Privacy Policy

Your privacy is important to us. This Privacy Policy explains how Cocomera ("we," "us," or "our") collects, uses, and discloses your personal information when you visit, use our services, or make a purchase from cocomera.se (the "Site"), or otherwise communicate with us regarding the Site (collectively, the "Services"). Whether you are a customer, website visitor, or another individual whose information we collect, we are committed to handling your data securely and in compliance with applicable laws.

When you shop at Cocomera.se, we process the personal data you provide and any data generated while browsing or making a purchase. Cocomera AB (Org. No. 559278-0372) is the personal data controller responsible for processing this information. We ensure that all personal data processing is conducted securely and in accordance with legal requirements. 

Please read this Privacy Policy carefully to understand how we protect your personal integrity.

Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes to our practices or for other operational, legal, or regulatory reasons. We will post the revised Privacy Policy on the Site and take any other steps required by applicable law.

CONTACT

Should you have any questions about our privacy practices or this Privacy Policy, or if you would like to exercise any of the rights available to you, email or contact us at: 

info@coco-mera.com

Telegramvägen 4,

13235 Saltsjö-Boo
SWEDEN

For the purpose of applicable data protection laws and if not explicitly stated otherwise, we are the data controller of your personal information.

HOW WE COLLECT AND USE YOU PERSONAL INFORMATION

To provide the Services, we collect and have collected over the past 12 months personal information about you from a variety of sources, as set out below. The information that we collect and use varies depending on how you interact with us.

In addition to the specific uses set out below, we may use information we collect about you to communicate with you, provide or improve or improve the Services, comply with any applicable legal obligations, enforce any applicable terms of service, and to protect or defend the Services, our rights, and the rights of our users or others.

Which personal data is processed?

Cocomera collects personal data that you provide directly when using our Services, such as placing an order, contacting customer service, or subscribing to our newsletter. Some features of our Services may require you to submit certain information, and choosing not to provide it may limit your access to specific functionalities. Additionally, we collect data through cookies to improve your user experience and manage your purchases.

The personal data we collect may include:

• Contact Information: Name, email address, phone number, delivery address, and billing address.

• Order & Shopping Details: Purchase history, payment confirmation, order details, loyalty points, product reviews, referrals, and gift cards.

• Account Information: Username, password, security questions, and other details for account security.

• Technical Data: IP address and browsing activity on our website.

• Customer Support Data: Any information included in communications with us, such as emails or messages via our Services.

Finally, we may obtain information about you from third parties, including from vendors and service providers who may collect information on our behalf, such as:

• Companies who support our Site and Services, such as Shopify.

• Our payment processors, who collect payment information (e.g., bank account, credit or debit card information, billing address) to process your payment in order to fulfill your orders and provide you with products or services you have requested, in order to perform our contract with you.

• When you visit our Site, open or click on emails we send you, or interact with our Services or advertisements, we, or third parties we work with, may automatically collect certain information using online tracking technologies such as pixels, web beacons, software developer kits, third-party libraries, and cookies.

Any information we obtain from third parties will be treated in accordance with this Privacy Policy

Cocomera may share your data with trusted third parties, including payment service providers, communication service providers, and business partners, in compliance with applicable laws. We document all email communications to ensure high-quality customer service. By placing an order, you agree to our terms and privacy policy, which allows us to store and use your data to fulfill legal obligations (such as accounting), process orders, facilitate future purchases or returns, update your order status, and send promotional offers via SMS, email, or direct mail.

How We Use Your Personal Information

Cocomera uses your personal information to provide and improve our Services, process transactions, communicate with you, and ensure security and compliance.

• Providing Products and Services
   We use your personal data to process your payments, fulfill orders, arrange shipping, and manage returns or exchanges. This includes sending notifications about your account, purchases, and order status. We also enhance your shopping experience by enabling Shopify to match your account with other Shopify services, as outlined in Shopify’s Privacy Policy.
  

• Account Management & Customer Support
   Your information allows us to create and manage your customer account, so you can access past orders, loyalty points, returns, and exclusive features. We also use it to respond to your inquiries, handle complaints, and provide customer support.
  

• Marketing & Personalized Communication
   We may use your information for marketing and promotional purposes, such as sending targeted messages via email, SMS, or social media. This helps us personalize your experience and display relevant advertisements for products and services. If you are an EEA resident, this processing is based on our legitimate interest in selling products under Art. 6 (1) (f) GDPR.
  

• Security & Fraud Prevention
   We process your personal data to prevent fraud, unauthorized transactions, and misuse of our Services. This includes verifying your identity, ensuring compliance with the legal minimum age for online purchases, and protecting your account information. If you believe your account has been compromised, please contact us immediately. For EEA residents, this processing is based on our legitimate interest in website security under Art. 6 (1) (f) GDPR.
  

• Legal Compliance & Order Notifications
   We use your data to comply with legal obligations, such as tax and accounting regulations. Additionally, we may contact you regarding order-related updates, including collection details and potential issues.
  

• Competitions & Promotions
   Your personal information may also be used for participation in contests, giveaways, or loyalty programs that you choose to join.
  

By using our Services, you agree to our Privacy Policy, which allows us to store and process your data for these purposes in accordance with applicable laws.

USER GENERATED CONTENT

The Services may enable you to post product reviews and other user-generated content. If you choose to submit user generated content to any public area of the Services, this content will be public and accessible by anyone.

We do not control who will have access to the information that you choose to make available to others, and cannot ensure that parties who have access to such information will respect your privacy or keep it secure. We are not responsible for the privacy or security of any information that you make publicly available, or for the accuracy, use or misuse of any information that you disclose or receive from third parties.

THIRD PARTY WEBSITES AND LINKS

Our Site may provide links to websites or other online platforms operated by third parties. If you follow links to sites not affiliated or controlled by us, you should review their privacy and security policies and other terms and conditions. We do not guarantee and are not responsible for the privacy or security of such sites, including the accuracy, completeness, or reliability of information found on these sites. Information you provide on public or semi-public venues, including information you share on third-party social networking platforms may also be viewable by other users of the Services and/or users of those third-party platforms without limitation as to its use by us or by a third party. Our inclusion of such links does not, by itself, imply any endorsement of the content on such platforms or of their owners or operators, except as disclosed on the Services.

CHILDREN'S DATA

The Services are not intended to be used by children, and we do not knowingly collect any personal information about children. If you are the parent or guardian of a child who has provided us with their personal information, you may contact us using the contact details set out below to request that it be deleted.

As of the Effective Date of this Privacy Policy, we do not have actual knowledge that we “share” or “sell” (as those terms are defined in applicable law) personal information of individuals under 16 years of age.

Data Retention Policy

We retain your personal information for as long as necessary to fulfill the purposes outlined in our Privacy Policy, including maintaining your account, providing our Services, complying with legal obligations, resolving disputes, and enforcing contracts and policies. If you have agreed to be registered in our customer database, your data will be stored accordingly and automatically deleted when no longer needed. We do not retain personal data longer than necessary to fulfill these purposes.

How We Protect Your Personal Data

COCOMERA AB implements technical and organizational security measures in compliance with legal requirements to protect your personal data from manipulation, loss, destruction, or unauthorized access. Our security measures evolve alongside technological advancements to ensure ongoing protection.

All transactions involving your personal data are encrypted using SSL (Secure Socket Layer), which combines public key encryption (PKI) and symmetric keys for enhanced security. However, no security system is completely impenetrable, and we cannot guarantee absolute protection. Additionally, information transmitted to us may not always be secure in transit. We advise against using insecure channels to share sensitive or confidential data.

What rights do you have?

Depending on where you live, you may have some or all of the rights listed below in relation to your personal information. However, these rights are not absolute, may apply only in certain circumstances and, in certain cases, we may decline your request as permitted by law.

• Right to Access / Know: You may have a right to request access to personal information that we hold about you, including details relating to the ways in which we use and share your information.

• Right to Delete: You may have a right to request that we delete personal information we maintain about you.

• Right to Correct: You may have a right to request that we correct inaccurate personal information we maintain about you.

• Right of Portability: You may have a right to receive a copy of the personal information we hold about you and to request that we transfer it to a third party, in certain circumstances and with certain exceptions.

• Restriction of Processing: You may have the right to ask us to stop or restrict our processing of personal information.

• Withdrawal of Consent: Where we rely on consent to process your personal information, you may have the right to withdraw this consent.

• Appeal: You may have a right to appeal our decision if we decline to process your request. You can do so by replying directly to our denial.

• Managing Communication Preferences: We may send you promotional emails, and you may opt out of receiving these at any time by using the unsubscribe option displayed in our emails to you. If you opt out, we may still send you non-promotional emails, such as those about your account or orders that you have made.

You may exercise any of these rights where indicated on our Site or by contacting us using the contact details provided below.

We will not discriminate against you for exercising any of these rights. We may need to collect information from you to verify your identity, such as your email address or account information, before providing a substantive response to the request. In accordance with applicable laws, you may designate an authorized agent to make requests on your behalf to exercise your rights. Before accepting such a request from an agent, we will require that the agent provide proof you have authorized them to act on your behalf, and we may need you to verify your identity directly with us. We will respond to your request in a timely manner as required under applicable law.

COOKIES

Like many websites, we use Cookies on our Site. For specific information about the Cookies that we use related to powering our store with Shopify, see https://www.shopify.com/legal/cookies. We use Cookies to power and improve our Site and our Services (including to remember your actions and preferences), to run analytics and better understand user interaction with the Services (in our legitimate interests to administer, improve and optimize the Services). We may also permit third parties and services providers to use Cookies on our Site to better tailor the services, products and advertising on our Site and other websites.

Most browsers automatically accept Cookies by default, but you can choose to set your browser to remove or reject Cookies through your browser controls. Please keep in mind that removing or blocking Cookies can negatively impact your user experience and may cause some of the Services, including certain features and general functionality, to work incorrectly or no longer be available. Additionally, blocking Cookies may not completely prevent how we share information with third parties such as our advertising partners.

Please note that while your browser may allow you to transmit a “do not track” signal, like many websites, our Site is not designed to respond to such signals. To learn more about “do not track” signals, you can visit http://www.allaboutdnt.com/.

Information is collected here about how our visitors use our website. Google's privacy policy can be found here: www.google.com/intl/en/policies/privacy.

At http://www.allaboutcookies.org/ you can read more about cookies!

The Swedish Data Protection Authority
The central part of the data protection regulation is the 99 articles. These include 173 considerations (reasons). The reasons can be found in the first part of the regulation. On this page, we have highlighted that part. You can find the articles of the Data Protection Regulation here:

The European Parliament and the Council of the European Union have adopted this Regulation, having regard to the Treaty on the Functioning of the European Union, and in particular Article 16, having regard to the proposal from the European Commission, having regard to the transmission of the draft legislative act to the national parliaments, having regard to the opinion of the European Economic and Social Committee ( OJ C 229, 31.7.2012, p. 90.), taking into account the opinion of the Committee of the Regions (OJ C 391, 18.12.2012, p. 127.), in accordance with the ordinary legislative procedure*, and for the following reasons:

* Position of the European Parliament of 12 March 2014 (not yet published in the Official Journal) and Council position at first reading of 8 April 2016 (not yet published in the Official Journal). Position of the European Parliament of 14 April 2016.

(1) The protection of natural persons in the processing of personal data is a fundamental right. Article 8(1) of the Charter of Fundamental Rights of the European Union (hereinafter referred to as the Charter) and Article 16(1) of the Treaty on the Functioning of the European Union (TFEU) provide that everyone has the right to the protection of the personal data concerning him or her.

2) The principles and rules for the protection of natural persons in the processing of their personal data should, regardless of their nationality or residence, respect their fundamental rights and freedoms, in particular their right to the protection of personal data. The purpose of this Regulation is to contribute to the creation of an area of freedom, security and justice and an economic union, to economic and social progress, to the strengthening and convergence of the economies within the internal market and to the well-being of natural persons.

(3) Directive 95/46/EC of the European Parliament and of the Council (4) aims to harmonize the protection of the fundamental rights and freedoms of natural persons in the processing of personal data and to ensure the free flow of personal data between Member States.

(4) The processing of personal data should be designed so that it serves people. The right to protection of personal data is not an absolute right; it must be understood based on its role in society and weighed against other fundamental rights in accordance with the principle of proportionality. This Regulation respects all fundamental rights and observes the freedoms and principles recognized in the Charter, as set out in the Treaties, in particular protection of private and family life, home and communications, protection of personal data, freedom of thought, freedom of conscience and religion, freedom of expression and information, freedom of business, the right to an effective remedy and an impartial court, and cultural, religious and linguistic diversity.

(5) The economic and social integration brought about by the single market has led to a significant increase in cross-border flows of personal data. The exchange of personal data between public and private actors, including natural persons, associations and companies, across the Union has increased. National authorities in the Member States are called upon by Union law to cooperate and exchange personal data in order to be able to fulfill their tasks or perform tasks for an authority located in another Member State.