Privacy Policy
Last updated: October 2026
1. Who we are
The shop www.coucoushop.com is run by CouCou Ltd, registered in England and Wales under company number 07634456, registered office 126 Twelve Acres, Braintree, Essex, CM7 3RN, United Kingdom. CouCou Ltd decides how your personal data is used (the "controller").
Questions about your data: info@coucoushop.com.
This policy explains what we collect, why, who we share it with, how long we keep it and what rights you have. It applies under the UK GDPR and, for customers in the European Union, the EU General Data Protection Regulation (GDPR).
2. What data we collect
| Data | Examples | When |
|---|---|---|
| Order details | Name, billing and delivery address, email, phone, products ordered, order history | When you order |
| Payment confirmation | Payment method, status, card type and last four digits (never the full card number) | When you pay |
| Account details | Login email, password (stored encrypted), saved addresses | If you create an account |
| Messages | Your name, email and message | When you contact us |
| Newsletter | Email address, language | Only if you subscribe |
| Unfinished checkout | Details you typed at checkout and your cart | When you start checkout (section 4) |
| Device and usage data | IP address, browser, device, pages viewed, clicks and scrolling | When you visit, depending on your cookie choice (section 6) |
We do not collect special categories of data (such as health data), and we never store your full card number.
At checkout we pre-select your delivery country by looking up the country of your IP address in a database stored on our own server; your IP address is not sent to anyone for this. IP geolocation by DB-IP.
3. Why we use your data and on what legal basis
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, sourcing back-order items, returns and complaints | Contract (Art. 6(1)(b) GDPR) |
| Invoices, accounting and tax records | Legal obligation (Art. 6(1)(c)) |
| Answering your messages | Contract or our legitimate interest in helping you (Art. 6(1)(b)/(f)) |
| Helping you finish an unfinished order (section 4) | Legitimate interest (Art. 6(1)(f)) |
| Preventing fraud and securing payments | Legitimate interest (Art. 6(1)(f)) |
| Occasional emails to past customers about similar fragrances, with an unsubscribe link in every email | Legitimate interest and the rules for existing customers (Art. 6(1)(f)) |
| Newsletter | Your consent (Art. 6(1)(a)) |
| Analytics, session recordings and advertising cookies | Your consent (Art. 6(1)(a)) |
You can object to any use based on legitimate interest, and stop marketing emails at any time with one click.
4. Unfinished orders
Details you enter at checkout may be stored even if you do not complete your order, so that we can help you finish it. This includes your name, email, phone, country, the products in your cart and how far you got. We may write to you once to ask if you need help. We delete these details after 90 days at the latest, or earlier if you ask.
5. Payments
Card payments are handled by Stripe and PayPal payments by PayPal. You enter your card or PayPal details directly with them; we never see or store your full card number.
Stripe and PayPal tell us whether a payment succeeded and share limited details such as the card type and last four digits. They may use automated checks to prevent fraud, which can sometimes block or ask for extra verification of a payment (for example 3-D Secure by your bank). Their own privacy policies apply to the data they process.
6. Cookies and analytics
We use cookies that the shop needs to work (cart, language, currency, login, security) without asking. All other cookies are used only if you accept them in the cookie banner, and you can change your choice at any time with the cookie button in the corner of every page.
| Tool | What it does | Provider |
|---|---|---|
| Google Analytics | Counts visits and shows which pages are used | |
| Google Ads | Measures whether ads lead to orders | |
| Microsoft Clarity | Records clicks, scrolling and page visits to find problems in the shop; form fields such as names, addresses and payment details are hidden in recordings | Microsoft |
We use this information only to improve the shop and our ads, not to identify you personally.
7. Who we share your data with
We never sell your data. We share only what each partner needs:
| Who | Why | What |
|---|---|---|
| Stripe, PayPal | Taking payments | Order total, name, email, billing details |
| Carriers: GLS, Slovak Parcel Service, Slovak Post, UPS, Express One | Delivering your parcel | Name, delivery address, phone, email |
| Our team that packs and dispatches orders in the EU | Sending your order | Order and delivery details |
| Hosting and email providers | Running the website and email | All data stored in the shop or sent by email |
| Google, Microsoft | Analytics and ads (only with your consent) | Device and usage data |
| Accountants and tax authorities | Legal obligations | Invoices and order records |
We may also disclose data if the law requires it, for example to a court or authority.
8. Transfers outside the UK and EU
Our company is in the UK, which the EU recognises as providing adequate data protection. Some providers (for example Google, Microsoft, Stripe and PayPal) may process data in the United States or elsewhere. Where they do, the transfer is protected by an adequacy decision (such as the EU–US Data Privacy Framework) or by standard contractual clauses approved by the European Commission and the UK.
9. How long we keep your data
| Data | How long |
|---|---|
| Orders and invoices | As long as tax and accounting law requires, currently 6 to 10 years |
| Unfinished checkout details | Up to 90 days |
| Messages to us | Up to 2 years after our last contact |
| Account | Until you close it, then as for orders |
| Newsletter | Until you unsubscribe |
| Analytics and recordings | As set in each tool, at most 14 months |
After that, we delete or anonymise the data.
10. Your rights
You can ask us at any time to:
- see the data we hold about you and get a copy;
- correct data that is wrong;
- delete your data, unless we must keep it by law;
- limit how we use it, or object to a use based on legitimate interest;
- receive your data in a common format to give to someone else;
- withdraw a consent you gave (this does not affect what we did before).
Write to info@coucoushop.com. We reply within one month. You can also complain to a data protection authority: in the UK the Information Commissioner's Office (ico.org.uk), or the authority in the EU country where you live.
11. Security, children, changes and contact
- Security: the shop uses an encrypted connection (HTTPS), passwords are stored encrypted, and access to customer data is limited to the people who need it.
- Children: the shop is not intended for anyone under 16, and we do not knowingly collect their data.
- Changes: we may update this policy; the date at the top shows the latest version.
- Contact: CouCou Ltd, 126 Twelve Acres, Braintree, Essex, CM7 3RN, United Kingdom · info@coucoushop.com