailed to us via the website “contact us” page. We will respond within 30 days;
- Tell us to change your personal information if it is incomplete or inaccurate;
- Ask us to delete or remove your data if there is no compelling reason for us to continue using or holding this information.
Please contact us if you think our records are inaccurate or wish us to delete your personal information.
Website User Data
We collect personal data from users of our website. When the user completes the subscription process on our website, our secure third-party provider stores the personal information on their systems. Only authorised administrators of the site and employees of Cosocial can view and edit this information. All authorised users are subject to appropriate confidentiality agreements.
The website hosting provider may record interactions with this website in the form of website server logs, including records of your remote IP Address, the resources accessed on our site, date and time information and details of your browser. This data collection is part of their website analytics services and is outside of our control.
Links to External Websites
This website may contain hyperlinks to websites owned and operated by third parties, including social media companies and service providers. Selecting any of these external links establishes a direct connection between your browser and these third parties’ servers. These websites and the personal data they collect from you are outside of our control, and they will have separate privacy policies and user data collection mechanisms. We do not accept any responsibility or liability for such third-party websites’ privacy practices, and your use of such sites is at your own risk.