Notice at Collection for California Residents

Last Updated: May 7, 2026

Pursuant to the California Consumer Privacy Act of 2018 (CCPA), as amended by the California Privacy Rights Act of 2020 (CPRA) (collectively, the “CCPA”), Cosy Island (“Cosy Island,” “we,” “our,” or “us”) provides this Notice at Collection for California Residents (“Notice”) to explain what categories of personal information we collect, the purposes for which we collect them, and how you can exercise your rights under California law.

This Notice supplements the Cosy Island Privacy Policy, and applies solely to California residents.

1. Categories of Personal Information Collected

We collect the following categories of personal information as defined by the CCPA:

Category

Examples

source

Identifiers

Name, postal address, email, phone

number, IP address, account ID

Provided directly by you or

automatically collected

Customer Records

Billing and shipping details, order

history, payment information

Provided during transactions

Internet or Network Activity

Browsing history, clickstream data,

pages viewed, cookies, device data

Automatically collected

Commercial Information

Products or services purchased or

considered

Automatically collected

Geolocation Data

Approximate location inferred from IP

address

Automatically collected

Inferences

Preferences, wellness interests,

potential product recommendations

Derived from analytics

Audio / Visual Information

Customer service recordings (where

permitted)

Collected during support

interactions

3. Purposes for Collection and Use

We use the categories of personal information listed above for the following business and commercial purposes:

To process transactions, fulfill orders, and manage deliveries

To provide customer support and respond to inquiries

To personalize your experience and recommend relevant products

To conduct analytics, measure performance, and improve our Services

To send administrative and marketing communications (with your consent where required)

To detect and prevent fraud or security incidents

To comply with legal obligations and respond to lawful requests

For detailed information, see the section “How We Use Your Personal Information” in the Privacy Policy.

4. "Selling" and "Sharing" Personal Information

Cosy Island does not sell personal information for monetary value. However, under the CCPA, certain uses of online analytics and advertising cookies may be considered “selling” or “sharing” personal information for cross-context behavioral advertising.

You have the right to opt out of this activity at any time by visiting our Do Not Sell or Share My Personal Information page.

We also honor browser-based opt-out signals such as Global Privacy Control (GPC).

5. Retention Policy

We retain personal information only as long as reasonably necessary to achieve the purposes for which it was collected or as required by law.

Retention criteria include: data category, consent status, contractual necessity, and legal compliance obligations.

For additional details, please see “Data Security and Retention” in our Privacy Policy.

6. Your California Privacy Rights

Under the CCPA/CPRA, California residents have the right to:

Know

the categories and specific pieces of personal information we have collected;

Delete

personal information, subject to legal exceptions;

Correct

inaccurate personal information;

Opt out

of the sale or sharing of personal information;

Limit

the use or disclosure of sensitive personal information (where applicable) to only what is necessary to perform the services or provide the goods you have requested;

Non-discrimination

meaning we will not treat you differently for exercising your rights.

7. Effective Date

This Notice is effective as of May 7th, 2026 and may be updated periodically.

Material changes will be posted on our website with a revised effective date.

Contact Us

Cosy Island Customer Support

www.sleepal.ai

Monday – Friday, 10:00 AM – 7:00 PM ET