Privacy Policy

CooperLuxe (“CooperLuxe,” “we,” “us,” or “our”) is a digital operations company. We operate the public brand site at cooperluxe.com together with a client portal used by our team and authorized partners to coordinate work, dispatch tasks, and review results. This Privacy Policy explains what information we collect through these properties, how we use it, who we share it with, and the choices you have.

This policy applies to the cooperluxe.com website, the CooperLuxe portal, and any contact or chat channels we make available on those properties. It does not cover third-party websites or services that we link to but do not control.

We collect the following categories of information:

• Contact-form and chat submissions. When you use a contact form or a chat widget on our properties, we collect the information you choose to provide — typically your name, email address, and the content of your message or inquiry.
• Account data. If you have access to the CooperLuxe portal, we process the account information required to authenticate you and manage access, such as your email address, display name, role, and authentication credentials. Authentication and account records are managed through our database and authentication provider, Supabase.
• Usage and server logs. Like most websites, our hosting and infrastructure automatically record standard technical information when you visit, including your IP address, browser and device type, pages requested, referring pages, and timestamps. We use these logs to operate, secure, and improve the service.
• Cookies and similar technologies. We use a small number of cookies that are essential to operate the site and to keep you signed in to the portal. See our Cookie Policy for details.

We do not intentionally collect special categories of sensitive personal data through these properties, and we ask that you do not submit such information through our contact or chat channels.

We use the information we collect to:

• respond to inquiries, contact-form submissions, and chat messages;
• create, authenticate, and manage portal accounts and access;
• operate, maintain, secure, and improve our website and portal;
• monitor for, detect, prevent, and investigate fraud, abuse, and security incidents;
• comply with our legal obligations and enforce our Terms of Service; and
• communicate with you about your inquiry, account, or our services.

We process personal information where we have a lawful basis to do so — for example, to take steps at your request before or after entering into an agreement, for our legitimate interests in operating and securing the service, with your consent where required, or to comply with the law.

We rely on a small number of trusted service providers to deliver our website and portal. These providers process information on our behalf and under contract, and are not permitted to use it for their own purposes:

• Supabase— database, authentication, and storage for the portal and for contact and account records.
• Vercel— website and application hosting, content delivery, and related server logging.
• Email delivery— an email service provider used to deliver transactional and notification emails, such as a reply to your inquiry or account-related messages.

We may update this list as our service evolves, and we will revise this policy when we do. We do not sell your personal information, and we do not share it with third parties for their own marketing.

We use cookies that are strictly necessary to run the site and to keep you signed in to the portal, and we may use limited analytics to understand how the site is used. You can control cookies through your browser settings. For a full description of the cookies we use and how to manage them, please see our Cookie Policy.

We keep personal information only for as long as we need it for the purposes described in this policy, including to respond to your inquiry, to provide and secure the portal, and to meet our legal, accounting, or reporting obligations. Contact-form and chat submissions are retained for as long as needed to handle the request and any follow-up. Account data is kept for the life of the account and for a reasonable period afterward. Server logs are retained for a limited period for security and operational purposes. When information is no longer needed, we delete it or anonymize it.

Depending on where you live, you may have rights over your personal information, including the right to access, correct, update, or delete it, to object to or restrict certain processing, and to request a copy of the information you have provided. Where we rely on consent, you may withdraw it at any time. We do not sell or “share” personal information as those terms are defined under U.S. state privacy laws.

To make a request under the GDPR, the CCPA/CPRA, or a similar law, contact us using the details in the Contact us section below. We will verify your request as required and respond within the timeframe set by applicable law. You will not be discriminated against for exercising your rights, and you may use an authorized agent where the law permits.

Our website and portal are intended for businesses and adults. They are not directed to children, and we do not knowingly collect personal information from children under 13. If you believe a child under 13 has provided us with personal information, please contact us and we will take steps to delete it.

We take reasonable technical and organizational measures designed to protect personal information against loss, misuse, and unauthorized access, including access controls, authentication, and encryption in transit. No method of transmission or storage is completely secure, however, and we cannot guarantee absolute security. You are responsible for keeping your account credentials confidential.

We and our service providers may process and store information in countries other than the one in which you live, including the United States. Where personal information is transferred across borders, we take steps to ensure it remains protected in a manner consistent with this policy and applicable law, including the use of appropriate safeguards where required.

We may update this Privacy Policy from time to time to reflect changes in our practices, our service providers, or the law. When we make material changes, we will update the “Last updated” date at the top of this page and, where appropriate, provide additional notice. We encourage you to review this policy periodically.

If you have questions about this Privacy Policy or wish to exercise your privacy rights, please reach out through our contact page. We will route your message to the right team and respond as required.