Privacy policy

Last updated: September 2, 2026

This Privacy Policy explains how CozyBead (“CozyBead,” “we,” “us,” or “our”) collects, uses, discloses and protects personal information when you visit cozybead.com, buy our products, contact us or otherwise use our services (the “Services”). CozyBead operates from Hong Kong. Shopify provides the commerce platform used by our online store.

1. Personal information we collect

Depending on how you use the Services, we may collect:

  • Contact and account data, including your name, email address, telephone number, billing and shipping addresses, account credentials and communication preferences.
  • Order and transaction data, including products, variants, quantities, prices, discounts, delivery method, returns, refunds and customer-service history.
  • Payment data. Payment-card and other payment details are handled by Shopify and the payment providers available at checkout. We generally receive transaction status and limited payment identifiers rather than full card numbers.
  • Device and usage data, including IP address, browser, device identifiers, cookie identifiers, approximate location, pages viewed, searches, referring pages, cart activity and interactions with emails or advertisements.
  • Communications and content you choose to provide, such as support messages, product reviews, survey responses, photographs or project feedback.
  • Information from service providers and partners, such as payment confirmation, fraud signals, shipping updates, analytics and advertising attribution.

2. How we use personal information

We use personal information to:

  • provide the store, process payments, fulfill and deliver orders, manage returns and provide customer service;
  • create and secure accounts, authenticate users, detect fraud and protect the Services;
  • communicate about orders, policy changes, products and promotions, subject to your choices and applicable law;
  • measure store performance, understand how customers use the Services and improve our products, website and support;
  • personalize content and, where permitted, measure or deliver advertising;
  • comply with tax, accounting, consumer-protection, sanctions, law-enforcement and other legal obligations; and
  • establish, exercise or defend legal claims.

3. Legal bases for EEA and UK users

Where the EU or UK GDPR applies, our legal bases may include performance of a contract, compliance with legal obligations, our legitimate interests in operating and securing the Services, and consent where law requires it. You may withdraw consent at any time without affecting earlier lawful processing.

4. Cookies and similar technologies

We and our service providers use cookies, pixels and similar technologies for essential store functions, security, preferences, analytics and advertising. Available controls may include the cookie banner or privacy settings displayed on the site, your browser settings and the data sharing opt-out page. Blocking essential cookies may prevent checkout or account features from working.

Where recognized and required by applicable law, we process supported opt-out preference signals, such as Global Privacy Control, as a request to opt out of sale or sharing for the browser and device sending the signal.

5. How we disclose information

We may disclose personal information to:

  • Shopify and providers supporting hosting, checkout, payments, fraud prevention, analytics, marketing, customer service, delivery, returns, professional advice and IT security;
  • carriers, warehouses and fulfillment partners as needed to deliver or recover an order;
  • advertising or analytics partners, subject to applicable consent and opt-out requirements;
  • government authorities or other parties when required by law or reasonably necessary to protect rights, safety and security; and
  • a buyer, investor or successor in connection with a proposed or completed corporate transaction, subject to appropriate safeguards.

We do not disclose personal information for money as a standalone product. Some advertising-related disclosures may be treated as a “sale,” “sharing” or targeted advertising under certain US state laws. Eligible users may opt out as described below.

6. International transfers

CozyBead operates from Hong Kong and uses providers in multiple countries. Your information may therefore be processed outside your place of residence. Where required, we use recognized safeguards such as adequacy decisions, contractual protections or other lawful transfer mechanisms. Shopify describes its own processing and transfer practices in its privacy materials.

7. Retention

We retain personal information only for as long as reasonably necessary for the purposes described above, including providing an account, completing orders, meeting tax and accounting requirements, resolving disputes, enforcing agreements and maintaining security. The period varies by data type, transaction status and legal obligation. We delete or de-identify information when it is no longer needed, unless law permits or requires longer retention.

8. Your privacy rights

Depending on your location, you may have rights to access, correct, delete, restrict or object to processing, receive a portable copy, withdraw consent, opt out of certain advertising, sale or sharing, and appeal a denied request. You may also complain to the privacy or data-protection authority where you live.

To exercise a right, email support@cozybead.com and describe the request. We may verify your identity and authority before acting. Authorized agents may submit requests where law permits. We will not discriminate against you for exercising applicable privacy rights.

9. Security

We use administrative, technical and organizational measures intended to protect personal information. No transmission or storage system is completely secure, so we cannot guarantee absolute security. Keep account credentials confidential and contact us if you suspect unauthorized use.

10. Children

The Services are intended for adults purchasing craft products and are not directed to children under 13. We do not knowingly collect personal information from children under 13. If you believe a child has provided information, contact us so we can investigate and take appropriate action. In jurisdictions with a higher consent age, minors should use the Services only with appropriate parental or guardian involvement.

11. Third-party links

The Services may link to websites or services we do not control. Their privacy practices are governed by their own policies, and we are not responsible for those practices.

12. Changes to this policy

We may update this policy to reflect changes in our practices, services or legal requirements. We will post the revised version and update the date above. Where required, we will provide additional notice or request consent.

13. Contact us

Email: support@cozybead.com
Telephone: +852 5341 2253
Address: Room 701, Unit 108, 7/F, Tower B, New Mandarin Plaza, 14 Science Museum Road, Tsim Sha Tsui, Kowloon, Hong Kong.