Privacy Policy

Last updated: August 30, 2026

This Privacy Policy describes how Cozy Sips ("we," "us," or "our") collects, uses, and shares your personal information when you visit cozysipsstore.com (the "Site") or make a purchase.

Information We Collect

When you visit the Site, we automatically collect certain information about your device, including your web browser, IP address, time zone, and some of the cookies installed on your device. As you browse the Site, we also collect information about the individual pages you view, what websites or search terms referred you to the Site, and how you interact with the Site.

When you make a purchase (or attempt to make one), we collect:

Your name
Billing and shipping addresses
Payment information (processed securely by Shopify Payments — we never see or store your full card number)
Email address
Phone number (optional)

When you sign up for our newsletter, we collect your email address and your consent to receive marketing emails.

How We Use Your Information

Order fulfillment: to process and ship your order, send order updates, and handle returns
Customer support: to respond to your emails and questions
Marketing (with your consent): to send our newsletter, brew tips, and monthly impact report
Analytics: to understand how the Site is used and improve it
Fraud prevention: to screen orders for risk

We share your information with trusted third parties only as needed to run the business:

Shopify — powers our store, processes payments, handles checkout
USPS / UPS / DHL — ships your order
Shopify Email — sends our marketing emails (only to subscribers)
Google Analytics — measures site traffic (anonymized where possible)

We do not sell your personal information. Ever.

Cookies

The Site uses cookies to keep your shopping cart, remember your preferences, and measure traffic. You can disable cookies in your browser settings, but some parts of the Site (like the cart) may stop working.

Your Rights

If you're in the European Economic Area, UK, or California, you have the right to:

Access the personal information we hold about you
Request correction or deletion
Object to processing or request data portability
Opt out of marketing emails at any time (every email has an unsubscribe link)

To exercise any of these rights, email hello@cozysipsstore.com.

Data Retention

We keep order records for 7 years (required by tax law). We keep newsletter subscription data until you unsubscribe. We delete analytics data after 26 months.

Security

The Site is hosted on Shopify, which is PCI-DSS compliant. Payment information is encrypted in transit. We never store your full card number on our servers.

Meta (Facebook) Platform Integration

We use Meta's (Facebook's) APIs to publish content to our Facebook Page and to read aggregate performance data from our Meta advertising account. This integration is operated solely by us to manage our own Pages and ads — we do not extend it to other businesses or end users. The following Meta platform permissions are used:

pages_show_list — to list the Facebook Pages we manage
pages_read_engagement — to read engagement metrics (likes, comments, reach) on posts we have published
pages_manage_posts — to publish new content to our own Facebook Page
ads_read — to read advertising performance metrics for our own ad account
instagram_basic — to read our linked Instagram Business account profile
instagram_content_publish — to publish new content to our Instagram Business account
instagram_manage_insights — to read engagement and reach analytics on Instagram posts

What we send to Meta: Only content we choose to publish (blog posts, product announcements, social captions and imagery) and the technical credentials needed to authenticate as the page or business owner. We do not share customer personal information (name, email, shipping address, payment information) with Meta through these integrations.

What Meta collects: When you interact with content we publish via Meta's APIs — for example, liking, commenting on, or sharing a post on our Facebook Page, or reacting to or commenting on one of our Instagram posts — Meta collects information about your interaction under Meta's own privacy policy, available at facebook.com/policy.php. Instagram is operated by Meta and shares the same underlying data practices.

Credentials and storage: Access tokens and API credentials used for Meta integration are stored encrypted in our secure credential manager and refreshed on a rolling basis. They are never embedded in the Site or exposed to browsers.

Data retention: We retain aggregate engagement and advertising metrics for up to 26 months for ongoing business analysis. We do not retain user-level data collected through Meta APIs beyond what Meta itself stores.

Your choices: You can manage how Meta uses your data for advertising purposes through Meta's ad preferences at facebook.com/adpreferences, and you can opt out of Meta-cooking data collection about your interactions with our Page by adjusting your Facebook settings.