PRIVACY POLICY

Effective Date: 11/11/2025

Who We Are

Cocoa Plum ("we," "us," or "our") operates the website cocoaplumyoga.com (the "Site"). We are an e-commerce business offering products for purchase through our website.

Your privacy is important to us. This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you visit our website, make a purchase, or otherwise interact with our brand.

By using our Site or services, you agree to the terms of this Privacy Policy. If you do not agree with this policy, please do not use our website.

Information We Collect

We collect information when you interact with our store, including when you browse our website, create an account, place an order, subscribe to marketing communications, or contact customer service.

Personal Information

This may include:

• Contact Information: Your name, email address, shipping and billing address, and phone number.

• Order Information: Products purchased, order details, shipping information, and transaction history.

• Payment Information: Payment details necessary to process your order. Payment information is handled by third-party payment processors such as Shopify Payments and PayPal.

• Customer Service Information: Information you provide when contacting us, including questions, messages, photographs, and other information related to your order or inquiry.

• Marketing Information: Your email address or phone number when you voluntarily opt in to receive marketing communications.

Device and Usage Information

We may automatically collect information about how you access and use our Site, including:

• IP address.

• Browser type.

• Device type.

• Operating system.

• Pages visited.

• Products viewed.

• Time spent on the Site.

• Actions taken on the Site.

• Other browsing and usage information.

We only collect information that is reasonably necessary to process orders, operate and improve our Site, provide customer support, and provide marketing communications where permitted.

Cookies and Tracking Technologies

Our website uses cookies, pixels, and similar technologies to improve your browsing experience and support essential website functions.

These technologies may be used to:

• Keep items in your shopping cart.

• Remember preferences and login sessions.

• Measure website performance and traffic.

• Understand how customers interact with our Site.

• Support relevant advertising and retargeting campaigns.

You may disable or manage cookies through your browser settings. However, disabling cookies may affect certain features or functionality of our Site.

Our Site may also use tracking and analytics technologies provided by third parties, including Google Analytics, Meta Pixel, and similar services.

How We Use Your Information

We may use the information we collect to:

1. Process and Fulfill Orders: Process purchases, arrange shipping, manage returns and exchanges, and provide order-related services.

2. Communicate With You: Send order confirmations, shipping updates, product information, and responses to customer inquiries.

3. Provide Customer Support: Respond to questions and concerns regarding orders, products, payments, shipping, returns, and refunds.

4. Improve Our Website: Analyze how customers use our Site and improve our website, products, services, and overall customer experience.

5. Personalize Your Experience: Provide personalized recommendations, promotions, and content where permitted.

6. Marketing: With your consent where required, send promotional emails or SMS messages regarding products, offers, collections, and brand updates.

7. Analytics and Advertising: Measure marketing performance, understand customer behavior, and provide relevant advertising and retargeting.

8. Fraud Prevention and Security: Detect, investigate, and prevent potentially fraudulent, unauthorized, or unlawful activity.

9. Legal Compliance: Comply with applicable laws, regulations, legal obligations, and legitimate requests from authorities.

Sharing Your Information

We do not sell your personal data.

However, we may share information with trusted third-party service providers that help us operate our business, including:

• Shopify: Our e-commerce platform used to operate our online store and manage customer and order information.

• Payment Processors: Shopify Payments and PayPal, which process payments securely.

• Marketing and Analytics Partners: Services such as Google Analytics, Meta Pixel, and Klaviyo that help us analyze performance, communicate with customers, and improve our marketing.

• Shipping and Fulfillment Services: Service providers and carriers that help process and deliver your orders.

• Other Service Providers: Providers that assist with website hosting, customer support, fraud prevention, technology, and other legitimate business operations.

We may also disclose personal information:

• When required by law or legal process.

• To protect our rights, property, safety, or the safety of others.

• To investigate fraud, security issues, or unlawful activity.

• In connection with a merger, acquisition, sale of assets, restructuring, or other business transaction.

Third-party service providers may process your information according to their own privacy policies and applicable legal requirements.

Data Retention

We retain your personal information only for as long as reasonably necessary to fulfill the purposes described in this Privacy Policy, including:

• Processing and fulfilling orders.

• Providing customer support.

• Maintaining accurate business, accounting, and tax records.

• Complying with legal and regulatory requirements.

• Resolving disputes.

• Preventing fraud and enforcing our agreements.

Once information is no longer required, we may securely delete or anonymize it, subject to applicable legal and operational requirements.

If you wish to request removal of your personal information, please contact us at hello@cocoaplumyoga.com.

Email and SMS Marketing

If you opt in to receive marketing communications, we may contact you by email or SMS regarding new products, promotions, offers, collections, and other brand updates.

You may unsubscribe from marketing emails at any time by clicking the "Unsubscribe" link included in the message.

For SMS communications, you may opt out by replying "STOP" to the applicable text message.

We comply with applicable requirements governing commercial email and SMS communications, including CAN-SPAM and TCPA requirements where applicable.

Marketing and communication tools may include:

• Shopify Email.

• Klaviyo.

• SMS tools integrated with Shopify.

• Meta and Google advertising platforms.

• Other similar marketing and advertising services.

We will not knowingly send promotional communications where consent is required without obtaining the appropriate consent.

Behavioral Advertising and Retargeting

We may use analytics and advertising technologies to understand how customers interact with Cocoa Plum and to provide relevant advertisements.

These technologies may include:

• Google Ads.

• Meta (Facebook and Instagram).

• Pinterest.

• TikTok.

• Google Analytics.

• Meta Pixel.

These services may use cookies, pixels, or similar technologies to measure advertising performance and display advertisements based on previous interactions with our Site.

Where applicable, you may manage advertising preferences through the relevant advertising platform.

Data Security

We implement commercially reasonable administrative, technical, and organizational measures designed to protect your personal information from loss, misuse, unauthorized access, disclosure, alteration, or destruction.

These measures may include:

• Secure HTTPS encryption throughout the Cocoa Plum website.

• Secure payment processing through Shopify Payments and PayPal.

• Limited access to personal information based on business needs.

• Security measures provided by our technology and e-commerce service providers.

Although we take reasonable measures to protect your information, no method of online transmission or electronic storage can be guaranteed to be completely secure.

Payment Information

We use Shopify Payments and PayPal to process transactions.

These payment processors handle payment information according to their own privacy and security policies. Cocoa Plum does not store or have access to complete credit card details processed through these payment providers.

For additional information, you may review the privacy policies of the applicable payment providers.

Data Transfers

Cocoa Plum operates in the United States. Your personal information may therefore be processed and stored in the United States.

If you access our Site from another country, your information may be transferred to and processed in the United States, where data protection laws may differ from those in your jurisdiction.

Where required by applicable law, we will take appropriate measures to protect personal information transferred internationally.

Children's Privacy

Cocoa Plum does not knowingly collect or solicit personal information from individuals under the age of 16.

If you believe that a child has provided us with personal information, please contact us at hello@cocoaplumyoga.com. We will take reasonable steps to review and remove such information where appropriate.

Your Privacy Rights

Depending on your location and applicable law, you may have certain rights regarding your personal information, including:

• Access: Request a copy of the personal information we hold about you.

• Correction: Request correction of inaccurate or incomplete information.

• Deletion: Request deletion of your personal information where legally permitted.

• Restriction: Request that we limit certain processing of your personal information where applicable.

• Opt-Out: Opt out of receiving marketing or promotional communications.

To exercise an applicable privacy right, contact us at hello@cocoaplumyoga.com.

We may need to verify your identity before completing a request. We aim to respond to legitimate requests within 30 days, or within another timeframe permitted or required by applicable law.

California Privacy Rights

California residents may have additional rights regarding their personal information under applicable California privacy laws, including the California Consumer Privacy Act (CCPA), as amended where applicable.

These rights may include requesting access to, correction of, or deletion of personal information, subject to applicable legal exceptions.

Cocoa Plum does not sell personal information as defined by applicable law.

California residents who wish to exercise applicable privacy rights may contact us at:

hello@cocoaplumyoga.com

We may take reasonable steps to verify your identity before processing a request.

Legal Compliance

Cocoa Plum aims to comply with applicable privacy and data protection laws.

We do not sell personal data to third parties. We collect and process personal information for legitimate business purposes, including processing orders, providing customer service, improving our Site, communicating with customers, preventing fraud, and complying with legal obligations.

If you are located outside the United States, your information may be transferred to and processed in the United States as described in this Privacy Policy.

Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business practices, services, technology, or legal and regulatory requirements.

Updates will be posted on this page with the applicable effective or updated date indicated at the top of the policy.

We encourage you to review this Privacy Policy periodically to remain informed about how we collect, use, and protect your information.

Contact Us

If you have questions or concerns regarding this Privacy Policy or how your personal information is handled, please contact us:

Cocoa Plum
Email: hello@cocoaplumyoga.com
Phone: +1 702-328-2580
Address:
Cocoa Plum Yoga
10511 Flatlands 1st St.
Brooklyn, New York 11236-3007
United States