Privacy Policy

Last Updated: July 20, 2025

This Privacy Policy for THERESA LAMBERT (doing business as Hat Wear, “Hat Wear,” “we,” “us,” or “our”) explains how and why we may access, collect, store, use, and share (“process”) your personal information when you use our services (“Services”). These Services include, but are not limited to:

• Visiting our website at https://cosyhats.com/ or any other website of ours that links to this Privacy Policy.
• Engaging with us through sales, marketing activities, or events.

If you have any questions or concerns, please review this Privacy Policy to understand your privacy rights and choices. We are responsible for determining how your personal information is processed. If you do not agree with our policies and practices, please do not use our Services.

SUMMARY OF KEY POINTS

Below is a brief overview of the main aspects of our Privacy Policy. You can learn more about any of these topics by navigating to the corresponding sections later in this document.

What personal information do we process? When you visit, use, or navigate our Services, we may process various types of personal information based on your interactions, the choices you make, and the products and features you use. This includes information you provide to us, such as your name, shipping address, billing address, payment information (processed by secure third-party payment processors), email address, and phone number, as well as information automatically collected, such as your IP address and browsing behavior.

Do we process any sensitive personal information? We do not process sensitive personal information.

Do we collect information from third parties? We do not collect personal information from third-party sources, other than what may be provided by our payment processors to confirm transaction status or by analytics providers in an aggregated, non-identifiable format.

How do we process your information? We process your information to provide, improve, and administer our Services (including fulfilling your orders), communicate with you, ensure security and prevent fraud, and comply with legal requirements. We may also process your information for other purposes with your consent.

When and with whom do we share your personal information? Your personal information may be shared in specific circumstances and with designated third parties, such as payment processors to facilitate your purchases, shipping carriers to deliver your orders, and service providers who help us operate our Services.

How do we keep your information safe? We implement a variety of security measures to maintain the safety of your personal information. Your payment information is processed by secure third-party payment gateways. While we strive to protect your personal information, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure.

What are your rights? Depending on your geographical location, you may have certain rights regarding your personal information under applicable privacy laws.

How do you exercise your rights? The simplest way to exercise your rights is by contacting us directly using the information provided in this policy. We will review and act on your request in compliance with applicable data protection laws.

TABLE OF CONTENTS

1. What Information We Collect
2. How We Process Your Information
3. When and With Whom We Share Your Personal Information
4. Use of Cookies and Other Tracking Technologies
5. How Long We Retain Your Information
6. How We Keep Your Information Safe
7. Collection of Information from Minors
8. Your Privacy Rights
9. Controls for Do-Not-Track Features
10. Privacy Rights for United States Residents
11. Updates to This Privacy Notice
12. How to Contact Us About This Notice
13. How to Review, Update, or Delete Your Information

1. What Information We Collect

We collect personal information that you voluntarily provide to us when you register on the Services, express an interest in obtaining information about us or our products and Services, when you participate in activities on the Services, or otherwise when you contact us.

The personal information we collect may include:

• Personal Identifiers: Name, postal address (shipping and billing), email address, phone number.
• Account Credentials: Usernames, passwords, password hints, and similar security information used for authentication and account access.
• Payment Data: We collect data necessary to process your payment if you make purchases. All payment data is processed, stored, and secured by our third-party payment processors (e.g., Stripe, PayPal). We do not directly store your full payment card details on our servers.
• Commercial Information: Records of products or services purchased, obtained, or considered.
• Internet or other electronic network activity information: We automatically collect certain information when you visit or navigate the Services. This information does not reveal your specific identity but may include your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, and information about how and when you use our Services. This information is primarily needed to maintain the security and operation of our Services and for internal analytics.

2. How We Process Your Information

We process your personal information for a variety of reasons, including:

• To facilitate account creation and authentication and manage user accounts.
• To deliver and facilitate delivery of services to you, most notably to process and fulfill your orders, including shipping and handling.
• To respond to your inquiries and offer support.
• To send administrative information to you, such as details about our products, services, and changes to our terms and policies.
• To request feedback about your use of our Services.
• To send you marketing and promotional communications (with your consent). You can opt-out of our marketing emails at any time.
• To protect our Services through fraud monitoring and prevention.
• To identify usage trends and improve our Services.
• To comply with our legal obligations and respond to legal requests.

3. When and With Whom We Share Your Personal Information

We may need to share your personal information in the following situations:

• Vendors, Consultants, and Other Third-Party Service Providers: We may share your data with third-party vendors, service providers, or agents who perform services for us, such as payment processing, data analysis, email delivery, hosting services, customer service, shipping, and marketing.
• Payment Processors: When you make a purchase, your payment information is provided directly to our third-party payment processors. These processors use your information to process your payment and are obligated to protect it under their own privacy policies.
• Shipping Carriers: To deliver your products, we share your name, shipping address, and sometimes phone number or email with shipping carriers (e.g., USPS, FedEx, UPS).
• Business Transfers: We may share or transfer your information in connection with any merger, sale of company assets, financing, or acquisition of our business.
• Legal Obligations and Rights: We may disclose your information where we are legally required to do so to comply with applicable law, governmental requests, a court order, or other legal processes.
• With Your Consent: We may disclose your personal information for any other purpose with your consent.

4. Use of Cookies and Other Tracking Technologies

We may use cookies and similar tracking technologies (like web beacons and pixels) to access or store information. Cookies are small data files placed on your device when you visit a website. We use them for essential functions (like shopping carts), performance analytics, and to enhance functionality. You can manage your cookie preferences through your browser settings; however, if you block essential cookies, some features of our Services may not operate properly.

5. How Long We Retain Your Information

We will only keep your personal information for as long as it is necessary for the purposes set out in this Privacy Policy, unless a longer retention period is required or permitted by law (such as for tax, accounting, or other legal requirements). When we have no ongoing legitimate business need to process your personal information, we will either delete or anonymize it.

6. How We Keep Your Information Safe

We have implemented appropriate technical and organizational security measures designed to protect the security of any personal information we process. Our website uses Secure Socket Layer (SSL) technology to encrypt information, and payment transactions are processed through secure, PCI-compliant third-party gateways.

However, despite our safeguards, no electronic transmission over the Internet or information storage technology can be guaranteed to be 100% secure. Transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment.

7. Collection of Information from Minors

Our Services are not directed to individuals under the age of 13, and we do not knowingly collect personal information from children under this age. If you believe your child has provided us with personal information without your consent, please contact us, and we will take steps to delete such information.

8. Your Privacy Rights

Depending on your location, you may have rights regarding your personal information, including the right to request access, correction, erasure, or restriction of processing of your personal information. To exercise these rights, please contact us using the details provided below.

9. Controls for Do-Not-Track Features

Most web browsers include a Do-Not-Track (“DNT”) feature. At this stage, no uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals.

10. Privacy Rights for United States Residents

If you are a resident of certain US states, such as California, Colorado, or Virginia, you may have additional rights regarding your personal information.

• California Residents (CCPA/CPRA): You have the right to know what personal information is collected, used, or shared. You have the right to delete your personal information and to opt-out of the “sale” or “sharing” of your personal information (note: while we do not sell data in the traditional sense, some uses of advertising cookies may be considered “sharing”). You also have the right to non-discrimination for exercising these rights. To exercise these rights, please contact us.

11. Updates to This Privacy Notice

We may update this Privacy Policy from time to time. The updated version will be indicated by a revised “Last Updated” date. We encourage you to review this Privacy Policy frequently to stay informed.

12. How to Contact Us About This Notice

If you have questions or comments about this notice, you may contact us by:

• Email: contact@cosyhats.com
• Phone: +1 (209) 688-3466
• Address: 2550 Somersville Rd, Antioch, CA 94509, United States
• Contact Page: https://cosyhats.com/contact-us

Our support hours are generally Monday through Friday, 10:00 AM – 8:00 PM (GMT).

13. How to Review, Update, or Delete Your Information

Based on the applicable laws of your country or state, you may have the right to request access to, change, or delete the personal information we collect from you. To make such a request, please use the contact information provided in the section above. We will respond to your request in accordance with applicable law.