Privacy Policy

SleepVault ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, and safeguard your personal information when you visit our website or make a purchase from us. We comply with UK GDPR and the Data Protection Act 2018.

1. Information We Collect

Information you provide directly

• Your name, email address, and delivery address
• Payment information (processed securely through Shopify Payments, Stripe, or PayPal — we do not store full card details)
• Phone number, if you provide one for delivery notifications
• The content of any communication you send us

Information collected automatically

• IP address, browser type, and device information
• Pages visited, time spent on the site, and navigation patterns
• Cookies and similar tracking technologies (see Section 3)

2. How We Use Your Information

We use your information to:

• Process and fulfil your orders
• Send order confirmations, dispatch notifications, and tracking updates
• Respond to customer service enquiries
• Improve our website and product offering
• Send marketing emails (only if you have actively opted in — you can unsubscribe at any time using the link in every email)
• Detect and prevent fraud and abuse
• Comply with our legal obligations

3. Cookies and Tracking

We use cookies and similar technologies to:

• Remember the contents of your shopping cart
• Analyse how visitors use our site (via Shopify Analytics and Google Analytics)
• Deliver relevant advertising on Meta (Facebook and Instagram), Google, and other ad platforms

You can disable cookies in your browser settings, though this may affect site functionality. We will display a cookie consent banner on your first visit where applicable.

4. Third Parties We Share Data With

We share necessary information with the following service providers:

• Shopify — our ecommerce platform
• Payment processors — Shopify Payments, Stripe, PayPal
• Shipping carriers and fulfilment partners — to deliver your order
• Email service providers — for order communication and (with consent) marketing
• Marketing and analytics platforms — Meta, Google

We never sell your personal information to third parties.

5. Your Rights Under UK GDPR

You have the right to:

• Access the personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your information (subject to legal requirements such as retaining order records for tax purposes)
• Object to or restrict certain processing
• Request your data in a portable format
• Withdraw consent for marketing at any time
• Lodge a complaint with the Information Commissioner's Office at ico.org.uk

To exercise any of these rights, contact us at the email address below and we will respond within 30 days.

6. Data Retention

We retain your information for as long as necessary to fulfil the purposes outlined in this policy. Order and transaction records are typically retained for 6 years to comply with HMRC accounting and tax requirements. Marketing preferences are retained until you unsubscribe.

7. Security

We use industry-standard security measures including SSL encryption on all data transmission and secure storage with our platform providers. While no system is 100% secure, we take all reasonable steps to protect your data from unauthorised access, alteration, or disclosure.

8. International Transfers

Some of our service providers operate outside the UK. When we transfer personal data internationally, we ensure appropriate safeguards are in place through Standard Contractual Clauses or under recognised adequacy decisions.

9. Children's Privacy

Our website is not intended for individuals under 16 years of age. We do not knowingly collect personal data from children. If we become aware of such collection, we will delete the data promptly.

10. Changes to This Policy

We may update this Privacy Policy from time to time. The most recent version will always be available on this page with the date last updated shown at the top.

11. Contact Us