1) Our promise
Your privacy is important. This Policy explains—clearly and simply—what we collect, why we collect it, how we use it, who we share it with, and the choices you have. By using our website and services (“Platform”), you agree to this Policy. If you don’t agree, please stop using the Platform.
2) Who we are
“We / Us / Our” means The House of Disha, which operates the kidswear brand Coco & Co and runs this Platform.
3) What this covers
This Policy applies to anyone who visits, browses, creates an account, makes a purchase, contacts support, or otherwise interacts with our Platform (“Users”).
4) Information we collect
a) Personal information (you or your child can be identified)
• Identity & contact: name, email, phone, shipping/billing address.
• Account: login ID, password (stored in hashed form), preferences (e.g., size).
• Orders & support: items purchased, invoices, messages you send us.
• Media you share: photos or files you upload for returns, queries, or reviews.
b) Payment information
Payments are handled by our secure payment partners (cards/UPI/net banking). They collect necessary details to process your payment. We do not store full card or UPI credentials.
c) Device & usage data (does not directly identify you)
• Technical data: IP address, device/browser type, operating system.
• Activity data: pages viewed, time spent, referring/exit pages, clicks.
• Cookies/SDKs: used to run the site, remember choices, and improve experience.
d) Optional permissions
With your explicit permission, we may access your device camera/gallery only to help you upload images (e.g., for returns). You can withdraw this permission anytime in your device settings.
5) Why we use your information (purposes)
We use information to:
• Set up your account and verify your identity.
• Process orders, payments, shipping, returns, exchanges, and refunds.
• Provide customer support and service notifications.
• Improve sizing, products, content, and site performance.
• Show relevant products and offers (where permitted).
• Prevent fraud and secure our systems.
• Comply with legal duties and respond to lawful requests.
We may aggregate or de-identify data so it no longer identifies you; we use such data for analytics, reporting, and historical/statistical purposes.
6) Legal basis & consent (India)
We process data based on: (i) your consent (e.g., marketing, optional features); (ii) to perform a contract with you (orders/returns); (iii) legal compliance; and (iv) legitimate operational needs such as security and fraud prevention. You may withdraw consent at any time for activities that rely on consent—see Section 12.
7) Cookies & similar tech
Cookies help the site work (cart, checkout, login), remember your choices, and measure what’s working. Most browsers accept cookies by default; you can change settings to limit or block them, but some features may stop working. You may also encounter third-party cookies (analytics/ads). Manage preferences via your browser and our Cookie Settings.
8) Who we share information with
We share information with trusted partners who help us run our business, strictly for the purposes listed above:
• Payments: secure payment gateways/processors.
• Logistics & warehousing: delivery, pickup, return handling.
• Technology & communications: hosting, email/SMS, analytics, security.
• Professional advisors & authorities: when required by law or to protect our rights.
We do not sell your personal information to third parties for their independent marketing.
9) Storage, location & transfers
We may store or process information in India or other countries. Where data moves across borders, we use reasonable safeguards and require service providers to protect it appropriately. We keep your data only as long as needed for the purposes in this Policy and as required by law, after which we delete or de-identify it.
10) Children’s privacy
We treat anyone under 18 as a child. We don’t knowingly collect data from children without verifiable parental/guardian consent. Parents/guardians can contact us to review or delete a child’s data.
11) Security
We use reasonable technical and organizational measures—encryption in transit, access controls, hashed passwords, monitoring—to protect information. No system is perfectly secure. Keep your password private and be cautious on shared devices and networks.
12) Your choices & rights
Depending on law, you may:
• Access the personal data we hold about you.
• Correct inaccurate or incomplete details.
• Delete data we no longer need (subject to legal retention).
• Withdraw consent for activities that rely on consent (e.g., marketing).
• Opt-out of marketing using the unsubscribe link or by contacting us.
To exercise these rights, email support@cocoandco.in from your registered email with your order/account details. We may ask for proof of identity.
13) Marketing & communications
We may send emails/SMS/WhatsApp about launches, offers, and stories if you’ve opted in or if permitted by law. You can opt out anytime through message controls or by writing to support@cocoandco.in.
14) Third-party links & ads
Our Platform may link to external sites or show third-party widgets/ads. We don’t control those sites and aren’t responsible for their privacy practices. Review their policies before using their services.
15) Grievances & contact
If you have questions or concerns, or want to exercise your rights, contact our Grievance Officer:
Name: Akhil Pitty
Email: support@cocoandco.in
Phone/WhatsApp: +91-8485870545 (10:00 AM–6:00 PM, Mon–Sat)
For general support: support@cocoandco.in
16) Changes to this Policy
We may update this Privacy Policy to reflect changes in law, technology, or how we operate. Whenever we make a change, the updated Policy will be uploaded on our website. We encourage you to review this page periodically. If you do not agree with an update, please discontinue use of the Platform.
