Skip to content
Cosmevo

Legal

Privacy Policy

Last updated 8 October 2026

This page explains, in plain words, what information Cosmevo collects and what we do with it. In short: we use it only for your order and your messages, and we never sell it.

What we collect

  • When you place an order: your name, phone number, optional email, delivery address, province, city and the items you ordered.
  • When you make an account: your email (you sign in with a one-time code sent to it, or with Google, or with a password you choose), your name, the addresses you save, and your phone number once you confirm it with a past order number. With Google, we receive only your name and email.
  • Points and invites: the points you earn and use, and the friends who ordered through your invite. You only see the date and the result for each friend, never their name or details.
  • Returns: the products, the reason, your note and up to 3 photos you add.
  • Reviews and questions: the name you give, your rating, your comment, any photos, and your question. An email you give with a question is only used to tell you it is answered, and is never shown.
  • "Notify me": your email, to send you one email when that product can be ordered.
  • When you use the contact form: your name, email, optional phone number, optional order number and your message.
  • When you subscribe to our newsletter: your email address.
  • In your browser: your cart, your wishlist (when you are not signed in) and the last 8 products you looked at are kept in your browser's local storage. They stay on your device. Signed in, your wishlist is also saved in your account.

Where it is kept

Orders, accounts, messages, subscribers and reviews are kept in a Supabase database. Product photos, videos and the photos you add to returns and reviews are hosted on Cloudinary. Emails are sent through our email service. The website runs on Vercel. A locked (encrypted) copy of the database is made every night as a backup and kept for 30 days, so nothing is lost if something goes wrong.

No tracking or advertising pixels

We do not use Google Analytics, the Meta (Facebook and Instagram) pixel or any other visitor tracking or advertising tool on this website today, and we send nothing about your visit or your order to Google or Meta. If that ever changes, we will update this page first and say exactly what is used.

Cookies

We only use the cookies the shop needs to work: keeping you signed in to your account, and keeping the team signed in to the admin. Your cart, wishlist and recently viewed products stay in your browser's local storage, not in a cookie. There are no tracking or advertising cookies.

Keeping the shop safe

  • Cloudflare Turnstile checks that forms (checkout, sign-in, reviews, questions, contact, newsletter, order tracking, returns) are sent by a person, not a robot. Usually you see nothing. Cloudflare looks at technical details of your browser for this check only.
  • Sentry tells us when a page breaks. Names, phone numbers, emails and addresses are removed from these reports before they leave the website.
  • We count requests per internet connection for a short time to stop abuse (for example too many orders or sign-in tries in a minute).

How we use it

We use your information only to deliver your order, to confirm it with you, to run your account, points and returns, and to answer your messages. We never sell your information.

Your account

In your account, under Privacy, you can download everything we hold about you (a PDF and a JSON file), see the phones and computers where you are signed in, and sign out everywhere.

Asking us to delete your information

You can ask us to delete your information at any time: in your account (Privacy, Delete my data), on WhatsApp (0309 4560316), or by email to info@cosmevo.pk with the name and phone number you used. The owner checks each request. Then your name, phone, email and addresses are replaced on your orders, messages and reviews, and your account is closed. Order totals stay in our accounts without your details. A protected copy is kept for up to 30 days in case of a mistake, then removed.

Changes to this page

If we change how we handle your information, we will update this page and the date at the top.