This Privacy Policy applies to personal information processed through cookaura.bond, our online storefront, order and account functions, customer support communications and other interactions that refer to this policy.

It does not control the independent privacy practices of third-party websites, platforms or services that may be accessible through the Services. Those parties may process information under their own privacy notices and terms.

• Directly from you: when you place an order, create an account, contact us, subscribe to communications or otherwise provide information.
• Automatically through the Services: when your browser or device interacts with the store, cookies, logs and similar technologies.
• From commerce and payment service providers: when they support checkout, payment authorization, fraud prevention, hosting or store operations.
• From delivery and operational providers: when they provide shipment, order, address or delivery status information.
• From analytics or communication providers: when they help us understand store use or manage permitted messages.
• From other lawful sources: where information is made available with appropriate authorization or as otherwise permitted by law.

• Provide, operate, maintain and improve the Services.
• Process orders, payments, returns, refunds and related transactions.
• Confirm purchases and communicate order or delivery updates.
• Create and administer customer accounts where account features are available.
• Respond to questions, requests, feedback and customer support matters.
• Remember preferences and provide relevant store functionality.
• Detect, investigate and help prevent fraud, misuse, security incidents or prohibited activity.
• Maintain records, enforce applicable terms and protect legal rights.
• Comply with applicable legal, regulatory, accounting and reporting obligations.
• Send promotional communications where permitted and consistent with your choices.
• Analyze general store performance, product interest and customer interactions.
• Support a business transaction, reorganization or transfer where permitted by law.

Where applicable law requires a particular legal basis for processing, the basis may include performance of a contract, compliance with a legal obligation, our legitimate interests, protection of vital interests or consent.

Cookies are small files or identifiers placed on or accessed through a browser or device. We and service providers may use cookies, pixels, tags, local storage, software development tools and similar technologies.

These technologies may support:

• Essential functions: enabling checkout, maintaining a shopping cart, remembering selections and supporting account access.
• Security: helping detect suspicious activity, protect transactions and maintain store integrity.
• Preferences: remembering language, region, display or communication choices.
• Analytics: understanding how visitors use the store and where the customer experience may be improved.
• Advertising or measurement: measuring permitted campaigns or presenting relevant communications where those tools are active.

You can usually adjust cookie permissions through your browser settings. Blocking certain cookies may affect checkout, account functions, saved preferences or other parts of the store. Where additional privacy controls are presented through the Services, you may use those controls to record available choices.

We may disclose personal information to the following categories of recipients, subject to appropriate purposes and applicable requirements:

• Ecommerce and hosting providers that support the storefront, checkout, accounts and store infrastructure.
• Payment processors and financial providers that authorize, process or document transactions.
• Delivery and logistics providers that support shipment, tracking, address verification and delivery.
• Customer service and communication providers that help us respond to messages or deliver permitted notices.
• Analytics, security and technology providers that support performance, fraud prevention, monitoring and store improvement.
• Professional advisers such as legal, accounting, insurance or compliance providers where relevant.
• Government authorities or other parties where disclosure is required by law, valid legal process or necessary to protect rights and safety.
• Parties to a business transaction involving a possible or completed merger, financing, restructuring, sale or transfer of assets.
• Other parties at your direction or with your consent.

Service providers may process information on our behalf or under their own legal responsibilities, depending on the service and the circumstances.

When you make a purchase, payment information is submitted through the checkout and processed by payment and commerce service providers. These providers may collect payment card details, billing information, authentication data and transaction information under their own terms and privacy practices.

CookAura may receive transaction confirmations, payment status, payment method information, fraud indicators and limited payment references needed to administer an order, maintain records or provide customer service.

We retain personal information for as long as reasonably necessary for the purposes described in this policy, including providing the Services, completing transactions, maintaining appropriate business records, resolving disputes, protecting security and complying with legal, tax, accounting or reporting obligations.

The appropriate period may depend on the type of information, the relationship involved, the sensitivity of the data, the potential risk of harm and whether the purpose can be achieved through other means. When information is no longer reasonably required, it may be deleted, anonymized or retained in a restricted form where permitted or required.

We use administrative, technical and organizational measures intended to protect personal information against unauthorized access, loss, misuse, alteration or disclosure. The safeguards used may vary according to the nature and sensitivity of the information.

No method of transmission over the internet or method of electronic storage can be guaranteed to be completely secure. Please use care when sending information, protect account credentials and contact us if you believe an interaction with CookAura may no longer be secure.

CookAura and its service providers may process personal information in the United States and other countries. Privacy and data protection laws in those locations may differ from the laws where you live.

Where required, appropriate measures may be used to support lawful transfers and processing. These measures depend on the locations, service providers and legal requirements involved.

The Services are not directed to children, and we do not knowingly collect personal information from children where parental or guardian consent would be required by applicable law.

A parent or guardian who believes a child has provided personal information through the Services may contact us so that we can review the request and take appropriate action.

The Services may include integrations, features or references involving third parties. CookAura does not control the content, security or privacy practices of independent third parties.

Before providing personal information to another service, review the privacy notice and terms provided by that party.

We may update this Privacy Policy from time to time. A revised policy will be posted on this page with an updated effective date. Where appropriate or required, additional notice may be provided.

Continued use of the Services after an updated policy becomes effective is subject to the revised policy, except where applicable law requires a different form of notice or consent.