Update August, 2026
Privacy Policy
At Cocoon Productions, your trust matters. Here is a transparent breakdown of how we handle your data.
At Cocoon Productions, your privacy and trust are our top priorities; we only collect essential personal details—such as your name, contact information, and order details—when you reach out to us or purchase offerings like our E-commerce Starters Toolkit or SME E-Commerce Growth Service. All webshop transactions are processed securely through Squarespace Payments following strict PCI-DSS standards without storing raw credit card numbers locally, while non-intrusive cookies and analytics tools from Google and Squarespace are used solely with your explicit consent to optimize site performance. Rest assured that we strictly never sell or lease your personal information to third parties, and you maintain complete control over your data with full legal rights to request access, updates, or complete deletion at any time.
We encourage you to explore the full Privacy Policy below to learn more about how we keep your information safe and ensure a seamless experience across our platform.
TABLE OF CONTENTS
1. OVERVIEW AND DATA CONTROLLER DETAILS
Cocoon Productions (tradename of Coconne SC) ("we", "us", or "our") respects your privacy and is committed to protecting your personal data in accordance with the General Data Protection Regulation (GDPR) and relevant national ePrivacy legislation.
This Privacy & Cookie Policy explains how we collect, use, process, store, and safeguard your personal data when you visit our website, purchase digital products or professional services from our webshop, or interact with our digital channels.
2. LEGAL JUSTIFICATIONS FOR PROCESSING (GDPR ARTICLE 6)
Under Article 6 of the General Data Protection Regulation (GDPR), every instance of personal data processing requires a defined legal basis. We process your personal data strictly under the following lawful bases and compliance standards:
• For order fulfillment and digital delivery, we rely on contractual necessity under Article 6(1)(b) of the GDPR to collect mandatory billing, contact, and fulfillment details required to execute orders for products like the E-commerce Starters Toolkit or SME E-Commerce Growth Service.
• For email and marketing communications, we obtain explicit consent under Article 6(1)(a) of the GDPR by ensuring marketing checkboxes are unchecked by default and paired with a Double Opt-In (DOI) verification process.
• For ad pixels, analytics, and cookies, we rely on explicit consent under Article 6(1)(a) of the GDPR and ePrivacy guidelines, keeping non-essential tracking scripts such as Google Analytics and Google Ads strictly blocked until you explicitly accept them via our cookie banner.
• For fraud prevention and platform security, we process basic server logs, technical security monitoring data, and fraud detection metrics based on our legitimate interest under Article 6(1)(f) of the GDPR to keep our platform secure.
• For verified product reviews, we process transaction tokens based on our legitimate interest under Article 6(1)(f) of the GDPR to verify that published reviews originate from genuine customers.
• Finally, for custom audiences and ad matching, we process data based on explicit consent under Article 6(1)(a) of the GDPR, requiring a prior opt-in before pseudonymous hashing and transmission of contact data to ad networks take place.
3. CATEGORIES OF PERSONAL DATA COLLECTED
We process personal data that you actively submit to us as well as technical data generated during your platform usage:
• Identity & Business Data: First and last name, company designation, and professional role.
• Contact Details: Email address, telephone numbers, and billing or physical delivery addresses.
• Order & Service Data: Structured correspondence, intake project questionnaires, project files, and specific selections (such as the E-commerce Starters Toolkit or SME E-Commerce Growth Service).
• Technical & Device Metrics: We leverage integration modules via Google Analytics and built-in Squarespace web analytics to review metrics for the sole intent of modernizing our website performance and fine-tuning service parameters. All technical network data—including IP addresses and browser data—is automatically anonymized, masked, and aggregated upon collection. This ensures that underlying traffic diagnostics across Google and Squarespace infrastructure remain completely dissociated from individual personal parameters and cannot be re-identified.
• Transaction Logs: Verification records and payment confirmations associated with orders.
4. E-COMMERCE TRANSACTIONS & PAYMENT DATA (SQUARESPACE PAYMENTS)
When you purchase digital products or services through our webshop—including the E-commerce Starters Toolkit and the SME E-Commerce Growth Service—financial payments are handled securely through Squarespace Payments.
• Data Security & PCI-DSS: All cardholder data, billing details, and payment processing tokens are handled directly within the PCI-DSS compliant infrastructure of Squarespace Payments. Cocoon Productions never receives or stores raw, unencrypted credit card details on local systems or web servers.
• Platform Hosting: Transaction metadata, customer profiles, and invoice records are processed within Squarespace infrastructure in accordance with Squarespace's Privacy Terms.
5. DATA PROCESSING AGREEMENTS (DPAS) & TECH STACK
Under GDPR Article 28, whenever a third-party software vendor handles personal data on our behalf, we maintain a formal Data Processing Agreement (DPA) ensuring that your data remains confidential, secure, and used strictly according to our direct instructions.
Our core service processors include:
• E-Commerce Backend & Hosting: Squarespace (squarespace.com/privacy)
• Payment Processor: Squarespace Payments and Stripe
• Analytics & Ad Platforms: Google Analytics, Google Ads (Google LLC), Elfsight
• Cloud Infrastructure: Google Cloud Infrastructure & Squarespace Servers
6. COOKIE MANAGEMENT, ANALYTICS & GOOGLE CONSENT MODE V2
Our platform deploys technical, functional, and analytical cookies designed to optimize performance, remember shopping preferences, and secure checkout actions.
• Google Consent Mode v2: We utilize a consent framework integrated with Google Consent Mode v2. Non-essential analytical scripts (Google Analytics) and ad tags (Google Ads) are blocked by default and will only fire after you grant explicit consent via our cookie banner.
• Equal Choice (Banner UX): Our consent banner provides clear options giving equal prominence to accepting or rejecting non-essential cookies on the primary layer. Rejecting tracking cookies will not impact your functional webshop or checkout experience.
• Managing Cookies: You can update or withdraw your cookie preferences at any time through your browser settings or via the cookie preferences control on our website.
7. SERVER-SIDE TRACKING, CUSTOM AUDIENCES & AD MODULES
Where server-side measurement or conversion APIs (e.g., Google Ads API) are deployed to pass data securely from our first-party cloud server to analytical/advertising systems, processing occurs strictly subject to your granted marketing consent.
• Custom Audience Matching: Cryptographically hashed customer identifiers (e.g., pseudonymized emails) are only utilized for custom ad-matching or lookalike targeting if you have given prior explicit opt-in consent during checkout or subscription.
• Form Integrations: Forms embedded within ad campaigns or checkout channels route data into secure Squarespace infrastructure in compliance with international privacy protocols.
8. DIRECT MARKETING & EMAIL COMMUNICATIONS
• Double Opt-In (DOI): Subscriptions to our newsletters or direct updates operate via a Double Opt-In procedure. You will receive a confirmation message containing an activation link that must be clicked before marketing emails are dispatched.
• Customer Soft Opt-In: If you purchase a product or service from our webshop, we may send you commercial communications regarding similar products or trajectory updates under GDPR Article 6(1)(f) (Legitimate Interest). You are provided an unchecked option to opt out during checkout, and every marketing email includes an immediate 1-click unsubscribe option.
9. PRODUCT REVIEWS & CONSUMER AUTHENTICITY
In accordance with Directive (EU) 2019/2161 (the EU Omnibus Directive), we ensure that published client testimonials and product reviews originate from genuine consumers:
• Automated review invitations are routed to verified buyers following order completion.
• Reviews connected to verified webshop purchases are displayed with a "Verified Buyer" designation.
• Order matching tokens and automated verification checks are used to prevent fraudulent submissions.
10. CROSS-BORDER DATA TRANSFERS
When software processors handle or host customer data outside the European Economic Area (EEA)—such as US-hosted cloud infrastructure utilized by Squarespace or Google—data protection is enforced via valid transfer frameworks:
• Utilization of processors certified under recognized mechanisms, such as the EU-U.S. Data Privacy Framework (DPF).
• Implementation of standard contractual clauses (SCCs) approved by the European Commission.
• End-to-end encryption in transit and at rest.
11. DATA RETENTION
We store personal data only as long as required to serve the explicit purpose for which it was collected:
• Order & Transaction Records: Retained for 7 years to satisfy Belgian legal, financial, and tax record-keeping requirements.
• Inquiries & Intake Files: Retained indefinitely to manage ongoing customer relationships, unless deletion is formally requested.
• Marketing & Consent Logs: Retained until consent is explicitly withdrawn or following extended customer inactivity.
12. AUTOMATED DECISION-MAKING
Cocoon Productions confirms that personal data is never subjected to automated individual decision-making, profiling, or computerized workflows that produce legal effects or significantly affect individuals without human intervention.
13. YOUR RIGHTS AS A DATA SUBJECT
Under the GDPR, you maintain comprehensive rights regarding your personal datasets:
• Right of Access: Request a formal copy of all personal datasets held by us.
• Right to Rectification: Mandate immediate corrections to inaccurate or incomplete profiles.
• Right to Erasure ("Right to be Forgotten"): Demand complete deletion of personal records when legal storage mandates no longer apply.
• Right to Restrict or Object: Object to processing based on legitimate interests (including marketing soft opt-in) or restrict data processing operations.
• Right to Data Portability: Request transfer of your personal data packages to another designated controller.
• Right to Withdraw Consent: Revoke previously granted consent for marketing, analytics, or cookies at any time with immediate effect.
To exercise any of these rights, please contact us at sophie@cocoon.productions. Identity verification (such as a secure copy of an ID) may be requested to protect your data integrity.
If you believe our processing fails to conform with privacy law, you maintain the right to lodge a complaint with your supervisory authority, such as the Belgian Data Protection Authority (Gegevensbeschermingsautoriteit / Autorité de protection des données - APD/GBA) or the Financial Services and Markets Authority (FSMA).
14. PRIVACY ADMINISTRATION CONTACT
For questions, regulatory demands, or data requests, please contact our Privacy Lead directly:
• Data Controller: Cocoon Productions (Tradename of Coconne SC)
• Contact Representative: Sophie Callebaut
• Address: Rue de Nazareth 35, 6830 Rochehaut (Bouillon), Belgium
• Telephone: +32 (0)498 31 65 07
• Email: sophie@cocoon.productions
Ready for the Full Picture?
Before or after reviewing our Privacy Policy, we invite you to explore our Terms & Conditions to see how we maintain clear, fair, and transparent standards across all our products and services.
Find Your Way to Us
Our office is located in Bouillon.
Explore Our Offerings
Ready to level up your business? Browse our full range of e-commerce products and services to discover how we can help transform your online business.
When you're starting a webshop, it’s remarkably easy to get bogged down in spreadsheet chaos, guessing your margins, and figuring out basic backend tasks by trial and error.
Here’s the truth: you don't need expensive consultants or over-engineered software to launch and scale successfully—you just need the fundamentals set up correctly from day one. We created the E-Commerce Starters Toolkit specifically for early-stage store owners with focused catalogs (up to 100 SKUs) who want to skip the costly beginner mistakes.
Instead of spending weeks guessing or searching for answers, you get actionable templates, and step-by-step blueprints that save you hundreds of hours and ensure you actually turn a profit from your very first sales.
What’s Included:
📘 480-Page E-Commerce Blueprint: A comprehensive, step-by-step masterclass covering end-to-end store operations, conversion optimization, and scaling strategies.
📈 P&L & Paid Media Tracker: Take full control of your bottom line. Track real-time profit margins, ROAS, and ad spend allocation without messy spreadsheet errors.
📋 Product Specification Master Sheet: Professional supplier and inventory management templates to keep your sourcing tight and organized.
⚖️ Legal & Compliance Templates: Essential operational and store policies designed to protect your brand and maintain compliance.
Get total clarity on your actual numbers. Secure your copy today and build a data-driven e-commerce operation.
Running a high-converting webshop shouldn’t feel like a full-time job fighting broken tracking, confusing dashboards, or platform quirks. You started a business to sell great products—not to spend your weekends untangling Google Tag Manager.
That’s exactly why we built our SME Growth Service. We focus strictly on boutique brands and growing stores with refined catalogs (up to 100 products).
Think of Cocoon Productions as your day-to-day operations partner: we step in, fix your conversion tracking, dial in your profit margins, and create assets to actually drive revenue.
What We Do For Your Webshop:
🚀 Conversion Rate & Funnel Optimization: Turn more of your existing traffic into paying customers.
📊 Data & Tracking Setup: Bulletproof integration of GTM, Google Ads, GA4, and pixel tracking so you never waste ad spend on bad data.
📈 Operations & Margin Scaling: Streamline your store management, profit tracking, and product backend for maximum efficiency.
🛠️ Custom Technical Execution: Hands-on resolution of platform limitations, custom checkout flows, and technical bugs.