Early Access.Get first access to new drops.

COCOMAN

Privacy Policy

COCOMAN (“Company”, “we”, “our”, or “us”) is committed to protecting your personal data in accordance with:

  • The Information Technology Act, 2000
  • The Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011
  • The Digital Personal Data Protection Act, 2023

By accessing our website, Shopify store, mobile interfaces, or visiting our physical outlets, you agree to this Privacy Policy.

1. Role of the Company

Under the DPDP Act, COCOMAN acts as a Data Fiduciary, meaning we determine the purpose and means of processing your personal data.

2. Personal Data We Collect

We collect only data necessary for lawful purposes.

A. Identity & Contact Data

  • Name
  • Email address
  • Mobile number
  • Billing and shipping address

B. Transaction Data

  • Order history
  • Payment transaction reference details
  • Refund information

C. Account Data

  • Username
  • Encrypted password

D. Technical Data

  • IP address
  • Browser type
  • Device information
  • Cookies and usage analytics

We do not intentionally collect data from children below 18 years of age.

3. Purpose of Processing (Lawful Use)

We process personal data only for:

  • Order fulfilment
  • Customer support
  • Account management
  • Collaboration processing
  • Fraud detection
  • Legal compliance
  • Marketing communications (with consent)
  • Improving user experience

Personal data will not be processed for purposes other than those stated above unless explicit consent is obtained from the user or where such processing is required under applicable law.

4. Consent (Core DPDP Requirement)

Consent under DPDP Act must be: Free, Specific, Informed, Unconditional, Unambiguous, and given through clear affirmative action.

By clicking “I Agree”, placing an order, or creating an account, you provide consent for processing your data for specified purposes.

You have the right to:

  • Withdraw consent at any time
  • Request correction
  • Request erasure
  • Access information about processing

To exercise these rights, contact: care@cocoman.store

Withdrawal of consent will not affect lawful processing done prior to withdrawal.

5. Data Principal Rights (DPDP Compliance)

1. Right to Access Information

Summary of data processed, processing activities, and identities of data processors.

2. Right to Correction and Erasure

Users have the right to request correction of inaccurate or incomplete personal data or request deletion of their personal data maintained by the Company.

  • Submit a Request: Users may submit a request by emailing the designated grievance/support email.
  • Provide Required Details: The request should include the user’s name, registered contact details, and a clear description of the data that needs to be corrected or erased.
  • Verification: The Company may verify the identity of the requester before processing the request.
  • Processing: Upon verification, the Company will review the request and take appropriate action to correct or delete the data.
  • Timeline: The Company will respond to such requests within 15 working days.
  • Exceptions: Certain information may be retained where required under applicable laws or for legitimate business purposes.

3. Right to Grievance Redressal

Users have the right to raise grievances regarding the collection, use, or processing of their personal data.

  • Filing a Complaint: Users may submit their grievance through the contact form on the website or by emailing the designated grievance officer.
  • Complaint Details: The complaint should include the user’s name, contact information, and a brief description of the issue.
  • Acknowledgement: The Company will acknowledge the complaint within 3–5 working days.
  • Review and Resolution: The grievance will be reviewed internally and appropriate action will be taken.
  • Resolution Timeline: The Company will aim to resolve the grievance within 15 working days from the date of receipt.

4. Right to Nominate

You may nominate another individual to exercise your rights in case of death or incapacity. Requests will be addressed within prescribed timelines.

6. Children’s Data

We do not knowingly process personal data of children (below 18 years). If discovered, such data will be deleted promptly. No behavioural tracking or targeted advertising is conducted for minors.

7. Data Security Safeguards

We implement reasonable technical and organisational safeguards including:

  • SSL encryption
  • Secure payment gateway integration
  • Access control mechanisms
  • Vendor confidentiality agreements
  • Periodic security audits

In the event of a data breach, we will notify the Data Protection Board of India and affected users as required under the DPDP Act.

8. Data Retention

We retain data only as long as necessary for:

  • Fulfilling orders
  • Legal compliance (tax, audit, accounting)
  • Dispute resolution

When data is no longer required, it is securely deleted or anonymised.

9. Disclosure of Data to Third Parties

In order to provide our services effectively, we may share limited personal data with trusted third-party service providers including:

  • Payment gateway providers for processing transactions
  • Logistics and delivery partners for order fulfilment
  • Cloud hosting providers (including Shopify infrastructure)
  • IT service providers supporting our website and systems
  • Auditors, legal advisors, and regulatory authorities where required by law

Such sharing will take place only with the explicit consent of the user or where it is necessary for the performance of a contract or compliance with legal obligations.

All third parties with whom personal data is shared are contractually obligated to maintain strict confidentiality, implement appropriate security measures, and process personal data only for the specified purpose in accordance with applicable data protection laws.

10. Cross-Border Data Transfers

Personal data may be processed outside India through cloud service providers or Shopify infrastructure. Such transfers shall comply with restrictions notified by the Government of India under the DPDP Act.

11. Non-Personal Identifiable Information

We may also collect aggregated information regarding the use of our service, such as the extent to which certain features are used. Aggregated information is anonymous, statistical information that reflects the scope of our user base, sales, and customer patterns from both online and physical outlet usage. We use this information to better understand how COCOMAN service is used, and to improve the online experience of our users. This information is not used in a way that will personally identify you. In addition, certain non-personally identifiable information is collected by COCOMAN and may be used by any third-party advertising providers during the course of your use of COCOMAN service.

12. Cookies & Shared Objects

We may also use cookies and/or shared objects to track and understand the traffic on our website. Cookies are alphanumeric identifiers that our website places onto your computer’s hard drive. Cookies identify your computer so that we can recognize you the next time you visit us. We may use cookies and/or shared objects to collect and store some information about you, such as the name of the domain and host from which you access the Internet, the Internet Protocol (IP) address of the computer you are using, the date and time you access our website and the Internet address of the website from which you linked directly to our website. We use this information to better understand our users and customize our site for users’ particular preferences.

13. Deletion of E-commerce Transaction Data

For users who have made purchases through our Shopify website or at our physical outlets, certain transactional data may be retained for accounting and legal compliance purposes. However, any unnecessary personal information will be securely deleted upon request.

14. Confirmation of Data Deletion

Upon successful deletion of user data, COCOMAN will provide confirmation to the user via email or another agreed-upon communication method.

15. Data Backup and Deletion

We regularly backup our website data for security and disaster recovery purposes. While deleted user data is removed from active systems, it may be retained in backup archives for a limited period. These backups are securely stored and will be overwritten or deleted in due course.

16. Grievance Officer

In compliance with applicable law:

Designation: General Manager

Email:care@cocoman.store

Address: Sruthika building, asramam lane, kaloor, kochi

Phone: +91 9846459601

Complaints will be acknowledged within 36 hours and resolved within one month.

17. Changes to this Policy

COCOMAN reserves the right to update or modify this User Data Deletion section of the privacy policy at any time. Users will be notified of any changes through the website or other communication channels.

For any inquiries or concerns regarding data deletion, please contact our team at care@cocoman.store.

Customer Service

For assistance, please email us at care@cocoman.store

Your Bag (0)

Your bag is empty