Privacy Policy

Cocoa & Company

Effective Date: January 1, 2026

At Cocoa & Company, LLC (“we,” “our,” “us”), your privacy is important to us. This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website, purchase our digital products, or sign up for our services (collectively, the “Services”).

By using our Services, you agree to the terms of this Privacy Policy.

1. Information We Collect

When you use our Services, we may collect the following information:

a) Personal Information

Name
Email address
Billing and shipping information
Payment information (processed securely by Shopify or other payment processors)

b) Usage Information

IP address
Browser type
Pages visited
Referring websites
Other analytics information

c) Cookies & Tracking

We may use cookies and similar technologies to improve your experience, analyze trends, and personalize content. You can manage cookies through your browser settings.

2. How We Use Your Information

We use your information to:

Process and fulfill orders
Send receipts, confirmations, and product updates
Respond to inquiries and provide support
Improve our website, products, and Services
Send marketing emails and promotional offers (you may unsubscribe at any time)
Comply with legal obligations

3. Sharing Your Information

We do not sell your personal information. However, we may share information in the following limited circumstances:

Service Providers: Shopify, payment processors, email service providers, and hosting services that help operate our business
Legal Requirements: If required by law, regulation, or legal process
Business Transfers: In the event of a merger, sale, or acquisition

All service providers are required to protect your data and use it only for the purposes for which we share it.

4. Your Rights

Depending on your location, you may have the following rights:

Access and review the personal information we hold about you
Correct or update your information
Request deletion of your information
Opt out of marketing communications

To exercise your rights, contact us at [your support email].

5. Data Security

We take reasonable measures to protect your information, including encryption, secure servers, and restricted access. However, no system is completely secure, and we cannot guarantee absolute security of your data.

6. Children’s Privacy

Our Services are not directed to children under 13 (or the age of majority in your jurisdiction). We do not knowingly collect personal information from children. If we become aware that we have collected such information, we will delete it promptly.

7. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for the privacy practices or content of these sites. We encourage you to review the privacy policies of any external sites you visit.

8. Cookies & Analytics

We use Shopify analytics, Google Analytics, and other tracking tools to understand website usage and improve our Services. These tools collect information such as browser type, device, IP address, and pages visited.

You may disable cookies in your browser settings, but some parts of our site may not function properly.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date. Your continued use of the Services after changes indicates your acceptance of the updated Privacy Policy.

10. Contact Us

If you have questions, concerns, or requests regarding your personal information, please contact us:

Email: support@cocoaandcompany.com

Address: 300 SE 12th Street, Suite 600 - Fort Lauderdale FL 33301

International/California Privacy Rights

GDPR & CCPA Compliance Addendum

1. GDPR – European Union Users

If you are located in the European Economic Area (EEA), you have the following rights regarding your personal data:

Access: You can request a copy of the personal information we hold about you.
Correction: You may request corrections to your data if it is inaccurate.
Deletion (“Right to be Forgotten”): You may request deletion of your data, where applicable.
Restriction & Objection: You can request that we restrict processing or object to certain types of processing.
Data Portability: You may request a machine-readable copy of your data for transfer to another service.
Consent Withdrawal: Where processing is based on your consent, you can withdraw it at any time.

How to exercise these rights:
Contact us at [your support email]. We will respond within the timeframe required by law.

2. CCPA – California Residents

If you are a California resident, you have the following rights under the California Consumer Privacy Act:

Right to Know: You can request information about the personal data we collect, use, share, or sell.
Right to Delete: You may request deletion of personal data we have collected.
Right to Opt-Out of Sale: We do not sell your personal information.
Non-Discrimination: You will not be discriminated against for exercising your privacy rights.

How to exercise these rights:
Submit a request by emailing [your support email]. We will verify your identity and respond within the legal timeframe.

3. Data Retention

We retain personal information only as long as necessary to provide services, comply with legal obligations, or enforce agreements.

4. Cookies & Tracking for GDPR/CCPA

EU users will be notified of cookies on first visit and may consent to non-essential cookies.
California users may opt out of cookies used for marketing or analytics.

5. Contact for Privacy Requests

For all GDPR, CCPA, or other privacy-related inquiries: