Privacy Policy

About This Privacy Policy

This Privacy Policy describes how Cosmic PCTS ("we", "us", or "our") handles personal information collected through our website, mobile applications, and related services (collectively, the "Services"). We aim to provide clear, understandable information about our data practices. This policy applies to visitors, account holders, customers, and other individuals who interact with our Services.

Depending on your jurisdiction and the specific services you use, different rules may apply. We have structured this policy to cover general principles as well as region-specific rights. Please read the entire document carefully. If you have questions, contact us using the details in the Contact and Privacy Requests section.

We may update this policy from time to time. The "Last Updated" date at the top indicates the most recent revision. We encourage you to review this page periodically.

Information We Collect

We collect information in several ways: directly from you, automatically through technology, and from third parties where permitted. The categories below explain what may be collected depending on your interactions.

Information You Provide

You may provide information when you create an account, place an order, contact support, or interact with our Services. Examples include:

• Name
• Email address
• Telephone number
• Shipping address
• Billing information
• Account credentials
• Order details
• Customer support messages
• Preferences and survey responses
• Information submitted through forms

You are not required to provide all of this information, but some features may be unavailable without it.

Information Collected Automatically

When you visit our website, we may automatically collect certain technical data, including:

• IP address
• Browser type and version
• Device type and operating system
• Language and time zone
• Referring pages and exit pages
• Interaction data (clicks, page views)
• Approximate location derived from IP
• Error logs and security events

This information helps us understand usage, diagnose issues, and maintain security. We do not use it to identify you personally unless combined with other data.

Cookies and Similar Technologies

We use cookies and similar technologies for various purposes. These may include:

• Essential: Required for basic website operation, such as page navigation and access to secure areas.
• Functional: Used to remember preferences and settings where applicable.
• Analytics: Help us understand website performance and usage patterns.
• Security: Used to detect abuse, fraud, and security threats.
• Marketing (if enabled): May be used for advertising or marketing measurement.

Not all categories may be active on our site. You can manage optional cookies through your browser settings or any consent mechanism we provide. Required cookies cannot be disabled as they are essential for the site to function. We do not use deceptive consent practices.

How We Use Information

We use personal information for the following purposes, depending on your interactions:

• Create and manage accounts
• Process orders and deliveries
• Provide customer support
• Process payments and refunds
• Send requested communications
• Send marketing where permitted
• Improve website functionality
• Understand website usage
• Monitor security
• Detect and prevent fraud
• Comply with legal obligations
• Maintain business records
• Resolve disputes
• Enforce our terms
• Protect users and our business

We only use information for purposes reasonably necessary and in accordance with applicable law.

Legal Bases for Processing

Where required by law, we rely on one or more legal bases for processing personal information. These may include:

• Consent: You have given clear consent for specific purposes.
• Contract: Processing is necessary for a contract with you.
• Legal Obligation: Processing is necessary to comply with the law.
• Legitimate Interests: Processing is necessary for our legitimate interests or those of a third party, provided your rights do not override those interests.
• Vital Interests: Processing is necessary to protect someone’s life.

The applicable legal basis depends on the processing activity, your jurisdiction, and the relationship with you.

Pharmaceutical and Health-Related Information

Because Cosmic PCTS operates in the pharmaceutical space, you may choose to submit information that could be considered health-related or sensitive. Examples may include:

• Product inquiries related to specific medications or conditions
• Prescription-related information where applicable
• Health information voluntarily submitted through support or order processes
• Information necessary to process or fulfill regulated products where legally required

We treat such information with heightened care. However, not all customer information is automatically considered protected health information under HIPAA. The legal classification depends on factors such as the type of information, how it was collected, the service involved, the parties processing it, your jurisdiction, and applicable law.

We advise you not to submit unnecessary sensitive information through general contact forms. If such information is required, we will explain why and how it will be protected.

Orders and Transactions

When you place an order, we collect information necessary to complete the transaction, including product details, delivery address, and order status. This information is used to fulfill your purchase, manage returns and refunds, and maintain accurate accounting records.

Payment Information

Payment information may be processed by third-party payment providers used to complete transactions. The information processed by Cosmic PCTS depends on the payment method and provider involved. We do not store complete payment card numbers on our servers unless we explicitly state otherwise. Please review the privacy policies of any payment providers you interact with.

Account Information

If you create an account, we store your login credentials, profile information, and preferences. You are responsible for maintaining the confidentiality of your account credentials. You can update or delete your account by contacting us (see Contact).

Communications

We may communicate with you for various reasons, including order updates, security alerts, and customer support. We distinguish between operational communications and marketing. Operational messages are essential to your use of the Services and cannot be opted out of (e.g., order confirmations, security notices). Marketing messages are optional and can be managed as described in Marketing Communications.

Analytics and Personalization

We may use analytics tools to understand how visitors interact with our website. This helps us improve functionality and user experience. Where applicable, we may personalize content based on your interactions and preferences. Such processing is subject to applicable consent or legitimate interests.

Fraud Prevention and Security

We process information to detect, prevent, and investigate fraud, abuse, and security incidents. This may include monitoring transactions, IP addresses, and usage patterns. We use such data to protect our users and business.

When We Share Information

We may share personal information with the following categories of recipients:

• Payment processors: to process payments.
• Hosting and cloud infrastructure providers: to store data.
• Shipping and logistics partners: to deliver products.
• Website analytics providers: to understand usage.
• Customer support platforms: to manage inquiries.
• Email service providers: to send communications.
• Fraud prevention and security services: to protect against abuse.
• Professional advisers: such as lawyers and accountants, when necessary.
• Legal and regulatory authorities: when required by law.

We only share information that is reasonably necessary for the recipient to perform their function, and we require contractual safeguards where applicable.

Service Providers and Processors

We engage third-party service providers to assist with various aspects of our operations. Where required by applicable law, we require service providers handling personal information on our behalf to use appropriate safeguards and to process information only for authorized purposes.

Sale or Sharing of Personal Information

Cosmic PCTS does not intend to sell personal information for monetary consideration. However, certain jurisdictions define “sale” or “sharing” broadly enough that particular forms of advertising, analytics, or other data disclosure may fall within those definitions. Where such rules apply to our activities, we will provide the rights and disclosures required by law.

International Data Transfers

Depending on our infrastructure and service providers, your information may be processed in countries other than your own. For individuals in the European Economic Area, the United Kingdom, or other jurisdictions with transfer restrictions, we rely on appropriate safeguards such as:

• Adequacy decisions by relevant authorities
• Standard Contractual Clauses
• UK International Data Transfer mechanisms
• Other legally recognized safeguards

We do not claim a specific mechanism is implemented unless verified.

Data Retention

We do not publish fixed numerical retention periods unless required by law. Some information may be retained longer for tax, accounting, legal claims, fraud prevention, disputes, security, or contract enforcement.

Data Security

We implement organizational, technical, and administrative safeguards designed to protect personal information. These may include:

• Access controls and authentication mechanisms
• Encryption where appropriate
• Monitoring for suspicious activity
• Secure infrastructure and development practices
• Employee access restrictions and training
• Incident response procedures

No method of transmission or storage can be guaranteed completely secure. We cannot promise absolute security, but we work continuously to protect your data.

Your Privacy Rights

Depending on your jurisdiction, you may have certain rights regarding your personal information. These may include:

Not all rights apply in every jurisdiction or circumstance. We will assess and respond to requests as required by law.

European Economic Area and UK Privacy Rights

If you are located in the EEA or the UK, you may have the following rights under GDPR/UK GDPR:

• Right to access – request a copy of your personal data.
• Right to rectification – correct inaccurate data.
• Right to erasure – request deletion in certain circumstances.
• Right to restrict processing – limit how we use your data.
• Right to object – object to processing based on legitimate interests.
• Right to data portability – receive your data in a machine-readable format.
• Right to withdraw consent – at any time.

To exercise these rights, please contact us using the details below. We may need to verify your identity.

U.S. State Privacy Rights

If you are a resident of California, Virginia, Colorado, Connecticut, or other states with comprehensive privacy laws, you may have rights similar to those described above, such as access, deletion, correction, and opt-out of sale/sharing. The exact rights depend on the specific law and whether it applies to our business. We will honor applicable requests.

Children's Privacy

Our Services are not directed to children where prohibited by applicable law. Age requirements and consent standards may vary depending on your jurisdiction. We do not knowingly collect personal information from children without verified parental consent where required.

Marketing Communications

We may send marketing emails or other promotional messages if you have opted in or where permitted by law. You can unsubscribe at any time using the link provided in each email or by contacting us. Opting out of marketing will not stop essential transactional or security communications.

Do Not Track and Similar Signals

Some browsers and devices provide privacy signals such as “Do Not Track” or other opt-out mechanisms. The way these signals are recognized may vary by technology and applicable law. You can manage cookies and tracking through browser settings.

Third-Party Websites and Services

Our website may contain links to external sites or services. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before providing any information.

Social Media and Embedded Content

We may embed content from social media platforms or other websites. These third parties may collect data about you when you interact with their embedded content. Their use of your data is governed by their respective privacy policies.

Future Technologies and Automated Processing

As technology evolves, we may introduce features such as artificial intelligence, automated customer support, personalization, recommendation systems, fraud detection, or automated decision-making. If such technologies process personal information in a way that could significantly affect you, we will update this policy and provide appropriate notices and rights as required by law.

We will provide additional information where applicable if we introduce automated processing that is subject to specific transparency, consent, or individual-rights requirements.

Changes to This Privacy Policy

We may update this policy from time to time. Material changes will be communicated by email or a prominent notice on our website where required. The "Last Updated" date will be revised accordingly. We encourage you to review this page periodically.

Contact and Privacy Requests

If you have questions about this Privacy Policy or wish to exercise your rights, you may contact us using the following details:

• Entity Type: [Private Limited Company]
• Privacy Contact Email: [sales@cosmicpcts.org]
• Privacy Request Page: [https://cosmicpct.cx/contact-us/]

When submitting a privacy request, please include your name, contact information, and a clear description of your request. We will respond within the timeframes required by law.

Policy Version

This is the first published version of this Privacy Policy. Future revisions will be documented here.