Effective Date: 20241212
Willow Cosmos AB (“Willow Cosmos,” “we,” “us,” or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and share your personal data when you use our website, applications, or other services (collectively, the “Services”). By using our Services, you agree to the terms of this Privacy Policy and our Terms of Service.
If you have any questions about this Privacy Policy, please contact us in the chat box or contact form.
Postal Address: [Insert Company Address], Sweden
Organization Number: 5569417370
1. Who We Are
Willow Cosmos AB is based in Sweden and complies with applicable Swedish and EU data protection laws, including the GDPR. We act as the data controller for the processing of your personal data unless otherwise stated.
2. What Personal Data We Collect
We collect and process different types of personal data based on your interaction with our Services, including:
a) Data You Provide Directly
- Account Information: Name, email address, phone number, billing address, shipping address, and other details you provide when creating an account or using our Services.
- Content: Information you post, upload, or share through our Services, including messages, comments, or files.
- Payment Information: Data necessary to process payments, such as credit card or payment account details.
b) Data We Collect Automatically
- Device Information: IP address, browser type, operating system, and device identifiers.
- Usage Data: Information about how you interact with our Services, including pages viewed, features used, and time spent on our platform.
- Location Data: Approximate location based on your IP address or, with your consent, precise geolocation data from your device.
c) Data from Third Parties
- Information from social media platforms or other third parties when you engage with us through their services.
3. How We Use Your Personal Data
We process your personal data for the following purposes:
- Providing Services: To deliver, customize, and improve our Services.
- Communication: To send you updates, notifications, and responses to inquiries.
- Compliance and Security: To comply with legal obligations and ensure the safety and security of our Services.
- Marketing: To inform you about products, services, and offers that may interest you (with your explicit consent where required).
4. Legal Bases for Processing
We process your personal data under the following legal bases:
- Performance of a Contract: When data is necessary to provide the Services.
- Consent: For specific purposes where you have given your explicit consent (e.g., receiving marketing communications).
- Legitimate Interests: To enhance and secure our Services or understand user behavior.
- Legal Obligation: To comply with legal and regulatory requirements.
5. Sharing Your Personal Data
We may share your data with:
- Service Providers: Third parties that assist us in operating our Services, such as hosting, payment processing, and analytics providers.
- Legal Authorities: When required to comply with legal obligations or protect rights.
- Business Transfers: In the event of a merger, acquisition, or sale of assets, your data may be transferred.
We do not sell your personal data to third parties.
6. Data Transfers Outside the EU/EEA
If we transfer your personal data outside the EU/EEA, we ensure adequate protection through:
- EU Commission-approved Standard Contractual Clauses.
- Transferring to countries with an EU adequacy decision.
- Explicit consent from you.
7. Data Retention
We retain your data only for as long as necessary to fulfill the purposes outlined in this policy or to comply with legal obligations. Retention periods may vary based on the type of data and legal requirements.
8. Your Rights
Under the GDPR, you have the following rights:
- Access: Request access to your personal data.
- Rectification: Correct incomplete or inaccurate data.
- Erasure: Request deletion of your data (“right to be forgotten”).
- Restriction: Limit how we process your data.
- Portability: Receive your data in a structured, commonly used format.
- Objection: Object to data processing based on legitimate interests.
- Withdraw Consent: Withdraw consent for processing where applicable.
To exercise your rights, please contact us at: [Insert Support Email Address]
9. Cookies and Tracking Technologies
We use cookies and similar technologies to enhance your experience and analyze usage. You can manage cookie preferences through your browser settings. For more information, please see our [Cookie Policy](Insert Link).
10. Children’s Privacy
Our Services are not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with data, please contact us, and we will delete it.
11. Data Security
We use industry-standard measures to protect your personal data. However, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.
12. Changes to This Privacy Policy
We may update this Privacy Policy from time to time. Changes will be posted on our website with an updated effective date. Please review this policy periodically.