Mobile App Privacy Policy

COW Home & Body Mobile App — Privacy Policy

Last updated: 2 September 2026

This Mobile App Privacy Policy explains how Cow Home Ltd (“COW Home & Body”, “COW”, “we”, “us” or “our”) collects, uses and protects personal information when you use the COW Home & Body mobile application (“the App”).

It applies specifically to information processed through or in connection with the App.

Our general website Privacy Policy may also apply when you shop with us, visit our website or use services connected with our online store.

The App is operated by:

Cow Home Ltd
Company Number: 14374100
VAT Number: GB432018144
Registered Office: 57 Silver Street, Brownhills, Walsall, England, WS8 6ER

For privacy enquiries, you can contact us at hello@cowhome.co.uk.

1. INFORMATION WE MAY COLLECT

The information processed when you use the App depends on the features you choose to use.

It may include the following.

Account information

If you sign in to your COW Home & Body customer account, we may process information associated with that account, including:

your name;
email address;
customer account identifier;
saved addresses;
previous orders;
order and fulfilment information; and
other information associated with your COW Home & Body customer account.

The App uses COW Home & Body's existing customer account system. You do not need to create a separate App-specific customer profile if you already have a COW Home & Body customer account.

Order and shopping information

When you shop through the App, information may include:

products you add to your shopping bag;
products purchased;
quantities;
order values;
discounts and promotions;
delivery information;
billing information;
order status;
fulfilment information; and
information necessary to provide customer service relating to your order.

Saved products

The App allows you to save products you are interested in.

Information about saved products may be stored locally on your device.

This information helps the App remember products you have saved between sessions.

Shopping bag information

The App may store an identifier relating to your Shopify shopping bag locally on your device.

This allows the App to retrieve your current shopping bag when you return.

The identifier itself is used to connect the App with the relevant shopping bag held through our ecommerce services.

Push notification information

If you choose to enable push notifications, the App processes information necessary to send notifications to your device.

This may include a device-linked push notification token and technical information required to deliver the notification.

We may use push notifications to send information about:

new products;
new fragrances;
promotions and offers;
seasonal collections;
COW Home & Body news;
order or account-related information where applicable; and
important App or service updates.

Push notifications are optional.

You can disable them at any time through your device's notification settings.

Device and technical information

When you use an internet-connected application, certain technical information may be processed automatically by us or the service providers that support the App.

Depending on the service involved, this may include information such as:

device or operating-system information;
IP address;
technical identifiers;
App version;
request information;
error or diagnostic information; and
security information.

We use this type of information where necessary to operate, secure, maintain and troubleshoot the App.

An IP address and similar online identifiers can constitute personal information where they relate to an identifiable person.

2. INFORMATION WE DO NOT INTENTIONALLY COLLECT

The App is not designed to request access to your contacts, photographs, camera, microphone or precise location as part of its normal shopping functionality.

We do not intentionally collect special category information such as information about your health, religion, political opinions or sexual orientation through the App.

If the functionality of the App changes in the future and additional information or device permissions become necessary, we will update this Privacy Policy and provide any permissions or notices required by law or the relevant app platform.

3. HOW WE USE YOUR INFORMATION

We may use personal information processed through the App to:

provide and operate the App;
allow you to access your COW Home & Body customer account;
display your orders and account information;
provide shopping bag functionality;
process and fulfil orders;
provide delivery and fulfilment information;
remember products you have saved;
provide customer support;
send push notifications where you have enabled them;
maintain the security of our services;
diagnose technical problems;
prevent fraud or misuse;
comply with legal and regulatory obligations; and
improve and maintain our services.

We do not use personal information collected through the App for solely automated decision-making that produces legal or similarly significant effects on you.

4. OUR LAWFUL BASES FOR USING PERSONAL INFORMATION

Under UK data-protection law, we need a lawful basis for processing personal information.

Depending on why information is being processed, we may rely on:

Contract — where processing is necessary to provide something you have requested or perform our contract with you. For example, processing information necessary to complete and fulfil an order.

Consent — where you have made a choice to allow particular processing. This may apply to certain communications or permissions, such as enabling push notifications where consent is required.

Where we rely on consent, you may withdraw that consent at any time.

Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and interests. This may include maintaining the security and reliability of the App, preventing misuse and improving our services.

Legal obligation — where we need to process or retain information to comply with applicable law, such as tax, accounting, consumer-protection or other legal requirements.

The ICO requires organisations to explain their purposes and applicable lawful bases rather than simply stating that information is collected.

5. SHOPIFY

COW Home & Body uses Shopify to operate its ecommerce services.

The App connects with our Shopify store to provide functionality including:

product and collection information;
pricing and availability;
customer accounts;
shopping bags;
checkout;
orders; and
fulfilment information.

When you purchase products, relevant personal information is processed through Shopify's ecommerce infrastructure.

When you proceed to checkout, you may interact directly with Shopify-hosted checkout services and applicable payment providers.

Payment information entered during checkout is processed by the relevant payment services.

The COW Home & Body App itself does not store your full payment card number or card security code.

6. PUSH NOTIFICATIONS AND SUPABASE

We use technical services to operate the push-notification functionality available within the App.

If you enable notifications, a push notification token associated with your device may be stored so that notifications can be delivered to you.

We currently use Supabase as part of the infrastructure supporting our push-notification service.

This information is used to manage and deliver App notifications and maintain the notification service.

You can stop receiving push notifications at any time through your device settings.

Disabling notifications does not prevent you from using the other shopping features within the App.

7. YOTPO REVIEWS

The App displays customer reviews and ratings using Yotpo.

When reviews are displayed within the App, review information may include information supplied when the review was submitted, such as the reviewer's display name, rating, review title and review content.

Where you interact with review functionality provided by Yotpo, information may also be processed in accordance with the applicable review service and its privacy practices.

8. APPLE AND GOOGLE

If you download the App through the Apple App Store or Google Play, Apple or Google may independently process information relating to your use of their services.

Their processing is governed by their respective privacy policies.

COW Home & Body does not control information that Apple or Google independently collects as part of operating their app stores, devices or platform services.

9. OTHER SERVICE PROVIDERS

We may use trusted third-party service providers to help us operate our business and the App.

These may include providers involved in:

ecommerce and checkout;
payment processing;
customer accounts;
order fulfilment;
delivery;
customer reviews;
push notifications;
hosting and databases;
technical infrastructure;
security; and
customer support.

We only share personal information where reasonably necessary for the relevant service, where required by law, or where another lawful basis permits us to do so.

Apple's current App Review Guidelines require apps to ensure third parties receiving user data provide the same or equivalent protection described in the app's privacy policy.

10. MARKETING AND PUSH NOTIFICATIONS

We may tell you about COW Home & Body products, launches, promotions and other news where permitted by law.

Push notifications are controlled separately through your device.

If you no longer want App push notifications, you can disable notifications for COW Home & Body through your device settings.

Where we send marketing by email or another channel, you can use the unsubscribe option provided with that communication or contact us.

Disabling push notifications does not automatically unsubscribe you from marketing communications you have separately agreed to receive through another channel, and vice versa.

11. HOW LONG WE KEEP INFORMATION

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including where necessary to comply with legal, accounting, tax, consumer-protection and reporting requirements.

Different categories of information may therefore be retained for different periods.

For example, information relating to purchases may need to be retained after an order has been completed to meet legal, accounting, tax, warranty, refund or dispute-handling requirements.

Customer account information may be retained while your account remains active and for an appropriate period afterwards where necessary.

Push-notification information may be retained while the relevant device remains registered to receive notifications. Invalid or no-longer-required notification tokens may be removed.

Information stored locally by the App may remain on your device until it is removed by the App, you clear the App's data or you uninstall the App.

The ICO requires privacy information to explain either specific retention periods or the criteria used to determine them.

12. INTERNATIONAL DATA TRANSFERS

Some of the service providers used to operate our online store or App may process information outside the United Kingdom.

Where personal information is transferred internationally, we will rely on an appropriate lawful transfer mechanism where required by UK data-protection law.

Depending on the circumstances, this may include UK adequacy regulations or appropriate contractual safeguards.

You can contact us if you would like further information about safeguards relevant to the processing of your personal information.

13. HOW WE PROTECT INFORMATION

We take reasonable technical and organisational measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

We also use established third-party providers to operate important parts of the App and ecommerce infrastructure.

However, no internet-connected system can be guaranteed to be completely secure.

You should also take reasonable steps to protect your device and COW Home & Body account.

14. YOUR PRIVACY RIGHTS

Depending on the circumstances and the lawful basis on which your information is processed, UK data-protection law may give you rights including:

the right to be informed about how your information is used;
the right to request access to personal information we hold about you;
the right to request correction of inaccurate information;
the right to request deletion of personal information in certain circumstances;
the right to request restriction of processing in certain circumstances;
the right to object to certain processing;
the right to data portability in certain circumstances; and
rights relating to certain automated decision-making.

These rights do not apply in exactly the same way in every circumstance, and legal exemptions may sometimes apply.

To exercise a privacy right, contact us at hello@cowhome.co.uk.

We may need to verify your identity before completing a request.

YOUR RIGHT TO OBJECT

Where we process your personal information on the basis of legitimate interests, you have the right to object to that processing in certain circumstances.

You also have the right to object to the use of your personal information for direct marketing.

I've separated this because ICO guidance specifically says the right to object should be brought to people's attention clearly and separately.

15. WITHDRAWING CONSENT

Where we rely on your consent, you can withdraw that consent at any time.

For push notifications, you can withdraw permission through your device's notification settings.

For marketing communications, you can use the unsubscribe facility provided or contact us.

Withdrawing consent does not affect the lawfulness of processing carried out before consent was withdrawn.

16. DELETING YOUR ACCOUNT AND DATA

You may request deletion of your COW Home & Body customer account and associated personal information by contacting us at:

hello@cowhome.co.uk

Please state that you are requesting deletion of your COW Home & Body customer account.

We may need to verify your identity before processing the request.

Where applicable, we will delete or anonymise personal information associated with your account unless we need to retain particular information for a lawful reason, such as complying with tax, accounting or other legal obligations, establishing or defending legal claims, preventing fraud or maintaining records of completed transactions where legally required.

Deleting your customer account does not necessarily mean that every record relating to previous purchases can immediately be erased where we have a lawful obligation or other lawful reason to retain it.

Important before submitting the Android app: Google Play requires apps that allow account creation to provide a readily discoverable way to initiate account deletion within the app and outside the app, such as through a website. So I'd give this policy page — or preferably a tiny dedicated /pages/delete-account page — a clear REQUEST ACCOUNT DELETION button that opens an email to hello@cowhome.co.uk. We should also make sure the Me/account screen has a corresponding deletion option before submission.

17. CHILDREN'S PRIVACY

The App is a general shopping application and is not designed or intended specifically for children.

We do not knowingly use the App to collect personal information from children for purposes inconsistent with applicable data-protection law.

If you believe a child has provided personal information to us in circumstances where they should not have done so, please contact us.

18. LINKS AND EXTERNAL SERVICES

The App may contain links that open websites or services outside the App.

Once you leave the App, the privacy practices of the relevant website or service may apply.

We encourage you to review the privacy information provided by those services where appropriate.

19. CHANGES TO THIS PRIVACY POLICY

We may update this Mobile App Privacy Policy from time to time to reflect changes to the App, our services, the providers we use or applicable law.

When we make changes, we will update the date shown at the top of this policy.

Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to your attention where required.

The ICO recommends regularly reviewing privacy information and bringing new uses of personal information to people's attention before beginning the new processing.