Privacy and Cookie Policy
Last updated: August 2026
Collaborate & Innovate Ltd, trading as Cosy Direct ("Cosy Direct", "we", "us" or "our"), is committed to protecting and respecting your privacy. This Privacy and Cookie Policy explains what personal information we collect when you use our website, how we use it, and the rights you have in relation to that information.
For the purposes of data protection law, Cosy Direct is the data controller responsible for your personal information. We process personal data in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018 and the Data (Use and Access) Act 2025.
1. Who we are and how to contact us
- Company: Collaborate & Innovate Ltd, trading as Cosy Direct
- Registered address: 316-318 Fauld Industrial Estate, Fauld Lane, Tutbury, England, DE13 9HS
- Company number: 07483416
- ICO registration reference: ZB098488
- Contact for privacy matters: marketing@cosydirect.com
If you have any questions about this policy or about how we handle your personal information, please contact us using the details above.
2. Information we collect
Depending on how you use our website, we may collect the following information:Â
- Your name, and your job title or role.
- Your contact details, including email address, telephone number, and delivery and billing addresses.
- Details of your orders, your account and your purchase history.
- Payment information. Card payments are processed by our payment providers, and we do not store full card details.
- Information you provide when you complete a survey, leave a review, enter a competition, or contact our team.
- Technical information collected automatically through cookies when you browse the website, such as your IP address, browser type and the pages you view.
3. How we collect your information
We collect most of this information directly from you: when you place an order, create an account, subscribe to our communications, complete a form, or contact us. We also collect certain technical information automatically through cookies when you visit our website, as described in the cookies section below.
4. How we use your information and our lawful bases
We use your personal information for the purposes set out below. In each case we rely on one or more of the lawful bases permitted under the UK GDPR:Â
- To fulfil and deliver your orders and to administer your account. Lawful basis: performance of a contract.
- To provide customer service and respond to your enquiries. Lawful basis: performance of a contract and our legitimate interests.
- To send you marketing communications about our products, offers and news, where you have consented or where we are permitted to do so under the applicable rules. Lawful basis: consent, or our legitimate interests under the soft opt-in provisions of PECR.
- To improve our products, services and website, including through analytics. Lawful basis: consent for analytics cookies, and our legitimate interests for general improvement.
- To maintain our business records and to meet our legal, accounting and tax obligations. Lawful basis: legal obligation and legitimate interests.
- To maintain the security of our website and business and to prevent fraud. Lawful basis: legitimate interests.
5. Marketing
We will only send you marketing communications where we are permitted to do so, and you may opt out at any time. Every marketing email contains an unsubscribe link, or you may contact us at marketing@cosydirect.com to be removed from our marketing lists. Opting out of marketing will not affect service communications relating to orders you have placed.
6. Who we share your information with
We do not sell your personal information. We share it only where necessary to operate our business, with third parties who process it on our behalf and in accordance with our instructions. These include:Â
- The payment providers who process your payments.
- The couriers and logistics partners who deliver your orders.
- The IT, email and customer relationship management providers that support our systems.
- The providers that host, secure and back up our website and systems.
- Our professional advisers, and the relevant authorities where we are required to do so by law.
7. Where your information is stored
Your personal information is stored within the United Kingdom and the European Economic Area (EEA). The providers we rely on hold it in the UK or the EEA, and we do not routinely transfer it to countries outside those areas. Where a transfer outside the UK or EEA becomes necessary, we will ensure it is protected by an appropriate safeguard, such as the UK International Data Transfer Agreement or a relevant adequacy decision.
8. How long we keep your information
We retain your personal information for as long as necessary to manage our relationship with you and to meet our legal, accounting and tax obligations. As a general rule, financial and transactional records are retained for six years following the end of the relevant financial year or the end of our relationship with you. After this period we delete the personal data, or anonymise it where it is no longer required in identifiable form.
9. Keeping your information secure
We maintain appropriate technical and organisational measures to protect your personal information against accidental loss, misuse, and unauthorised access, disclosure or alteration. We limit access to your personal information to those who have a legitimate need to use it, and we review our security measures regularly.
10. Your rights
Under UK data protection law, you have the following rights in relation to your personal information:
- Right of access: to request a copy of the personal information we hold about you.
- Right to rectification: to have inaccurate or incomplete information corrected.
- Right to erasure: to request deletion of your personal information in certain circumstances.
- Right to restriction: to ask us to restrict the processing of your personal information in certain circumstances.
- Right to object: to object to our processing of your personal information, including for direct marketing.
- Right to data portability: to request the transfer of your personal information to another provider, where applicable.
- Right to withdraw consent: to withdraw your consent at any time where we rely on consent.
To exercise any of these rights, please contact us at marketing@cosydirect.com. There is normally no charge, and we will respond within one month of receiving your request. Where a request is particularly complex, or where a number of requests have been made, we may extend this period by up to a further two months, and we will inform you if this is the case.
11. Complaints
If you are dissatisfied with how we have handled your personal information, please contact us in the first instance so that we can try to resolve the matter. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's supervisory authority for data protection:
- Website: ico.org.uk
- Telephone: 0303 123 1113
12. Cookies and similar technologies
A cookie is a small file that a website places on your device. Cookies enable the site to function correctly, remember your preferences, and help us understand how the site is used. Some cookies are set by us, and others are set by third parties whose services appear on our pages.
We group the cookies and similar technologies on our website into three categories:
- Functional: required for the website to operate, such as remembering the contents of your basket. These are always active.
- Analytics: help us understand how the website is used so that we can improve it. These operate only with your consent.
- Marketing: used to show you relevant offers and to measure the performance of our advertising. These operate only with your consent.
Managing your cookie preferences
When you first visit our website, our consent banner allows you to accept or reject each category of non-essential cookie. You may change your preferences at any time by reopening the cookie settings from the banner. You may also block or delete cookies through your browser settings, although certain parts of the website may not function correctly if you do so.
Cookies currently used on this website
The following list is generated automatically and shows each cookie in use on our website, the party that sets it and its purpose, grouped by category.
13. Links to other websites
Our website may contain links to other websites that we consider may be of interest. Once you follow a link to another website, this policy no longer applies. We are not responsible for the privacy practices or content of those websites, and we recommend that you review their privacy policies before providing any personal information.
14. Changes to this policy
We may update this policy from time to time. Any changes will be posted on this page, and the date at the top will be updated accordingly. We recommend that you review this policy periodically.