Privacy Policy

1. Information We Collect

Personal Information You Provide

We collect information you voluntarily provide when you:

• Fill out contact forms or consultation requests
• Sign up for our newsletter or email list
• Purchase our products, courses, or consulting services
• Create an account on our website
• Communicate with us via email, phone, or chat
• Complete intake questionnaires for sleep consulting

This information may include:

• Contact Information: Name, email address, phone number, mailing address
• Account Information: Username, password, account preferences
• Payment Information: Credit card details, billing address (processed securely via Stripe)
• Family Information: Child's age, sleep habits, health conditions relevant to sleep consulting
• Communication Data: Messages, feedback, and correspondence

Information Collected Automatically

When you visit our website, we automatically collect:

• Device Information: IP address, browser type, operating system, device identifiers
• Usage Data: Pages visited, time spent on pages, click patterns, referring URLs
• Location Data: General geographic location based on IP address
• Cookies and Similar Technologies: As described in our Cookie section below

2. How We Use Your Information

We use your information for the following purposes:

• Provide Services: Deliver sleep consulting, courses, and digital products you purchase
• Communication: Send confirmation emails, updates, and respond to inquiries
• Marketing: Send newsletters, promotions, and educational content (with your consent)
• Personalization: Customize your experience and provide relevant recommendations
• Analytics: Understand how visitors use our website to improve our services
• Legal Compliance: Comply with legal obligations and protect our rights
• Payment Processing: Process transactions securely through our payment providers

3. Legal Basis for Processing (GDPR)

For users in the European Economic Area (EEA), we process personal data based on:

• Contract Performance: Processing necessary to fulfill our services to you
• Legitimate Interests: Improving our services, marketing (where appropriate), and fraud prevention
• Consent: Where you have explicitly agreed (e.g., newsletter subscriptions)
• Legal Obligation: Compliance with applicable laws and regulations

4. Information Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties who help us operate our business (payment processors, email services, hosting providers)
• Analytics Partners: Google Analytics and similar services for website analytics
• Legal Requirements: When required by law, court order, or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

Our Service Providers Include:

• Stripe: Payment processing
• Google Analytics: Website analytics
• Resend/EmailJS: Email communications
• Calendly: Appointment scheduling
• Supabase: Database and authentication services

5. Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your preferences and settings
• Understand how you use our website
• Provide personalized content and advertisements
• Analyze website traffic and performance

Types of Cookies We Use:

• Essential Cookies: Required for basic website functionality
• Analytics Cookies: Help us understand visitor behavior (Google Analytics)
• Marketing Cookies: Used for targeted advertising (with consent)
• Preference Cookies: Remember your choices and settings

You can manage cookie preferences through our cookie banner or your browser settings. Note that disabling certain cookies may affect website functionality.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations
• Resolve disputes and enforce agreements
• Maintain business records as required by law

Generally, we retain customer data for 7 years after your last interaction, unless you request deletion earlier. Newsletter subscribers' data is kept until you unsubscribe.

7. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• SSL/TLS encryption for data in transit
• Secure payment processing via PCI-compliant providers
• Access controls and authentication requirements
• Regular security assessments and updates

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security.

8. Your Privacy Rights

Depending on your location, you may have the following rights:

• Access: Request a copy of the personal data we hold about you
• Correction: Request correction of inaccurate or incomplete data
• Deletion: Request deletion of your personal data ("Right to be Forgotten")
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing of your data for certain purposes
• Restriction: Request restriction of processing in certain circumstances
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, please contact us at sam@slumbersquadsleep.com.

9. California Privacy Rights (CCPA/CPRA)

If you are a California resident, you have specific rights under the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA):

Your Rights Include:

• Right to Know: Request disclosure of categories and specific pieces of personal information collected
• Right to Delete: Request deletion of your personal information
• Right to Correct: Request correction of inaccurate personal information
• Right to Opt-Out: Opt-out of the sale or sharing of personal information
• Right to Non-Discrimination: Not be discriminated against for exercising your rights

Categories of Information Collected:

• Identifiers (name, email, IP address)
• Commercial information (purchase history)
• Internet activity (browsing history on our site)
• Geolocation data (general location from IP)

We do not sell personal information. To submit a CCPA request, email us at sam@slumbersquadsleep.com with the subject line "CCPA Request."

You may designate an authorized agent to make requests on your behalf. We will verify your identity before processing any request.

10. European Privacy Rights (GDPR)

If you are located in the European Economic Area (EEA), United Kingdom, or Switzerland, you have additional rights under the General Data Protection Regulation (GDPR):

• All rights listed in Section 8 above
• Right to lodge a complaint with your local Data Protection Authority
• Right to withdraw consent at any time

Data Controller: Slumber Squad
Contact: sam@slumbersquadsleep.com

For GDPR-related inquiries, please include "GDPR Request" in your email subject line. We aim to respond within 30 days.

11. Children's Privacy

Our services are directed to parents and caregivers, not children. We do not knowingly collect personal information directly from children under 13 (or 16 in the EEA).

If you believe we have collected information from a child, please contact us immediately at sam@slumbersquadsleep.com so we can delete it.

12. International Data Transfers

Your information may be transferred to and processed in the United States or other countries where our service providers operate. These countries may have different data protection laws than your country of residence.

For transfers from the EEA, we rely on Standard Contractual Clauses and other approved transfer mechanisms to ensure adequate protection of your data.

13. Changes to This Policy

We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. We will notify you of material changes by posting the updated policy on our website with a new "Last Updated" date. Your continued use of our services after changes constitutes acceptance of the updated policy.

14. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us: