What we collect, why we collect it, and the choices you have.
This policy explains how Cocoon & Cub handles personal data when you visit cocoonandcub.com or place an order. We keep it deliberately short and in plain English.
Cocoon & Cub is the data controller for the information described in this policy.
| Data | When | Why |
|---|---|---|
| Name, delivery address, email, phone number | When you place an order | To pack, ship and deliver your parcel and to contact you about it |
| Order contents, order value, transaction reference | When you place an order | To fulfil the order, handle returns and keep accounting records |
| Message content and contact details | When you email or message us | To answer your question or resolve a problem |
| IP address, browser type, requested pages | Automatically on every visit | Security, fraud prevention and keeping the site online |
We never see or store your card details. Payments are handled entirely by PayPal on PayPal's own secure pages.
We do not operate a password-based account system, so we do not hold account passwords.
Under the EU GDPR and UK GDPR we rely on the following legal bases:
This website uses essential cookies only. We do not run advertising, analytics or cross-site profiling cookies, and we do not sell data to anyone.
| Name | Purpose | Type | Duration |
|---|---|---|---|
| cocoon_cart | Remembers the items in your cart (browser local storage) | Essential | Until you clear it |
| cocoon_cookie_consent | Remembers the cookie choice you made | Essential | Until you clear it |
| bco_lang_checked | Stops the language prompt repeating in the same session | Essential | Session |
| googtrans | Stores the language you selected, so the page stays translated | Functional (set only after you choose a language) | Until you clear it |
| PayPal cookies | Required to complete payment securely; set on paypal.com | Essential for checkout | Set by PayPal |
| __cf_bm, cf_clearance | Cloudflare bot protection and secure delivery of the site | Essential | Up to 30 days |
You can change your choice at any time using the Cookie Settings link in the footer, or by clearing cookies and site data in your browser. Blocking essential cookies will stop the cart and checkout from working.
We do not sell, rent or trade personal data. We disclose it only where needed to run the store or where the law requires it.
We are based in China, our payment provider is in the United States and our hosting provider operates globally. Where data leaves the EU or UK we rely on appropriate safeguards, including Standard Contractual Clauses approved by the European Commission, and we keep transfers to what is necessary to serve you.
If you are in the EU or UK, you have the right to:
To exercise any of these rights, email 86270020@qq.com with your order number if you have one. We reply within 30 days. We may need to verify your identity before acting.
We do not sell or share personal information as those terms are defined by the CCPA/CPRA. You may still contact us to request access to or deletion of your data.
This store is intended for adults. We do not knowingly collect personal data from anyone under 16. If you believe a child has given us data, contact us and we will delete it.
The site is served over HTTPS, payments are processed by PayPal, and access to order data is limited to the people who need it to fulfil your order. No system is perfectly secure, but we take proportionate steps to protect what you share with us.
If we change how we handle data we will update this page and change the date at the top. Material changes affecting existing orders will also be communicated by email where we can.
Questions about this policy or your data? Email 86270020@qq.com or message us on WhatsApp. Our full postal address is Room 1212, Jucheng Building, Jiaxing, Zhejiang, China.