Privacy Policy

1. Data Controller

2. Data Collected

We collect the following data:

• —Identification data: first name, last name, email address
• —Delivery data: postal address, phone number
• —Payment data: processed directly by Shopify (we do not store any banking data)
• —Browsing data: technical cookies, pages visited, session duration
• —Order data: purchase history, products ordered

3. Purposes of Processing

4. Legal Basis

The processing of your data is based on: the execution of the sales contract (orders), your consent (newsletter, non-essential cookies), and our legal obligations (invoicing).

5. Data Retention

• —Order data: 10 years (legal requirement)
• —Inactive customer data: 3 years after last contact
• —Newsletter: until unsubscription
• —Cookies: maximum 13 months

6. Your Rights (GDPR)

In accordance with GDPR, you have the following rights:

• —Right of access to your personal data
• —Right to rectification of inaccurate data
• —Right to erasure ("right to be forgotten")
• —Right to restriction of processing
• —Right to data portability
• —Right to object to processing
• —Right to withdraw your consent at any time

To exercise these rights, contact us at: privacy@sleepandrest.com

You also have the right to lodge a complaint with your national data protection authority.

7. Data Sharing

Your data may be shared with our technical service providers:

These transfers are governed by standard contractual clauses compliant with GDPR.

8. Cookies

We use technical cookies (necessary for the website to function) and analytical cookies. You can manage your preferences through your browser settings.

9. Contact

For any questions regarding this policy: privacy@sleepandrest.com