Privacy Policy
At Cosmic Sound Bowls®, we take your privacy seriously and are committed to protecting your personal data. This privacy policy explains how we collect, use, and safeguard your data, and outlines your rights under the EU General Data Protection Regulation (GDPR).
1. Who We Are
Cosmic Sound Bowls®
Owner: Marilyn Ajayi
Email: contact@cosmicsoundbowls.com
We are the data controller responsible for processing your personal data.
2. Personal Data We Collect
We may collect the following personal data from you when you interact with our website, make a purchase, or contact us:
- Name, email address, shipping address, billing address
- Payment details (Note: We do not store payment data. It is processed by third-party services like Shopify)
- Browsing and usage data from cookies and pixels (e.g., Facebook Pixel, Google Analytics)
3. Legal Basis for Processing Data
We process your personal data based on the following legal grounds:
- Contractual necessity: To fulfill our contractual obligations (e.g., processing orders, shipping products).
- Legitimate interest: To improve our services and optimize user experience (e.g., analyzing website performance with Google Analytics).
- Consent: Where you have explicitly given consent, such as for marketing purposes (e.g., newsletters).
- Legal obligation: To comply with legal requirements (e.g., tax and accounting regulations).
4. How We Use Your Data
We use your personal data for the following purposes:
- Processing and fulfilling your orders
- Providing customer support
- Sending you updates and promotional material (with your consent)
- Analyzing website performance and user behavior through third-party tools like Shopify Analytics, Google Analytics, and Facebook Pixels
5. Data Sharing
We do not sell or share your data with third parties for marketing purposes. However, we share your data with third-party service providers for the following reasons:
- Shopify: For processing orders and payments
- Shiphero: For shipping and logistics
- Google Analytics & Facebook Pixel: For analyzing site performance and marketing
All third-party providers we work with comply with GDPR and ensure appropriate data protection measures are in place.
We retain your personal data for as long as necessary to fulfill the purposes outlined in this privacy policy or as required by law. The duration depends on the type of data and the applicable legal obligations.
- Shopify: Customer data is stored as long as it is necessary to complete transactions, fulfill orders, and comply with legal requirements such as tax and accounting laws. This data may be retained for up to 7 years for tax compliance purposes.
- Google Analytics: We use Google Analytics to track website usage and performance. The retention period for user and event data in Google Analytics can be set between 14 months and 50 months, or until the data is no longer required, depending on the preferences set in our Analytics account.
- Facebook Pixel: Data collected through Facebook Pixel is stored for as long as necessary to achieve the purposes of advertising and marketing, or until it is no longer required. Facebook may retain this data for varying periods depending on usage, after which it is either deleted or anonymized.
You have the right to request access to, correction of, or deletion of your personal data at any time. Please contact us at contact@cosmicsoundbowls.com to exercise your rights.
6. Data Transfers Outside the EU
Since some of our third-party providers (such as Shopify and Shiphero) may be based outside the European Economic Area (EEA), your data may be transferred to, and stored in, a non-EEA country. We ensure that any such transfers are protected under data protection laws through mechanisms such as standard contractual clauses or Privacy Shield certification.
7. Data Retention
We retain your personal data for as long as necessary to fulfill the purposes outlined in this privacy policy. The retention period depends on the type of data and the purpose for which it is processed. For example:
- Order-related data will be kept for 7 yeards due to accounting and tax regulations.
- Data collected for marketing purposes will be stored until you withdraw your consent or request deletion.
8. Your Rights
You have the following rights regarding your personal data:
- Right to Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request that we correct any inaccurate data.
- Right to Erasure: You can request that we delete your data (“Right to be forgotten”).
- Right to Restrict Processing: You can ask us to stop processing your data in certain circumstances.
- Right to Data Portability: You can request that we transfer your data to another service provider.
- Right to Object: You can object to data processing based on legitimate interests or for direct marketing.
To exercise any of these rights, please contact us at contact@cosmicsoundbowls.com.
9. Cookies and Tracking
Our website uses cookies and tracking technologies like Facebook Pixels and Google Analytics. Cookies help us improve your browsing experience and gather data about how you interact with our site. You can control cookie preferences in your browser settings.
10. Automated Decision-Making and Profiling
We do not engage in automated decision-making that has a legal or significant impact on you. Profiling is done solely for marketing purposes to tailor our services to your interests, and only with your consent.
11. Complaints
If you believe that we have not processed your data in accordance with the GDPR, you have the right to lodge a complaint with a supervisory authority.
In Germany, this is the Bundesbeauftragte für den Datenschutz und die Informationsfreiheit (BfDI).