Privacy policy

Last updated: 23 August 2026

Diavola Ltd, trading as COG Outlet (“COG Outlet”, “we”, “us” or “our”), operates this website and online store.

For the purposes of applicable UK data protection law, Diavola Ltd is the data controller of the personal information described in this Privacy Policy.

Our online store is powered by Shopify, which provides the ecommerce platform that enables us to offer our products and services to you.

This Privacy Policy explains how we collect, use, store and disclose your personal information when you visit our website, make a purchase, create an account, subscribe to marketing communications, contact us or otherwise interact with COG Outlet.

1. Personal Information We Collect

The personal information we collect depends on how you interact with us and may include:

  • Contact information, including your name, email address, telephone number, billing address and delivery address.
  • Order and transaction information, including products purchased, orders, payments, returns, refunds and cancellations.
  • Payment information necessary to process your transaction. Payment information is processed through Shopify and the payment providers available through our store.
  • Account information, where you create or use a customer account.
  • Communications, including information you provide when contacting us about an order, product, return or other enquiry.
  • Device and technical information, including your IP address, browser, device information and other technical identifiers.
  • Website usage information, including how you interact with our website, pages and products you view and items you add to your basket.
  • Marketing preferences, including whether you have chosen to receive marketing communications from us.

2. How We Collect Personal Information

We may collect personal information:

  • directly from you when you place an order, create an account, contact us, subscribe to marketing or otherwise provide information to us;
  • automatically when you visit or interact with our website, including through cookies and similar technologies;
  • from Shopify and other service providers involved in operating our online store;
  • from payment providers, delivery companies and other service providers involved in completing transactions;
  • from fraud-prevention, security and other service providers where appropriate; and
  • from other third parties where permitted by law.

3. How We Use Your Personal Information

We may use your personal information to:

  • process and fulfil orders;
  • process payments;
  • arrange delivery;
  • provide order and delivery updates;
  • process cancellations, returns and refunds;
  • respond to customer-service enquiries;
  • administer customer accounts;
  • detect and prevent fraud, misuse and other unlawful activity;
  • maintain the security and operation of our website;
  • comply with our accounting, tax and other legal obligations;
  • maintain appropriate business and transaction records;
  • improve our website, products and customer experience;
  • understand how customers use our website;
  • send marketing communications where permitted by law;
  • manage marketing preferences and unsubscribe requests; and
  • establish, exercise or defend legal claims where necessary.

4. Lawful Bases for Processing

Under UK data protection law, we must have a lawful basis for processing your personal information.

Depending on the circumstances, we may rely on:

Contract – where processing is necessary to take steps at your request before entering into a contract or to perform our contract with you. This includes processing orders, payments, deliveries, cancellations, returns and refunds.

Legal obligation – where processing is necessary for us to comply with a legal or regulatory obligation, including accounting, tax, consumer-protection and other legal requirements.

Legitimate interests – where processing is necessary for our legitimate business interests or those of another party and those interests are not overridden by your rights and interests. This may include preventing fraud, protecting our business, maintaining website security, improving our services and responding to customer enquiries.

Consent – where you have given us consent to process your personal information for a particular purpose, including where consent is required for certain marketing activities or non-essential cookies. You may withdraw your consent at any time.

5. Marketing Communications

Where permitted by law, we may use your contact information to send you information about COG Outlet products, offers and promotions.

Where consent is required, we will only send these communications where you have given the appropriate consent.

You can unsubscribe from marketing emails at any time by using the unsubscribe link contained in the email.

If you unsubscribe from marketing, we may still send you service communications necessary to administer your orders, account or transactions.

6. Cookies and Similar Technologies

Our website uses cookies and similar technologies to operate the store, remember preferences, understand how visitors use the website and, where applicable, support analytics and marketing.

Some cookies are necessary for the website and checkout to function correctly. Other cookies, including certain analytics and advertising cookies, may require your consent.

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

You can manage your privacy and cookie preferences using the options provided on our website.

7. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to operate our business and provide our services.

This may include disclosure to:

  • Shopify, which hosts and operates our ecommerce platform;
  • payment processors and payment providers;
  • delivery companies and fulfilment providers;
  • IT, hosting, security and technical service providers;
  • analytics and marketing providers, where applicable and permitted by law;
  • professional advisers such as accountants, legal advisers or insurers;
  • fraud-prevention and security providers;
  • government authorities, regulators, law enforcement agencies or courts where required by law; and
  • another organisation in connection with a sale, restructuring, merger or transfer of all or part of our business.

We do not sell your personal information in the ordinary meaning of selling customer information for money.

8. Relationship With Shopify

Our online store is hosted by Shopify.

Shopify collects and processes certain personal information about your access to and use of our store in order to provide and improve its services and enable us to operate our online store.

Information submitted through our store may therefore be transmitted to and processed by Shopify and service providers involved in providing Shopify's services.

Shopify may also process certain information in accordance with its own privacy policies and responsibilities.

You can find more information in the Shopify Consumer Privacy Policy and manage certain privacy rights relating to Shopify through the Shopify Privacy Portal.

9. Payment Information

Payments made through our website are processed using the payment services available through Shopify and our payment providers.

We do not need to independently store complete payment-card details in order to process ordinary online transactions. Payment providers may collect and process payment information in accordance with their own legal obligations and privacy policies.

10. Delivery and Fulfilment

Where you place an order requiring delivery, we will disclose the information necessary to deliver your order to the relevant carrier or fulfilment provider.

This may include your name, delivery address, telephone number, email address and information necessary to identify and deliver your parcel.

11. Third-Party Websites and Services

Our website may contain links to websites or services operated by third parties.

If you follow a link to a third-party website, that organisation may process your information under its own privacy policy.

We are not responsible for the privacy practices or content of independent third-party websites.

12. International Transfers

Some of our service providers, including Shopify and providers used within the Shopify platform, may process personal information outside the United Kingdom.

Where personal information is transferred internationally, appropriate safeguards will be used where required by applicable data protection law.

These may include transfers to countries recognised as providing an adequate level of protection or the use of approved contractual safeguards for international data transfers.

13. How Long We Keep Your Information

We retain personal information only for as long as reasonably necessary for the purposes for which it was collected and to meet our legal, accounting and regulatory obligations.

The appropriate retention period depends on the type of information and why we hold it.

For example, we may retain transaction and accounting records for the periods required by UK tax and company law even after our direct relationship with a customer has ended.

When information is no longer required, we will delete, anonymise or otherwise securely dispose of it where appropriate.

14. Security

We take reasonable organisational and technical measures to protect personal information against unauthorised access, loss, misuse, alteration or disclosure.

However, no internet transmission or electronic storage system can be guaranteed to be completely secure.

You are responsible for keeping any account credentials associated with our website confidential.

15. Your Data Protection Rights

Under UK data protection law, depending on the circumstances, you may have the right to:

  • request access to personal information we hold about you;
  • request correction of inaccurate or incomplete personal information;
  • request deletion of your personal information;
  • request restriction of how we process your personal information;
  • object to certain processing of your personal information;
  • receive certain personal information in a portable format;
  • withdraw consent where processing is based on your consent; and
  • object to direct marketing.

These rights are not absolute and may be subject to legal exceptions.

We may need to verify your identity before responding to a request.

To exercise your rights, contact us at customerservice@cogoutlet.uk.

We will respond to valid requests within the timescales required by applicable data protection law.

16. Children's Personal Information

Our website and products are not directed specifically at children and we do not knowingly seek to collect personal information directly from children.

If you believe that a child has provided personal information to us inappropriately, please contact us so that we can investigate and take appropriate action.

17. Complaints

If you have concerns about how we collect or use your personal information, please contact us first at customerservice@cogoutlet.uk so that we can try to resolve the issue.

You also have the right to complain to the Information Commissioner's Office (ICO), the UK's independent data-protection regulator.

Information about your rights and how to make a complaint is available from the Information Commissioner's Office.

18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, service providers, legal requirements or data-processing practices.

When we make changes, we will publish the updated Privacy Policy on our website and update the “Last updated” date where appropriate.

19. Contact Us

For questions about this Privacy Policy, our use of your personal information or to exercise your data-protection rights, please contact:

Diavola Ltd trading as COG Outlet
Company number: 17155392
Registered in England and Wales
Registered office: 18 May Tree Close, Marlow, SL7 3YA
Email: customerservice@cogoutlet.uk

For the purposes of applicable UK data protection law, Diavola Ltd is the data controller of your personal information.