This policy explains what information Coolizi AC collects, how we use it, who we share it with, and the choices you have. We have written it in plain English because privacy should not require a legal dictionary.
This Privacy Policy applies to the Coolizi AC website at coolizi.com and any subdomain operated by Coolizi AC, the Coolizi AC mobile and desktop control application, and any direct customer interactions including email, telephone, live chat, and postal correspondence with our customer care team. It does not apply to third-party websites, applications, or services that we link to or that link to us, including retailer websites where Coolizi AC products may be sold.
If you reside in the European Economic Area, the United Kingdom, or California, additional rights described later in this document apply to you under the General Data Protection Regulation, the UK Data Protection Act 2018, and the California Consumer Privacy Act respectively. Coolizi AC is the data controller for the personal information described in this policy.
We collect personal information in three categories: information you give us directly, information collected automatically when you use our services, and information we receive from third parties. The table below summarises each category and the specific data points involved.
| Source | Data Collected | Purpose |
|---|---|---|
| Account registration | Name, email, postal code, password hash | Account access, order history |
| Order placement | Shipping address, payment confirmation, phone for delivery only | Order fulfilment, support |
| Mobile application | Wi-Fi network name, device identifier, firmware version | Smart feature functionality |
| Website analytics | IP address, browser type, pages visited, session duration | Site improvement, security |
| Customer support | Email content, attachments, call recordings (with notice) | Issue resolution, quality |
| Surveys & reviews | Voluntary responses, ratings, optional photos | Product improvement |
We do not collect biometric data, health data, precise geolocation, or any sensitive category of information as defined by applicable privacy law. We do not knowingly collect information from children under the age of 13.
We use the information we collect for the following business purposes, each grounded in a specific legal basis under the GDPR for European customers: order fulfilment and contract performance; customer support and contract performance; product improvement based on legitimate interest; marketing communications based on consent or legitimate interest depending on jurisdiction; security and fraud prevention based on legitimate interest; and legal compliance based on legal obligation.
With your consent, we send occasional emails about new products, seasonal promotions, energy-saving tips, and customer stories. Every marketing email contains a one-click unsubscribe link at the bottom. If you unsubscribe, we honour the request within 24 hours. Transactional emails such as order confirmations, shipping notifications, and warranty reminders are not affected by marketing preferences.
We retain personal information for as long as needed to fulfil the purposes described in this policy, after which it is securely deleted or anonymised. Account information is retained while your account is active and for up to 24 months after the last interaction in case you wish to return. Order records are retained for 7 years to comply with tax and warranty obligations. Support correspondence is retained for 36 months to maintain context for any follow-up inquiries. Anonymised analytics data may be retained indefinitely.
Regardless of where you live, you have the right to access the personal information we hold about you, to correct inaccurate information, to request deletion of information we are not required to retain, to object to or restrict certain processing, to receive a portable copy of your information, and to withdraw consent where consent is the legal basis for processing. European and California residents have additional rights including the right to opt out of any sale of personal information (which we do not perform) and the right to non-discrimination for exercising privacy rights.
To exercise any of these rights, send a request to our privacy team at the email address listed in the Contact section below. We respond to all verifiable requests within 30 days. If your request is particularly complex we may extend this period by an additional 30 days and will notify you of the extension and the reason for the delay.
Coolizi AC implements administrative, technical, and physical safeguards designed to protect personal information against unauthorised access, disclosure, alteration, and destruction. All data is encrypted in transit using TLS 1.3 and at rest using AES-256 encryption. Access to personal information is restricted to employees and contractors who need it to perform their job functions, and is logged and audited on a continuous basis. We conduct annual third-party security assessments and penetration tests. In the event of a data breach affecting your personal information, we will notify you and applicable regulators within 72 hours as required by law.
Coolizi AC is headquartered in the United States with operations in the European Union. When we transfer personal information across borders, we do so under appropriate safeguards including Standard Contractual Clauses approved by the European Commission, the EU-US Data Privacy Framework, equivalent UK international data transfer agreements, and binding corporate rules for transfers within our corporate group. You can request a copy of the relevant transfer mechanism by contacting our privacy team.
If you have any questions about this Privacy Policy, would like to exercise any of your rights, or wish to file a complaint about our handling of your personal information, please contact our Data Protection Officer. We take every complaint seriously and will investigate and respond promptly. If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection authority.
Email [email protected] with the subject line "Privacy Request" and we will route your message to the appropriate specialist within one business day.