Privacy Policy

Welcome to COTI ("we," "our," or "us"). We are committed to protecting your personal information and your right to privacy. This Privacy Policy describes what personal information we collect when you visit our website (www.cotinewyork.com) or purchase our products, how we use it, how it may be disclosed, and the choices and rights available to you.

We collect information you provide directly to us, including:

• Personal Identifiers: Full name, email address, phone number, billing and shipping address.
• Payment Information: When you complete a purchase, payment details are collected and processed directly by our ecommerce checkout provider (Shopify) and its payment processors. COTI does not receive or store your full card number.
• Communications: Messages you send us via email or contact forms.

We also collect information automatically when you visit our site:

• Technical and usage information that may be generated through our website infrastructure or ecommerce platform, such as IP address, browser type, device information, referral information, and basic site activity.

We use the information we collect to:

• Process and fulfill your orders
• Send transactional emails (order confirmations, shipping updates)
• Respond to your inquiries and provide customer support
• Send promotional emails and newsletters (with your consent)
• Improve our website, products, and services
• Detect and prevent fraud and unauthorized activity
• Comply with legal obligations

Our website currently uses browser local storage for essential site functionality, including remembering the contents of your shopping cart ("My Palette"). We do not currently use analytics, advertising, or other non-essential tracking cookies. Our checkout is hosted by Shopify, which uses its own cookies to operate the checkout and prevent fraud. If this changes in the future, we will update this Privacy Policy and provide any notices or choices required by applicable law.

We do not sell your personal data. We may share your information with:

• Service Providers: Our ecommerce and checkout platform (Shopify), which also facilitates payment processing at checkout; our email/newsletter platform (Klaviyo); our contact form provider (Formspree); shipping carriers; and the hosting and infrastructure providers that operate our website.
• Legal Authorities: When required by law, regulation, or legal process.
• Business Transfers: In connection with a merger, acquisition, or sale of assets, your data may be transferred as part of the transaction.

We retain your personal information for as long as necessary to fulfill the purposes described in this policy, or as required by law. We retain order-related and transaction information for as long as reasonably necessary for tax, accounting, legal, fraud-prevention, and business-record purposes.

As a U.S. resident, you may have the following rights depending on your state of residence:

• Access: Request a copy of the personal data we hold about you.
• Correction: Request that we correct inaccurate personal data.
• Deletion: Request that we delete your personal data, subject to certain exceptions.
• Opt-Out: Unsubscribe from marketing emails at any time by clicking "unsubscribe" in any email.

Depending on your state of residence and applicable law, you may have certain privacy rights, including rights that may be granted under laws such as the California Consumer Privacy Act (CCPA). Regardless of whether a particular state privacy law applies to COTI, you may contact us to request access to, correction of, or deletion of certain personal information we maintain about you, subject to applicable exceptions and our ability to verify the request.

We do not sell personal information, and we do not share personal information for cross-context behavioral advertising. If this changes, we will update this Privacy Policy and provide an opt-out method as required by law.

Our website is not directed to children under the age of 13. We do not knowingly collect personal information from children. If you believe we have inadvertently collected such information, please contact us immediately.

We implement commercially reasonable security measures to protect your information. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.

We may update this Privacy Policy from time to time. When we do, we will revise the "Last Updated" date at the top of this page and, where appropriate, communicate material changes. We encourage you to review this Privacy Policy periodically for updates.

If you have any questions about this Privacy Policy, please contact us:

COTI LLC
hello@cotinewyork.com
www.cotinewyork.com
New York, United States