Privacy Policy
This Privacy Policy explains how The Cosmic Distro collects, uses, protects and shares information when you visit our website, register for an account, apply for wholesale access, subscribe to communications or use our ordering services.
By accessing cosmicdistro.shop, creating an account, submitting information, applying for wholesale access or placing an order, you acknowledge the practices described in this Privacy Policy.
The Cosmic Distro (“The Cosmic Distro,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal and business information you provide when using cosmicdistro.shop and our related services.
This Privacy Policy explains the types of information we may collect, how we use that information, when it may be disclosed, how long it may be retained and the privacy choices available to you.
Scope of This Privacy Policy
This Privacy Policy applies to information collected through:
- Our website at cosmicdistro.shop.
- Customer and wholesale-account registration.
- Wholesale buyer and business-verification procedures.
- Shopping carts, checkout systems and wishlists.
- Newsletter and promotional subscription forms.
- Contact forms and customer-support communications.
- Orders, deliveries, fulfilment and related services.
- Other services that link to this Privacy Policy.
This Privacy Policy does not apply to independently operated third-party websites or services that may be linked from our website.
Age and Business Eligibility
The Cosmic Distro is intended for adults and qualified business customers. You must be at least 21 years old to use restricted sections of the website, create an account or request access to products intended for adults.
Certain wholesale services may require a valid business licence, resale certificate, tax-exemption document, industry licence or other business-verification information.
We do not knowingly collect personal information from anyone under 21. If we learn that information has been submitted by someone under 21, we may delete the information and restrict access to the website.
Information We Collect
The information we collect depends on how you interact with the website and our services.
Contact information
We may collect:
- Your full name.
- Your business name.
- Your job title or business role.
- Your email address.
- Your telephone number.
- Your billing address.
- Your delivery or fulfilment address.
- Your business location.
- Other contact information you voluntarily provide.
Account information
When you create or use an account, we may collect:
- Your username.
- Your email address.
- Your encrypted password.
- Your account preferences.
- Your login dates and account activity.
- Your saved addresses.
- Your wishlist selections.
- Your shopping-cart information.
- Your order history.
- Your account-verification or approval status.
You are responsible for maintaining the confidentiality of your username, password and other account credentials.
Wholesale and business-verification information
When you apply for wholesale access, we may collect:
- Your legal business name.
- Your doing-business-as name.
- Your business address.
- Your business telephone number.
- Your business email address.
- Your resale or tax-exemption information.
- Your business or industry licence information.
- Your licence number and expiration date.
- Your business category or type.
- Your preferred product categories.
- Your estimated order volume.
- Other information needed to verify your eligibility.
Please do not submit unnecessary government identification numbers, payment passwords or sensitive financial information unless we specifically request the information through an approved and secure verification process.
Order and commercial information
When ordering features are available, we may collect:
- Products and brand pages you view.
- Products added to your cart or wishlist.
- Products, quantities and case sizes ordered.
- Order values and transaction history.
- Billing and delivery information.
- Fulfilment and delivery preferences.
- Order and payment status.
- Returns, credits, damages or shortage claims.
- Communications relating to an order.
Payment information
Payments may be processed by an independent payment processor. Depending on the selected payment method, that provider may collect your payment-card details, bank information, billing address and other transaction information.
We may receive limited payment information such as:
- Payment-card type.
- The last four digits of a payment card.
- The billing name.
- The payment status.
- A transaction identifier.
- Fraud-screening or verification results.
We do not intend to store complete payment-card numbers or card-security codes on our own website servers.
Communications
We may collect information contained in emails, contact forms, wholesale applications, account-support requests, order inquiries, customer-service communications, reviews, feedback and privacy requests.
Newsletter and marketing information
When you subscribe to our newsletter or request promotional communications, we may collect:
- Your name.
- Your email address.
- Your subscription status.
- Your communication preferences.
- Email delivery information.
- Email-opening and link-interaction information, where permitted.
Device and website-usage information
When you visit our website, we or our service providers may automatically collect:
- Your Internet Protocol address.
- Your browser type.
- Your device type.
- Your operating system.
- Your language settings.
- Your approximate location based on IP address.
- The website or page that referred you to us.
- Pages, products and links you view.
- Search and shopping-cart activity.
- Login and session information.
- The date and time of access.
- Website error and performance information.
- Cookie and similar technology identifiers.
Sources of Information
We may obtain information:
- Directly from you.
- From your account activity.
- From your employer or business.
- From payment processors.
- From delivery and fulfilment providers.
- From website analytics and security providers.
- From cookies and similar technologies.
- From publicly available business or licensing records.
- From social-media platforms when you interact with us.
- From fraud-prevention or identity-verification providers.
- From other parties where permitted by law.
How We Use Information
We may use collected information to:
- Operate, maintain and improve the website.
- Create and manage user accounts.
- Review wholesale-account applications.
- Verify business and purchasing eligibility.
- Provide access to restricted catalogues and pricing.
- Process and manage orders.
- Arrange delivery, fulfilment or pickup.
- Maintain shopping carts and wishlists.
- Communicate about accounts and orders.
- Respond to customer-service requests.
- Send requested newsletters and product announcements.
- Personalise website content and user experience.
- Analyse website performance and visitor activity.
- Detect fraud, misuse and unauthorised access.
- Protect our website, users and business.
- Enforce our Terms and Conditions.
- Maintain financial and business records.
- Comply with legal and regulatory obligations.
- Resolve disputes and defend legal claims.
- Carry out other purposes disclosed when information is collected.
We will not use personal information for materially different purposes without providing additional notice where required by law.
How We Disclose Information
We may disclose information to service providers and other parties that help us operate our website and provide services, including:
- Website-hosting providers.
- Cloud-storage providers.
- Website-security and fraud-prevention providers.
- Account and identity-verification providers.
- Payment processors.
- Shipping, delivery and fulfilment providers.
- Email and newsletter providers.
- Customer-support providers.
- Analytics providers.
- Marketing providers.
- Accountants, attorneys and professional advisers.
- Government, regulatory or law-enforcement authorities.
- Parties involved in a business sale or restructuring.
We may also disclose information:
- With your consent or direction.
- To complete a transaction you requested.
- To comply with a subpoena, court order or legal process.
- To enforce our agreements and policies.
- To investigate suspected fraud or unlawful activity.
- To protect our rights, property, users or business.
- When otherwise permitted or required by law.
Sale and Sharing of Personal Information
The Cosmic Distro does not sell personal information in exchange for money.
Some privacy laws define “sale” or “sharing” broadly enough to include certain digital advertising, analytics or cross-context behavioural advertising activities.
If we engage in activities that legally constitute selling or sharing personal information, we will provide the notices and opt-out methods required by applicable law.
We do not knowingly sell or share personal information belonging to anyone under 16.
Third-Party Websites and Services
The website may contain links to or integrations with:
- Payment platforms.
- Shipping or delivery providers.
- Analytics tools.
- Email and newsletter providers.
- Instagram and other social-media platforms.
- Brand or manufacturer websites.
- Other independently operated services.
Third-party services operate under their own privacy policies and business practices. We are not responsible for how independently operated third parties collect, use, store or protect information.
Data Retention
We retain information only for as long as reasonably necessary for the purposes described in this Privacy Policy.
Retention periods may depend on:
- The type and sensitivity of the information.
- Whether an account remains active.
- Order and transaction requirements.
- Tax and accounting obligations.
- Business and regulatory recordkeeping requirements.
- Fraud prevention and account security.
- Dispute resolution.
- Applicable statutes of limitation.
- Other legal or regulatory obligations.
When information is no longer reasonably required, we may delete, anonymise or securely isolate it.
Data Security
We use reasonable administrative, technical and organisational safeguards intended to protect information against:
- Unauthorised access.
- Accidental loss.
- Misuse.
- Alteration.
- Improper disclosure.
- Destruction.
These measures may include encrypted website connections, account authentication, access controls, security monitoring, software updates and restricted administrative access.
However, no website, database, storage system or internet transmission can be guaranteed to be completely secure.
You should use a strong and unique password, avoid sharing your account credentials and notify us if you believe your account has been accessed without permission.
Your Privacy Rights and Choices
Depending on your location and applicable law, you may have the right to:
- Request access to personal information maintained about you.
- Request correction of inaccurate personal information.
- Request deletion of eligible personal information.
- Receive information about how personal information is used.
- Receive information about categories of third parties.
- Request a portable copy of certain information.
- Opt out of certain sales, sharing or targeted advertising.
- Limit certain uses of sensitive personal information.
- Withdraw consent where processing is based on consent.
- Opt out of promotional communications.
- Appeal a denied privacy request where applicable.
- Receive equal service without unlawful discrimination for exercising privacy rights.
These rights may be subject to legal limitations and exceptions. For example, we may retain information needed to complete transactions, prevent fraud, comply with law, maintain business records or establish and defend legal claims.
California Privacy Notice
This section applies to California residents to the extent the California Consumer Privacy Act, as amended, applies to The Cosmic Distro.
During the preceding 12 months, we may have collected the following categories of personal information.
Identifiers
Examples include names, email addresses, telephone numbers, account names, postal addresses, IP addresses and similar identifiers.
Customer-record information
Examples include names, addresses, telephone numbers, business information, billing information and account details.
Commercial information
Examples include products viewed, wishlists, shopping carts, transaction history, order history, purchasing preferences and customer-service records.
Internet or electronic activity
Examples include browsing activity, search activity, interactions with the website, login information, cookie identifiers and device information.
Approximate geolocation information
We may infer an approximate location from an IP address. We do not intend to collect precise GPS coordinates through the website unless a feature clearly requests that information and you provide permission.
Professional or business information
Examples include business names, business roles, licence information, industry type and wholesale eligibility information.
Inferences
We may make limited inferences about product interests, account preferences or purchasing needs based on website and account activity.
Subject to applicable law, California residents may request that we:
- Disclose categories of personal information collected.
- Disclose specific pieces of personal information collected.
- Disclose categories of information sources.
- Disclose business or commercial purposes for collecting information.
- Disclose categories of parties receiving information.
- Correct inaccurate personal information.
- Delete eligible personal information.
- Stop selling or sharing personal information.
- Limit certain uses of sensitive personal information.
We will not unlawfully discriminate against you for exercising a valid privacy right.
Submitting a Privacy Request
To submit a privacy request, contact us at:
Your request should include:
- Your full name.
- The email address associated with your account.
- The type of privacy request you are submitting.
- Enough information for us to locate the relevant account or records.
We may need to verify your identity before completing a request. Verification may involve confirming information associated with your account or requesting additional information reasonably necessary to prevent fraud.
An authorised agent may submit a request on your behalf where permitted by law. We may request proof of the agent’s authority and may also verify your identity directly.
Marketing Communications
You may unsubscribe from promotional emails at any time by:
- Using the unsubscribe link included in an email.
- Updating available account communication preferences.
- Emailing sales@cosmicdistro.shop.
Even after opting out of promotional communications, you may still receive non-promotional messages relating to:
- Account security.
- Wholesale verification.
- Orders and payments.
- Deliveries or fulfilment.
- Policy updates.
- Customer-service requests.
- Transactions or services you requested.
Do Not Track and Privacy-Control Signals
Some browsers provide a “Do Not Track” setting. Because there is no universally accepted standard for responding to all Do Not Track signals, our website may not respond to those signals consistently.
Where required by applicable law, we will recognise legally valid opt-out preference signals, such as Global Privacy Control, for the browser or device from which the signal is sent.
International Visitors
Our website is operated for a business primarily serving customers within its approved markets.
If you access the website from outside the United States, your information may be transferred to and processed in the United States or another country where our service providers operate.
Privacy and data-protection laws in those locations may differ from the laws that apply in your country.
Business Transfers
If The Cosmic Distro is involved in a merger, acquisition, restructuring, financing, bankruptcy, sale of assets or similar business transaction, information may be transferred as part of that transaction.
Any recipient will be required to handle personal information in accordance with applicable law and any notices provided at the time of the transaction.
Changes to This Privacy Policy
We may update this Privacy Policy to reflect changes in:
- Our business practices.
- Website features and functionality.
- Plugins and service providers.
- Legal or regulatory requirements.
- Security procedures.
- Ordering, delivery and fulfilment systems.
The updated policy will be posted on this page with a revised “Last Updated” date.
Where required, we may provide additional notice through the website, account dashboard or email.
Contact Us
For questions, concerns or requests relating to this Privacy Policy, contact:
Please include “Privacy Request” in the subject line when contacting us about your personal information.