Privacy and Security

This Privacy Policy governs the manner in which CozyMole collects, uses, maintains and discloses information collected from users (each, a "User") of the website ("Site"). This privacy policy applies to the Site and all products and services offered by CozyMole.


Maintaining the security of your data is a priority at CozyMole, and we are committed to respecting your privacy rights.  We pledge to handle your data fairly and legally at all times. CozyMole is also dedicated to being transparent about what data we collect about you and how we use it.
We do not pass your personal information on to third parties other than our partner businesses who are sub-contracted to fulfill parts of your order process (e.g. Royal Mail).
All transactions that you initiate with CozyMole on this web site are confidential. Your name will not be added to any third party mailing lists.

Web browser cookies

Our Site uses "cookies" to enable e-commerce transactions and enhance User experience. User's web browser stores cookies within their device for record-keeping purposes and sometimes to track information about them. User may choose to set their web browser to refuse cookies, or to alert you when cookies are being sent. If they do so, note that some parts of the Site may not function properly.

The two cookies that are used within our Site are as follows:
- PHPSESSID - Contains a PHP "session ID", expires when the browser is closed. The "PHPSESSID" cookie is required so that the site can recognise the same User clicking from page to page. Without it, every page would be treated as the first visit to the site, and anything added to the shopping basket would be instantly forgotten. Online shopping is not possible without this cookie.
- Session - Contains a PHP "session ID", can also contain an email address and encrypted password, expires after one year. The "session" cookie is intended for the User's convenience. The Site creates this with a copy of the initial session ID so that the User can be classed as "returning" and the contents of their shopping basket will still be available. If the User signs in with an email address and password, these login details are also saved so that they can remain logged in when returning (the password is encrypted). If the User signs out, their login details are removed from the cookie.

Personal and Non-Personal Identification Information


Users may, however, visit our Site anonymously and there is no requirement to register in order to browse.



When a User sign up for an account, no matter whether a purchase is made or not, the Site will store the details the User provides, which may include: email address, password (which is encrypted), the date registered, the date of last visit to the Site, the IP address, and the Host Name used at last login. If the User progresses to Checkout an order then the following further information is collected and stored on your account: name, Company (optional), VAT number (optional), billing address and telephone number. All this information can be accessed and edited by the User in the My Account area..

When a User places an order, a copy of the current account information (listed a is stored with the order, along with the following additional information:

Delivery address (if different to Billing)
IP address, its host name and its country location
type of device used, such as mobile or desktop
date and time of order
payment method
amount paid
shipping method
number of loyalty points they earned, if applicable
whether you are a new customer, a returning one or a guest
the products you ordered

Payment information

Please note that our Site cannot access, collect or store your payment information (e.g. credit card number). This is handled directly with our payment provider (SagePay) through a secure connection to their system. When you enter this information during the order process, although you appear to be on our Site, you are actually connected directly to SagePay.

How we use collected information (Legal Basis)

CozyMole collects and uses Users' personal information for the following purposes:

To process transactions
We may use the information Users provide about themselves when placing an order only to provide service to that order. We do not share this information with outside parties except to the extent necessary to provide the service (for example to address your parcel and send through Royal Mail or couriers).

To send emails
The email address Users provide for order processing, will only be used to send them information and updates pertaining to their order. It may also be used to respond to their inquiries, and/or other requests or questions. If the User decides to opt-in to our mailing list, they will receive occasional emails that may include company news, updates, related product or service information, etc. If at any time the User would like to unsubscribe from receiving such future emails, we include a simple unsubscribe link at the bottom of each email.

To improve customer service

To personalize user experience

To improve our Site

How we protect your information



Sharing your personal information


Your Rights

You have the following rights:

  • the right (in certain circumstances) to request that we delete personal data held on you where we no longer have any legal reason to retain it (the right of erasure or to be forgotten);
  • the right (in certain circumstances) to ask us to ‘restrict processing of data’, which means that we would need to secure and retain the data for your benefit but not otherwise use it (the right to restrict processing);

If you wish to exercise any of the above rights, please contact us using the contact details set out below. In the case of objecting to marketing emails this is more simply acheived by clicking the 'UNSUBSCRIBE' link available at the end of every email.

Changes to this privacy policy


Your acceptance of these terms


Contacting us


PO Box 162
United Kingdom
Tel: 01845 587950


Payment Security

We use the industry leading internet payment company SagePay (formerly Protx) to protect your card details and protect us from fraud. The following security systems are used.

Transaction security. All transaction information passed between merchant sites and the SagePay VSP Systems is encrypted using 128-bit SSL certificates. No cardholder information is ever passed unencrypted and any messages sent to your servers from SagePay are signed using MD5 hashing to prevent tampering. You can be completely secure in the knowledge that nothing you pass to the SagePay servers can be examined, used or modified by any third parties attempting to gain access to sensitive information. Your card data is never available or visible to any employee of CozyMole or SagePay - this information is handled entirely by computers which do not make the details visible to their users. 

Encryption and Data Storage. All sensitive data is secured on SagePay using the same internationally recognised 256-bit encryption standards used by, among others, the US Government. The encryption keys are held on state-of-the-art, tamper proof systems in the same family as those used to secure VeriSign’s Global Root certificate, making them all but impossible to extract. The data held is extremely secure and we are regularly audited by the banks and banking authorities to ensure it remains so.


Employee access. No individuals within CozyMole or SagePay are able to decrypt transaction information or cardholder data. SagePay systems only allow access to our most senior staff and only in extenuating circumstances (such as investigations of Card Fraud by the Police). Your transaction information and customer card information is secure even from our own employees because our systems never display the full card numbers, even on administration screens.  


This page last revised: 24th May 2018.