UK Privacy Policy - Cosi London Ltd
Privacy Policy
Cosi London Ltd
Last updated: 24/11/2025
For US visitors, Shopify automatically provides a separate ‘Your Privacy Choices’ page to meet US state privacy laws. This does not apply to UK customers.
1. Introduction
Cosi London Ltd (“we”, “us”, “our”) is committed to protecting your personal information and respecting your privacy.
This Privacy Policy explains how we collect, use, store, and share your personal data when you visit our website or make a purchase from us.
Our ICO Registration (UK Data Protection)
Cosi London Ltd is fully registered with the UK Information Commissioner’s Office (ICO).
ICO Registration Number: ZB994835
This confirms our commitment to UK GDPR and responsible data handling.
You can verify this registration on the ICO website.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. Information We Collect
We collect the following types of information:
A. Information You Provide
Name
Email address
Billing and shipping address
Phone number (if provided)
Payment information (processed securely by payment providers, not stored by us)
Order and return details
Emails or messages you send us
B. Information Collected Automatically
When you visit our website, Shopify automatically collects:
IP address
Browser type and device information
Pages visited and time spent on the site
Cookies and tracking data
Shopping cart activity
This data helps us improve our website and service.
C. Information From Cookies
Cookies are small files placed on your device to help the site function.
They may be used for:
essential website functions
analytics (e.g., Shopify analytics)
remembering your preferences
personalising advertising (if you consent)
You can control or disable cookies through your browser settings.
3. How We Use Your Information
We use your information to:
Process and fulfil your orders
Communicate with you about your purchase
Respond to enquiries
Improve our products and website
Prevent fraud
Personalise your browsing experience
Send marketing emails (only if you consent)
4. Sharing Your Information
We share your personal data only when necessary:
A. With Shopify (our website provider)
Shopify powers our online store and processes technical and order-related data.
Shopify’s Privacy Policy: https://www.shopify.com/legal/privacy
B. With Payment Providers
Your payment details are processed securely by:
Shopify Payments / Stripe
PayPal (if used)
We do not store card details.
C. With Service Providers
Such as:
Delivery and courier companies
Email providers
Marketing and analytics tools (only where consented)
D. Legal Requirements
We may share data if required by law or to prevent fraud.
We never sell your personal data.
5. Marketing Communications
You will only receive marketing emails if you:
opted in on our website, or
subscribed through a form or checkout tick-box
You can unsubscribe at any time using the link in every email or by contacting us.
6. International Data Transfers
Shopify may store your data in Canada or the United States.
They use legally approved safeguards such as:
Standard Contractual Clauses (SCCs)
UK-approved transfer mechanisms
7. How Long We Keep Your Information
We keep your data only as long as necessary, for example:
Order information: 6 years (for tax and accounting purposes)
Marketing data: until you unsubscribe
Enquiries: typically 12 months
8. Your Rights Under UK GDPR
You have the right to:
Access your personal data
Correct inaccurate data
Request deletion (“right to be forgotten”)
Restrict processing
Object to certain processing, including marketing
Withdraw consent
Request data portability
To exercise your rights, contact us at:
We respond promptly and within legal timeframes.
9. Cookies & Tracking Technologies
You can manage your cookie preferences through:
your browser settings
privacy tools, such as Global Privacy Control (GPC)
If your browser sends a GPC signal, we will treat it as an opt-out of marketing cookies.
10. Children’s Privacy
Our website is not intended for children under 16, except where adults purchase baby products.
We do not knowingly collect data from children.
11. Changes to This Policy
We may update this Privacy Policy from time to time.
Any updated version will be posted on this page.
12. Contact Us
If you have any questions about this policy or how your data is handled, you can contact us at:
Email: hello@cosilondon.com
Company: Cosi London Ltd
ICO Registration Number: ZB994835