privacy policy
what i collect and what i don't
last updated 18 august 2026.
what gets collected
| what | why |
|---|---|
| name, email, shipping address | to send you the thing |
| order history | support, returns, warranty |
| email address, if you subscribe | to email you |
| basic analytics | to see which pages work |
card details
i never see them. payments go straight to the processor. i get a confirmation and the last four digits, nothing else.
who it's shared with
- the payment processor, to take the payment
- the fulfilment partner, to pack and post it
- the carrier, for the address
- the email platform, if you subscribed
that's it. your details are not sold, rented or traded, and given what this shop sells, that matters more than usual.
how long
order records for 7 years because tax law says so. marketing consent until you withdraw it. analytics for 14 months.
your rights
you can ask for a copy of what's held, ask for it to be corrected, or ask for it to be deleted. email hello@cosara.com and it gets done within 30 days. gdpr and ccpa rights apply where they apply.
same caveat as the terms: plain-language template, not yet reviewed by a lawyer for your jurisdiction.