Privacy Policy
Last updated: 19 March 2025
This Privacy Policy describes how DE Slumber (“the Website”, “we”, “us”, “our”) collects, uses and shares your personal data when you visit support@Slumber-us.com (“the Website”), use our services, make a purchase or communicate with us in connection with the Website (collectively referred to as “the Services”). For the purposes of this Privacy Policy, “you” and “your” refer to the user of the Services, whether you are a customer, a website visitor or another individual whose data we collect in accordance with this policy.
Please read this Privacy Policy carefully.
Changes to this Privacy Policy
We may update this Privacy Policy from time to time, including to reflect changes in our practices or for other operational, legal or regulatory reasons. We will publish the revised version on the Website, update the “last updated” date and take any other measures required by law.
How we collect and use your personal data
We collect information to provide the Services as described below. The type of information collected and used varies depending on how you interact with us.
In addition to the specific purposes set out below, we may use information about you to communicate with you, provide or improve the Services, comply with our legal obligations, enforce our Terms of Service, and protect or defend the Services, our rights and the rights of users or other persons.
What personal data do we collect?
The type of personal data we receive depends on how you interact with our Website and use our Services. When we use the term “personal data”, we mean information that identifies you, relates to you, describes you or can be linked to you. The sections below set out the categories and specific types of personal data we collect.
Information collected directly from you
Information you provide to us directly via our Services may include:
- Contact details – including your name, address, telephone number and email address.
- Order information – including name, billing address, delivery address, payment confirmation, email address and telephone number.
- Account information – including username, password, security questions and other data used for account security.
- Customer support information – including details you share with us, for example when sending a message regarding the Services.
Some features of the Services may require you to provide certain information. You may choose not to supply such information, but this may prevent you from accessing or using those features.
Automatically collected information about your usage
We may also automatically collect certain information regarding your interaction with the Services (“Usage Data”). We use cookies, pixels and similar technologies (“Cookies”) for this purpose. Usage Data may include information about how you access and use the Website and your account, such as device details, browser information, network connection, IP address and other data related to your interaction with the Services.
Information obtained from third parties
Finally, we may receive information about you from third parties, including suppliers and service providers who collect data on our behalf, such as:
- Companies supporting our Website and Services, such as Shopify.
- Our payment processors, who collect payment information (e.g. bank account, credit/debit card, billing address) to process your payments, fulfil your orders and supply the products or services you have requested in order to perform our contract with you.
When you visit our Website, open or click emails sent by us, or interact with our Services or advertisements, we or third parties we engage may automatically collect certain information via online tracking technologies such as pixels, web beacons, SDKs, third‑party libraries and cookies.
All information collected by third parties is processed in accordance with this policy. See also the section “Third‑Party Websites and Links” below.
How we use your personal data
Provision of products and services
We use your personal data to provide you with the Services and perform our contract with you. This includes processing payments, fulfilling orders, sending notifications relating to accounts, purchases, returns, exchanges or other transactions, creating, maintaining and administering your account, order processing, delivery, enabling returns and exchanges, and other functions linked to your account.
Marketing and advertising
We may use your personal data for marketing and advertising purposes, for instance sending promotional emails, SMS messages or postal communications, and displaying advertisements for products or services. This may involve using your personal data to personalise Services and advertisements on our Website and other platforms. If you are resident in the EEA, the legal basis for this activity is our legitimate interest in selling our goods pursuant to Article 6(1)(f) GDPR.
Security and fraud prevention
We use your personal data to detect, investigate or take action against potential fraud, unlawful or malicious activity. If you choose to use the Services and create an account, you are responsible for the security of your login credentials. We recommend not disclosing them to third parties. If you believe your account has been compromised, please contact us immediately. If you are resident in the EEA, the legal basis is our legitimate interest in securing our Website for you and other customers pursuant to Article 6(1)(f) GDPR.
Communicating with you and improving the Services
We use your personal data to provide customer support and improve our Services. This falls under our legitimate interest in responding to you, delivering effective services and maintaining our relationship with you pursuant to Article 6(1)(f) GDPR.
Cookies
Like many websites, we use cookies on our Website. For specific information on cookies used within our Shopify store, please visit https://www.shopify.com/legal/cookies. We use cookies to operate and improve our Website and Services (including storing actions and preferences), conduct analytics and better understand user interaction with the Services (pursuant to our legitimate interest in managing, improving and optimising the Services). We may also allow third parties and service providers to deploy cookies on our Website to better personalise services, products and advertisements on our Website and other sites.
Most browsers automatically accept cookies by default. You can configure your browser to delete or reject cookies via its settings. Please note that deleting or blocking cookies may impair your user experience and prevent some Services from functioning properly, including certain features. In addition, blocking cookies may not fully stop information being shared with third parties such as our advertising partners.
How we share personal data
Under certain circumstances, we may share your personal data with third parties to fulfil an agreement, for legitimate purposes or for other reasons set out in this policy. These circumstances include:
- With suppliers or other third parties providing services on our behalf (e.g. IT administration, payment processing, data analytics, customer support, cloud storage, order fulfilment and delivery).
- With business and marketing partners to provide you with Services and display advertisements to you. Our partners use your data subject to their own privacy policies.
- When you instruct us, submit a request or grant your consent for certain information to be shared with third parties – for example to arrange product delivery, or through the use of social media widgets or login integrations, subject to your consent.
- With our affiliates or within our corporate group, pursuant to our legitimate interest in operating a successful business.
- In connection with a business transaction such as a merger or insolvency; to comply with legal obligations (e.g. responding to subpoenas or search warrants); to enforce our Terms of Service; and to protect or defend the Services, our rights and the rights of users or other persons.
We disclose the following categories of personal data for the purposes described under “How we collect and use your personal data” and “How we share personal data”:
| Category | Categories of Recipients |
|---|---|
| Identifiers such as basic contact details and certain order and account information | Suppliers and third parties providing services on our behalf (e.g. internet service providers, payment processors, logistics partners, customer support, data analytics) |
| Business information such as order, purchase and customer support data | Business and marketing partners |
| Internet or similar network activity data, such as Usage Data | Affiliated companies |
| Geolocation data, e.g. locations determined via IP address or other technical means |
We will not use or disclose this information without your consent to derive personal data about you.
Third‑Party Websites and Links
Our Website may contain links to websites or online platforms operated by third parties. If you follow links to sites not affiliated with or controlled by us, please review their privacy, security and terms of service policies. We do not warrant or accept responsibility for the privacy or security of those websites, including the accuracy, completeness or reliability of information contained on them. Information you post in public or semi‑public spaces, including on third‑party social media platforms, may be viewable by other users of those Services and/or platforms, without restriction on use by us or third parties. The inclusion of such links does not constitute automatic endorsement of the content of those platforms or their owners/operators unless otherwise stated within the Services.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal data from children. If you are a parent or guardian of a child who has submitted personal data to us, you may request deletion by contacting us via the contact details below.
As of the effective date of this policy, we are not aware that we “disclose” or “sell” personal data of individuals under the age of 16 within the meaning of applicable legislation.
Security and retention of your data
No security measure is perfect or impenetrable, so we cannot guarantee absolute security. Furthermore, information you send to us may not be secure during transmission. We recommend avoiding insecure channels when sharing sensitive or confidential information with us.
How long we retain your personal data depends on multiple factors, including the need to administer your account, provide the Services, comply with legal obligations, resolve disputes and enforce agreements and policies.
Your rights
Depending on your place of residence, you may have some or all of the rights listed below in relation to your personal data. These rights are not absolute and apply only under specific conditions. In some cases we may decline your request within the limits permitted by applicable law.
- Right of access / right to information: You may have the right to request access to the personal data we hold about you, including details of how it is used and shared.
- Right to erasure: You may have the right to request deletion of your personal data.
- Right to rectification: You may have the right to request correction of inaccurate personal data.
- Right to data portability: You may have the right to obtain a copy of your personal data and, under certain conditions, request its transfer to another controller.
- Right to restriction of processing: You may have the right to request restriction of the processing of your personal data.
- Right to withdraw consent: Where we rely on your consent to process personal data, you may have the right to withdraw that consent.
- Right to object: If we reject your request, you may have the right to challenge our decision by replying directly to our rejection notice.
- Managing your communication preferences: We may send you marketing emails, from which you can unsubscribe at any time via the unsubscribe link contained in our emails. We may also send non‑marketing communications, for example relating to your account or orders.
You may exercise these rights as set out on our Website or by contacting us via the contact details below.
We will not discriminate against you for exercising these rights. We may need to collect information such as your email address or account details to verify your identity before responding to your request. Subject to applicable law, you may appoint an authorised representative to exercise your rights on your behalf. Before we accept a request from a representative, we require proof that you have authorised them to act for you, and we may need to verify your identity directly. We will respond to your request within the timeframe required by law.
Complaints
If you have concerns regarding our processing of your personal data, please contact us using the details below. If you are not satisfied with our response, depending on your place of residence you may have the right to contest our decision by contacting us or lodging a complaint with your local data protection authority. A list of competent supervisory authorities for the EEA is available online.
International users
Please be aware that we may transfer, store and process your personal data outside your country of residence. Your personal data may also be processed by our staff and external service providers located in those countries.
Where we transfer your personal data outside Europe, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses or equivalent agreements issued by competent UK authorities, unless the transfer is made to a country deemed to provide an adequate level of protection.
Contact
If you have any questions about our data protection practices or this policy, or wish to exercise your rights, please call us or email us at support@Slumber-us.com.
Subject to applicable data protection legislation and unless stated otherwise, we are the controller responsible for processing your personal data.