Privacy Policy

Last updated: 12 March 2026

Welcome to The Comfort Lab. This Privacy Policy details how we (referred to as "the Site", "we", "us", or "our") gather, utilize, and protect your personal information when you browse our platform, buy our products, use our features, or reach out to us at hexacomfort.com (collectively, the "Services"). Within this document, "you" and "your" refers to any individual interacting with our Services—whether as a customer, a casual browser, or someone contacting our team.

Please take a moment to read this policy thoroughly. By accessing or using our Services, you consent to the data practices outlined here. If you do not agree with these terms, please refrain from using our platform.

1. Updates to This Policy

We may periodically update this Privacy Policy to reflect modifications to our business operations, legal mandates, or regulatory requirements. Whenever changes occur, we will post the updated text on this page and revise the "Last updated" date above. We will also take any additional notification steps required by law.

2. Information Collection and Purpose

To power and support our Services, we gather personal data from various avenues. The specific information we collect depends entirely on how you engage with our platform. Over the past 12 months, we have collected data through the channels detailed below.

Beyond the specific scenarios outlined below, your data may be used to handle customer communications, fulfill our contract with you, comply with legal requirements, enforce our terms of service, and safeguard our platform, our rights, and the safety of our users.

Information Provided Directly by You

When you interact with our platform, you might submit the following details directly to us:

• Contact Records: Your name, physical address, telephone number, and email address.

• Transaction Histories: Your name, billing details, shipping destination, order confirmation records, email, and phone number.

• Account Configurations: Usernames, passwords, and chosen security questions.

• Browsing & Preferences: Items you look at, add to your digital shopping cart, or save to a wishlist.

• Support Interactions: Any details or descriptions you share when messaging our support channels.

Note: Certain elements of our Services require specific personal details to function. While you are free to withhold this information, doing so may prevent you from accessing those specific features.

Information Collected via Tracking Technologies (Cookies)

We automatically track certain information about how you navigate and interact with our Services ("Usage Data"). To accomplish this, we utilize cookies, web beacons, tracking pixels, and related digital tools ("Cookies"). This data may encompass details about your device, your browser type, network status, your IP address, and other logs concerning your visit.

Information From External Sources

We also receive data from external business partners and service providers operating on our behalf. This includes:

• Platform managers who host our website structure (such as Shopify).

• Payment gateways that collect your financial details (like bank routing, credit/debit card numbers, and billing addresses) to process transactions, satisfy your orders, and fulfill our contractual commitments.

When you open our emails, visit our store, or interact with our digital advertisements, we and our marketing partners may track your actions using pixels, SDKs, and cookies. We handle all third-party data according to this Privacy Policy, though we are not responsible for the accuracy of information provided by third parties, nor are we liable for their independent policies.

3. How Your Information is Utilized

• Fulfilling Orders & Service Delivery: We use your data to process payments, complete shipments, manage returns or exchanges, coordinate account access, and allow you to submit product reviews.

• Marketing & Advertising: We use your details to deliver promotional offers, updates, and advertisements via email, SMS, or postal mail. This helps us customize our products and store experience to better match your preferences.

• Fraud Detection & Site Security: We monitor data to identify, prevent, or investigate fraudulent behavior or malicious security threats. You are responsible for keeping your login credentials private. If you suspect an unauthorized party has accessed your account, let us know right away.

• Customer Support: We process data to handle your questions and elevate our service standards, which aligns with our legitimate business interest in staying responsive to our customers.

4. Cookie Management

Our website utilizes Cookies to streamline your browsing experience. For explicit information regarding the cookies used to run our Shopify infrastructure, you can review Shopify's Cookie Policy. We use these tracking elements to recall your preferences, evaluate user metrics, and optimize our store layout.

We also coordinate with external marketing networks, using tools like the Meta Pixel for retargeting campaigns. While most web browsers are programmed to accept Cookies automatically, you can adjust your application preferences to block or erase them. Please be aware that disabling cookies might break certain features or lower the overall functionality of our store.

5. Sharing and Disclosing Personal Data

We may share your data with third parties under specific circumstances for legitimate operations:

• Service Vendors: Companies handling specialized tasks for us, such as IT architecture, payment fulfillment, shipping logistics, warehouse operations, and data analysis.

• Business & Advertising Partners: Platforms like Shopify and Meta that help us distribute tailored promotional materials. These entities process your information according to their own privacy standards.

• User-Directed Sharing: When you instruct us to transfer data to an external group (such as arranging a third-party delivery or syncing a social media log-in widget).

• Corporate Structure: Internal affiliates within our corporate umbrella to support business efficiency.

• Legal & Corporate Shifts: Sharing data during corporate mergers, asset sales, or bankruptcy proceedings; or to comply with law enforcement requests, subpoenas, and protective legal measures.

Over the past year, we have shared the following categories of data for the purposes outlined above:

We do not manipulate or share sensitive personal data to guess personal characteristics or traits.

6. Advertising Networks & Data Sharing

Over the past 12 months, we have shared and disclosed specific identifiers, commercial purchase records, and online network data with marketing networks (including Shopify Audiences and Meta) to power retargeting and custom ad campaigns. Under certain legal definitions, these collaborative marketing actions may be classified as "selling" or "sharing" data.

7. Publicly Posted Content

Our platform may allow you to post public product reviews or user-generated media. Any details you choose to upload to these public forums will be accessible to the general public. We cannot govern who views this content or force outside parties to respect your privacy, and we hold no liability for how third parties use information you make public.

8. Third-Party Websites

Our store contains links to external web platforms that we do not own or manage. We advise you to review the privacy protocols of those individual sites before sharing data with them. We do not endorse, guarantee, or assume liability for the data practices or content hosted on unaffiliated platforms.

9. Minor's Privacy

Our Services are not designed for children, and we do not knowingly gather data belonging to minors. If you are a parent or legal guardian and believe your child has submitted personal details to our system, you can message our team at the contact details below to request its permanent deletion. We have no knowledge of selling or sharing data belonging to individuals under the age of 16.

10. Protection and Retention Lifespans

No digital storage method or internet transmission is completely flawless; therefore, we cannot promise absolute security. Avoid using unencrypted channels to send us highly sensitive or confidential information.

The timeframe for which we store your data depends on our ongoing operational needs (such as maintaining your account profile, delivering our products, resolving legal issues, or satisfying regulatory storage laws).

11. Your Choices and Legal Rights

Depending on your geographical location, you may have specific legal privileges regarding your personal data. These rights vary and are subject to certain statutory limitations:

• Right to Review / Access: The right to request clarity on what data we hold about you and how it is shared.

• Right to Erase: The right to request that we wipe your personal records from our databases.

• Right to Edit: The right to update or correct inaccurate details in our files.

• Right to Transfer: The right to obtain a digital copy of your data or request its migration to an external business.

• Opt-Out Rights: The right to stop the "sale," "sharing," or utilization of your information for targeted marketing. If your browser transmits a Global Privacy Control (GPC) signal, our system is configured to respect that choice as an automated opt-out.

• Processing Restraints: The right to demand we halt or limit specific data processing workflows.

• Consent Revocation: The right to withdraw processing permissions you previously granted.

• Appeals: The right to contest our choice if we deny a privacy request. You can initiate this by replying directly to our notification of denial.

You can update your data communication preferences or click the "unsubscribe" link embedded at the bottom of our marketing emails to opt out of promotional lists. We will continue to send transactional messages regarding your active orders or account updates regardless of your marketing choices.

We will never discriminate against you for choosing to exercise your privacy rights. To fulfill a request, we may require identity verification information (such as your account email). You may also appoint an authorized legal agent to file requests on your behalf, provided they supply written confirmation of your authorization.

12. Filing a Complaint

If you are unhappy with how we manage your personal information, please contact our team using the email listed below. You may also possess the right to file an official grievance with your local privacy regulator (for residents of the United Kingdom, this is the Information Commissioner's Office at ico.org.uk).

13. International Transfers

Your data may be moved across borders and processed in countries outside of your home region, including the United Kingdom and the European Economic Area (EEA). When these international movements occur, we enforce recognized legal frameworks to maintain a standard level of protection for your personal data.

14. Support and Contact Information

If you have questions regarding this Privacy Policy, wish to file an appeal, or would like to exercise your individual data rights, please contact us at:

Email: info@thecomfortlab.co.uk