1. What we collect
We collect only what we need to source your order and run the service:
- Order and contact details — your name, email, shipping address, and the details of the item you ask us to source (Taobao links, uploaded images, keywords, size and colour notes).
- Payment information — processed by our checkout and payment providers. We receive confirmation that payment succeeded and limited transaction data, but we do not store your full card number.
- Communications — messages you send us by email or via our Discord community.
- Usage and device data — collected automatically by cookies and similar technologies (see Section 4), such as pages viewed, searches run, approximate location, device and browser type, and how you arrived at the site.
2. How we use your data
- to source, quality-check, ship, and provide support for your order;
- to communicate with you about your order and respond to enquiries;
- to operate, secure, measure, and improve the site and the service;
- to measure marketing and, where permitted, show and optimise relevant advertising;
- to comply with our legal, tax, and accounting obligations, and to prevent fraud.
Our legal bases are: performance of our contract with you (to fulfil your order); our legitimate interests (to run, secure, and improve the service); your consent (for non-essential analytics and advertising cookies, where required); and compliance with legal obligations.
3. How we share your data — we never sell it
We do not sell your personal data. We share it only with the service providers we contract to run Cosparty, who process it on our instructions:
- Shopify — hosts our checkout and processes your order and payment.
- Card and payment processors — the payment partners used at checkout (which may include Shop Pay, PayPal, and Apple Pay) to take your payment securely.
- Sourcing and shipping partners — our team and logistics carriers in China and internationally, who need your shipping details to fulfil and deliver your order. Cross-border shipping and customs clearance require sharing the recipient and item details with carriers and customs authorities.
- Analytics and advertising providers — the providers listed in Section 4.
We may also disclose data where required by law, or to protect our rights, users, or the public. Some of these providers are outside the EEA; where that is the case, transfers are covered by appropriate safeguards such as the EU Standard Contractual Clauses.
4. Cookies and tracking
We use cookies and similar technologies for two purposes: to make the site work, and to understand and improve how it is used and marketed. The tools we run on this site are:
- PostHog — first-party product analytics, so we can see how the site is used and fix friction points. (Team and internal devices are excluded from tracking.)
- Google Analytics 4 — website analytics and measurement for our advertising.
- Meta Pixel — measures and optimises our advertising on Facebook and Instagram.
- Reddit Pixel — measures and optimises our advertising on Reddit.
Checkout runs on Shopify, which sets its own cookies necessary to process your order and payment securely. You can control or block cookies through your browser settings; blocking non-essential cookies will not stop you from placing an order. Because the purchase itself completes on the Shopify checkout, some measurement of completed orders happens on the Shopify side.
5. Data protection and retention
We use appropriate technical and organisational measures to protect your data against loss, misuse, and unauthorised access. We keep personal data only as long as needed for the purposes above — typically for the life of your order and support relationship, and thereafter for as long as we must retain records to meet our legal, tax, and accounting obligations. When data is no longer needed, we delete or anonymise it.
6. Your GDPR rights
Subject to applicable law, you have the right to: access the personal data we hold about you; request correction of inaccurate data; deletion of your data (“right to be forgotten”); restrict or object to certain processing (including direct marketing); request portability of the data you provided; and withdraw consent at any time where processing is based on consent. To exercise any of these rights, contact us at contact@cospartyco.com. You also have the right to lodge a complaint with your local data protection authority (in Estonia, the Data Protection Inspectorate / Andmekaitse Inspektsioon).
7. Children
Cosparty is not directed at children under 16. We do not knowingly collect personal data from children. If you believe a child has provided us data, contact us and we will delete it.
8. Changes to this policy
We may update this Privacy Policy from time to time. The current version is always published here, and the “Last updated” date above reflects the latest change. Material changes will be made clear on this page.
9. Contact
PXR Ventures OÜ
Tornimäe tn 3 // 5 // 7, Kesklinna linnaosa, 10145 Tallinn, Harju maakond, Estonia
contact@cospartyco.com
See also our Terms of Service and Legal Notice.