Privacy policy
PRIVACY & COOKIES POLICY
Last updated: February 28, 2026
This Privacy & Cookies Policy explains how Kocoon, operated by Romfeld Evelin-Rebekka PFA (PFA, Romania, Trade Registry No: F8/527/2025, CUI: 53180050), collects, uses, and protects your personal information, and how we use cookies and similar technologies on kocoon.shop.com.
By using or accessing the Services, you consent to the collection, use, and disclosure of your information as described in this policy.
1. Scope of the Policy
Kocoon operates this store and website, including all related information, content, features, tools, products, and services (the “Services”) to provide a curated shopping experience.
Shopify powers the website and enables us to provide the Services. If there is a conflict between our Terms of Service and this Privacy & Cookies Policy, this Policy controls with respect to the collection, processing, and disclosure of your personal information.
2. Personal Information We Collect
"Personal information" refers to information that identifies or can reasonably be linked to you. It does not include anonymous or de-identified information.
Depending on how you interact with the Services, we may collect:
Contact details: Name, address, billing and shipping address, phone number, email.
Financial information: Credit/debit card numbers, transaction details, payment confirmation.
Account information: Username, password, security questions, preferences, settings.
Transaction information: Items viewed, added to cart or wishlist, purchased, returned, exchanged, or canceled.
Communications: Customer support inquiries or other communications with us.
Device information: Device type, browser, network, IP address, unique identifiers.
Usage information: How and when you interact with our Services.
3. Sources of Personal Information
We may collect personal information from:
Directly from you: When you create an account, use the Services, or communicate with us.
Automatically: Through the Services, including cookies and similar technologies.
Service providers: Vendors, shipping partners (e.g., NextSmartShip), or IT providers processing information on our behalf.
Partners or third parties: For analytics, marketing, or fulfillment purposes.
4. How We Use Your Personal Information
We use personal information for the following purposes:
Provide, tailor, and improve Services: Process payments, fulfill orders, remember preferences, manage your account, facilitate returns, enable product reviews, and create a personalized shopping experience.
Marketing and advertising: Send promotions via email, text, or mail; show online advertisements based on activity and preferences.
Security and fraud prevention: Authenticate accounts, secure payments, detect fraud, protect public safety.
Communicating with you: Respond to customer support inquiries and maintain business relationships.
Legal reasons: Comply with law, respond to valid legal processes, enforce our terms, or protect our rights.
5. How We Disclose Personal Information
We may share your information with:
- Shopify and service providers: For IT management, payment processing, analytics, customer support, cloud storage, fulfillment, and shipping.
- Business and marketing partners: For advertising and promotional services.
- Third-party services with your consent: For order fulfillment or social media integration.
- Affiliates or corporate group members
- Legal obligations or business transactions: Mergers, bankruptcy, legal requests, or enforcement of terms.
Shopify may process personal information outside your country to provide enhanced features. For details, visit the Shopify Privacy Policy.
6. Cookies and Similar Technologies
We use cookies and similar technologies to improve your experience and for analytics, marketing, and operational purposes.
What Are Cookies?
Cookies are small text files placed on your device to:
Recognize your device on return visits
Remember your preferences
Collect anonymous analytics and marketing information
Cookies may be set by Kocoon (first-party) or by third parties, including Shopify and NextSmartShip.
Types of Cookies We Use
Essential cookies: Required for website functionality, checkout, and security (e.g., Shopify session cookies).
Performance & Analytics cookies: Collect anonymous data to improve website performance (e.g., Google Analytics, Shopify analytics).
Functionality cookies: Remember preferences such as language, region, and shopping cart contents.
Marketing / Advertising cookies: Track activity for promotions and retargeting (e.g., Facebook Pixel, Google Ads).
Third-Party Cookies (NextSmartShip Integration)
NextSmartShip may place cookies to:
Track shipping and delivery status
Optimize shipping workflow
Enable secure customer communication
These cookies do not collect payment or banking information.
7. Consent and Managing Cookies
A cookie banner will appear on first visit to request consent.
You may accept all cookies, reject non-essential cookies, or customize preferences.
Cookies can be managed or deleted through your browser settings.
Blocking essential cookies may prevent parts of the website from functioning, including checkout.
8. Data Security and Retention
We implement reasonable measures to protect your data but cannot guarantee perfect security.
Personal information is retained as long as necessary to:
Maintain accounts
Provide Services
Comply with legal obligations
Resolve disputes
Enforce contracts and policies
9. Your Rights
Depending on your location (EU/UK), you may have the following rights:
Access / Know: Request access to your personal information.
Delete: Request deletion of your personal information.
Correct: Correct inaccuracies.
Portability: Receive your data and request transfer to a third party.
Manage communications: Opt out of promotional emails anytime.
Object / Restrict processing: Request limits on processing for certain purposes.
Withdraw consent: Where processing is based on consent.
We may require identity verification and the right to refuse requests as permitted by law. For EU residents, you can also lodge complaints with your local data protection authority.
10. International Transfers
Your personal information may be transferred, stored, or processed outside your country, including outside the EU or UK. We rely on recognized transfer mechanisms, such as Standard Contractual Clauses, to ensure adequate protection.
11. Children
The Services are not intended for children under the age of majority in your jurisdiction. We do not knowingly collect personal information from children. Parents/guardians may request deletion of data collected from minors.
12. Changes to This Policy
We may update this policy to reflect changes to our practices, services, or legal requirements. The “Last Updated” date indicates the most recent version.
13. Contact
For questions or to exercise your rights, contact:
Email: kocoon.shop@gmail.com