Privacy policy

Who controls your data

Copilot Holdings LLC of 30 N Gould St, Sheridan, WY 82801 is the controller of personal data collected through this store. Contact: support@cofactorsupply.com.

What we collect

To fulfil an order: your name, delivery and billing address, email address and phone number. Payment card details are entered directly with our payment processor and are never stored on our servers.

Automatically: your IP address, device and browser information, and pages viewed, through cookies and similar technologies.

Why we use it

To take payment, dispatch your order and provide support; to meet tax and accounting obligations; to prevent fraud; and, where you have opted in, to send marketing email. You can withdraw marketing consent at any time from any such email.

Who we share it with

Only the processors needed to run the store, and authorities where the law requires it. We do not sell personal data.

Those processors are: Whop, which handles payment and receives the card and billing details you enter at checkout; InstaWP, which hosts the store and its database; BunnyCDN, which serves pages and images and logs the IP addresses that request them; and the carrier that delivers your parcel, which receives your name, delivery address and contact details for that purpose only.

How long we keep it

Order records are kept for seven years to satisfy tax and accounting requirements. Account and marketing data are kept until you ask us to delete them.

Your rights

Depending on where you live you may have the right to access, correct, delete, port or restrict the processing of your personal data, and to object to it. Email support@cofactorsupply.com and we will respond within the period the law allows. You may also complain to your local data protection authority.

Cookies

We use only the cookies the cart and checkout need in order to function — they remember what is in your bag and keep you signed in. They are set when you first add something to your bag, not when you arrive.

We set no analytics cookies and no advertising or marketing cookies, and we run no third-party trackers. That is why you are not being asked to accept anything: there is nothing non-essential to accept. If that changes, this section changes with it, and a consent control will appear before any such cookie is set.