Privacy Policy

1. Introduction

Welcome to Cozy Comfort. We respect your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website hosted on Cloudflare.

2. Information We Collect

We collect information in the following ways:

• Device & Log Data: When you visit our site, your browser automatically sends information including your IP address, browser type and version, operating system, referring URLs, and pages visited.
• Usage Data: The pages of our site that you visit, the time and date of your visit, and the time spent on those pages.
• Contact Form Submissions: When you use the contact form on our website, we collect the information you provide, which may include your name, email address, phone number, and reason for inquiry. This information is used solely to respond to your message and is not used for marketing without your consent.

3. Third-Party Services & Technologies

We use specific third-party tools to improve site performance, security, and analytics:

A. Cloudflare (Hosting & Security)

Our website is hosted and protected by Cloudflare. In this capacity, Cloudflare acts as a data processor, collecting technical data (such as IP addresses and security headers) to detect threats, mitigate DDoS attacks, and optimize content delivery.

Turnstile: We use Cloudflare Turnstile to protect our forms from spam and bots. Turnstile processes technical signals (such as browser telemetry and IP addresses) to verify legitimate activity without relying on intrusive tracking cookies.

B. Formspark (Contact Form Processing)

Contact form submissions on our website are processed by Formspark, a third-party form backend service. When you submit the contact form, your name, email address, phone number, and reason for inquiry are transmitted to and stored by Formspark for the purpose of delivering your message to us. Formspark does not use your submission data for advertising or sell it to third parties. You can review Formspark's privacy practices at formspark.io.

C. Google Analytics 4 (GA4)

We use Google Analytics to understand how visitors interact with our site. GA4 collects data such as session statistics and approximate geolocation.

Google Analytics may use cookies or similar technologies to track user behavior. You can opt out of this tracking by installing the Google Analytics Opt-out Browser Add-on .

4. How We Use Your Data

We use the collected information to:

• Respond to consultation requests and inquiries submitted through our contact form.
• Maintain and monitor the performance of our website.
• Protect our site from malicious bot activity and fraud.
• Analyze traffic patterns to improve user experience.

We do not use contact form submissions for marketing purposes without your explicit consent.

5. Legal Basis for Processing (Where Applicable)

Depending on your location, applicable data protection laws may include the EU/UK General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA/CPRA), or the Connecticut Data Privacy Act (CTDPA). Where these laws apply, we process your data based on:

• Legitimate interests: Ensuring site functionality, security, and basic performance monitoring.
• Consent: Where required by law, we will obtain your explicit consent before placing non-essential cookies on your device.
• Legal obligation: Where processing is required to comply with applicable law.

6. Cookies

We use cookies and similar technologies to enhance your experience.

• Essential Cookies: Required for site security and core functionality (e.g., Cloudflare security features).
• Analytics Cookies: Used by Google Analytics to help us understand visitor interaction.

You can instruct your browser to refuse all cookies or to indicate when a cookie is being sent.

7. California "Do Not Track" Disclosure

Some web browsers may transmit "Do Not Track" (DNT) signals. Our website does not currently respond to DNT browser headers. We continue to monitor the development of industry standards for how these signals should be interpreted.

8. Data Sharing & Retention

• Sharing: We share information with trusted third-party service providers — including Cloudflare (hosting and security), Formspark (contact form processing), and Google (analytics) — strictly for the purposes described in this policy. We do not sell, trade, or rent your personal data.
• Retention: We retain collected data only as long as necessary for the purposes described in this policy.

9. Data Security

We implement industry-standard security measures provided by our hosting environment (Cloudflare) to protect your data. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

10. Your Rights

Depending on your location — including the EU/UK under GDPR, California under CCPA/CPRA, or Connecticut under the CTDPA — you may have the right to:

• Access, correct, or request deletion of your personal data.
• Object to or restrict certain processing activities.
• Request a portable copy of your data.

To exercise these rights, please contact us at sales@cozymattress.com.

11. Changes & Contact

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last Updated" date.

Contact Us:
Cozy Comfort
sales@cozymattress.com
https://cozycomfortus.com