Privacy policy

Privacy Policy
Last updated: 3 August 2025

This Privacy Policy describes how comfypillows.co (“the Site” or “we”) collects, uses, and discloses your Personal Information when you visit or make a purchase from the Site.


Contact
If you have questions, want more information about our privacy practices, or would like to make a complaint, please contact us through our contact form.


Collecting Personal Information

When you visit the Site, we collect certain information about your device, your interaction with the Site, and details necessary to process your purchases. We may also collect additional information if you contact us for customer support.

“Personal Information” means any data that can identify you directly or indirectly. Below is what we collect and why:

Device Information

  • Purpose: Load the Site accurately and perform analytics to improve performance

  • Source: Automatically via cookies, log files, web beacons, tags, or pixels

  • Disclosure: Shared with Shopify

  • Collected: Browser version, IP address, time zone, cookie data, products viewed, search terms, and user interactions

Order Information

  • Purpose: Fulfill orders, process payments, arrange shipping, send confirmations/invoices, communicate, detect fraud, and send relevant marketing (if opted in)

  • Source: Collected directly from you

  • Disclosure: Shared with Shopify

  • Collected: Name, billing and shipping address, payment information (including card numbers), email, and phone number

Customer Support Information

  • Purpose: Provide customer support

  • Source: Collected directly from you


Minors
This Site is not intended for individuals under 18. We do not knowingly collect data from children. If you believe your child has submitted information, please contact us through our contact form to request deletion.


Sharing Personal Information

We share your data with service providers that help operate the Site and fulfill our services:

  • Shopify: Our store platform. See: Shopify Privacy Policy

  • Legal compliance: We may disclose your information to comply with laws or protect our rights

Shopify Network Intelligence Notice:
We participate in Shopify Network Intelligence, which uses aggregated technical and behavioral data across Shopify’s network to detect fraud and improve performance. This data is anonymized and not used for marketing.


Behavioural Advertising

We use your Personal Information to deliver personalized advertising. For example:

  • We use Google Analytics to understand customer behavior. See: Google Privacy Policy

  • We may share browsing and purchase data with advertising platforms via cookies or similar technologies

Learn more about targeted ads:

  • NAI Overview

  • Opt-out: Facebook, TikTok, Google, Bing, DAA Opt-Out


Using Personal Information

We use your data to:

  • Sell and ship products

  • Process transactions

  • Provide customer support

  • Detect fraud

  • Send updates and promotions (if subscribed)


Lawful Basis (GDPR – EEA Residents)

We process your data under the following lawful bases:

  • Your consent

  • Performance of a contract

  • Legal obligations

  • Protection of vital interests

  • Public interest

  • Legitimate interests (where not overridden by your rights)


Currency Detection
To display prices in your local currency, third-party services may process your IP address. A session cookie stores the selected currency in your browser.


Retention
We retain your order information unless and until you request deletion. See “Your Rights” below for how to make a request.


Automated Decision-Making
We do not engage in automated decisions that legally or significantly affect you.

Shopify may temporarily:

  • Blacklist IPs after failed transactions

  • Block credit cards linked to flagged IPs

These actions are automated but do not significantly impact individual users.


Selling Personal Information (CCPA)
Under the California Consumer Privacy Act (CCPA), our Site may be considered to sell Personal Information for advertising purposes.
You may opt out of this by contacting us via our contact form.


Your Rights

GDPR (EEA Residents)
You have the right to:

  • Access your data

  • Correct, update, or delete it

  • Port your data to another provider

To exercise these rights, please reach out through our contact form.
Your data may be processed in Ireland, the US, and Canada.
See: Shopify GDPR Whitepaper

CCPA (California Residents)
You may:

  • Request to know what we collect

  • Access, correct, or delete your data

  • Port your data

  • Appoint an authorized agent to act on your behalf

Submit requests via our contact form.


Cookies

Cookies are small files used to:

  • Store preferences

  • Enable key features (e.g., cart, checkout)

  • Track usage analytics

  • Power ads and personalization

We use both session and persistent cookies. Some expire within minutes, others may last up to 2 years.

You can manage cookies in your browser settings. Learn more: www.allaboutcookies.org

Note: Blocking cookies may affect functionality and ad opt-outs.


Do Not Track
We do not respond to “Do Not Track” signals, as there is no industry-wide standard for interpreting them.


Changes
We may update this Privacy Policy as our practices or legal obligations evolve. All changes will be posted on this page.


Complaints
If you are unsatisfied with how we handle your data, please contact us via our contact form. You may also contact your local data protection authority.