Privacy Policy

Last Updated: October 24, 2025

Your privacy matters to us. This Sleepal Privacy Policy ("Privacy Policy") explains how Sleepal International B.V. ("Sleepal," "we," "us," or "our") collects, uses, shares, and protects your personal data when you visit or make a purchase from our websites, mobile apps, or other digital services (collectively, the "Services").

When we refer to "you" or "your," we mean any visitor, customer, or user of our Services located in the European Economic Area (EEA), Switzerland, or the United Kingdom (UK).

By accessing our Services, you agree to this Privacy Policy and the processing of your personal data as described in this Privacy Policy.

You have the right to withdraw your consent to the processing of your personal data as described in this Privacy Policy at any time. If you do not agree, please discontinue use of our Services.

We may update this Privacy Policy from time to time. Any changes will appear on this page with a revised "Last Updated" date, and for significant updates, we'll notify you through our website or email.

1. Who We Are (Data Controller)

The entity responsible for your personal data is:

Sleepal International B.V.

Cruquiuskade 251, 1018 AM Amsterdam, The Netherlands

privacy@sleepal.com

For UK users, Sleepal International B.V. has appointed a UK representative: Sleepal Europe Ltd.

Sleepal Europe Ltd., 22 Bishopsgate, London EC2N 4BQ, United Kingdom

[Insert UK Representative Email]

2. Personal Data We Collect

We may collect and process the following categories of personal data, depending on how you use our Services:

Category

examples

Source

Identity Data

Name, title, account ID

Provided directly by you

or automatically collected

Health & Wellness Data

Sleep quality metrics, vital signs, snore data, breath disturbance, sleep position

Collected automatically via in-App data transfer

Contact Data

Email address, postal address, phone number

From your transactions with us

Transaction Data

Order details, shipping and billing information, payment reference

Automatically collected

through analytics and

advertising tools

Technical Data

IP address, browser type, cookies, device identifiers

Automatically collected

Profile Data

Preferences, account settings, product reviews

Provided directly by you

Usage Data

Site navigation, time on pages, referral source

Derived from analytics or

usage data

Marketing Data

Newsletter subscription, opt-in/opt-out preferences

Derived from analytics or

usage data

Support Data

Messages, after-sales or warranty requests

Derived from analytics or

usage data

We may also use aggregated, anonymized data for analytics and service improvement purposes which does not identify any individual.

3. How We Use Your Personal Data

We only process your personal data when permitted by law. The purposes and corresponding lawful bases under EU GDPR and UK GDPR are:

Purpose

lawful basis

To process your orders and deliver products

Performance of a contract

To manage your account and provide support

Performance of a contract / Legitimate interest

To send service or transactional updates

Performance of a contract / Legitimate interest

To personalize your experience and remember preferences

Consent / Legitimate interest

To send newsletters and promotions

Consent (opt-in)

To improve our products and website experience

Legitimate interest

To prevent fraud and maintain security

Legitimate interest / Legal obligation

To comply with tax or regulatory duties

Legal obligation

You may withdraw your consent at any time without affecting prior lawful processing.

4. How We Share Your Data

We only share personal data when necessary to deliver our Services or comply with the law. This may include:

Service Providers:

Shopify (hosting), Payment processors (such as Stripe, PayPal): To complete transactions and prevent fraud.; Analytics platforms (such as Google, Meta, Microsoft): To assist us in analyzing website traffic and marketing effectiveness (based on your consent).

Professional Advisors:

Legal, accounting, and auditing partners.

5. International Data Transfers

Your data may be processed or stored outside the country of purchase, yet still within the EEA or UK. When this happens, we ensure equivalent protection through:

Standard Contractual Clauses (SCCs) approved by the European Commission;

UK Addendum to SCCs approved by the UK ICO; or

You may request a copy of these safeguards at privacy@sleepal.ai.

We will continue to publicly disclose any future requests in this report.

6. Cookies and Tracking

We use cookies and similar technologies to operate our website, improve performance, and personalize your experience.

Essential cookies are necessary for functionality; others are used only with your consent.

For full details, please review our Cookie Policy

7. Data Retention

We keep your data only as long as necessary to fulfill our obligations or as required by law. When data is no longer needed, we securely delete or anonymize it.

8. Data Security

We use technical and organizational measures such as encryption (TLS/SSL), restricted access, and secure data centers to protect your information. While no online service can guarantee complete security, we regularly review and enhance our safeguards.

If you suspect unauthorized access, contact privacy@sleepal.com immediately.

9. Your Rights

Under the GDPR and UK GDPR, you have the right to:

Right

Description

Access

Request a copy of your personal data.

Rectification

Correct inaccurate or incomplete data.

Erasure

Ask us to delete your data (“right to be forgotten”).

Restriction

Limit how we process your data.

Portability

Request transfer of your data to you or another provider.

Objection

Object to processing for direct marketing or legitimate interests.

Withdrawn Consent

Withdraw consent at any time.

To exercise these right, contact privacy@sleepal.com. We many need to verify your identity before processing your request.

If you are dissatisfied with our response, you may contact your local supervisory authority:

We use technical and organizational measures such as encryption (TLS/SSL), restricted access, and secure data centers to protect your information. While no online service can guarantee complete security, we regularly review and enhance our safeguards.

If you suspect unauthorized access, contact privacy@sleepal.com immediately.

EU: Find your authority here.

UK: Information Commissioner's Office (www.ico.org.uk)

10. Marketing Preferences

We will only send you marketing content where you have opted in.

You can unsubscribe anytime by clicking “unsubscribe” in the message or adjusting preferences in your account.

Service updates (e.g., order confirmations) will continue regardless of marketing preferences.

11. Automated Decisions

We do not use automated decision-making that produces legal or significant effects. We may use analytics to better understand engagement and preferences, but these do not impact individual rights.

12. Children’s Data

Our Services are not directed toward individuals under 16 (or the legal age of majority in your country or region).

We do not knowingly collect data from children. If you believe a child has shared personal data with us, please contact us and we will delete it promptly.

13. Links to Other Sites

Our Services may include links to third-party websites.

We are not responsible for their privacy practices.

Please review their privacy notices before providing any personal data.

14. Changes to This Privacy Policy

We may update this Privacy Policy to reflect new technologies, legal requirements, or business practices.

Please review their privacy notices before providing any personal data.

Contact Us

Sleepal Customer Support

Email:

support@sleepal.com

Website:

www.sleepal.com

UK Addendum

For users located in the United Kingdom, this Privacy Policy applies under the UK GDPR and Data Protection Act 2018.

Sleepal International B.V. remains the data controller for your personal data but has appointed a UK representative for regulatory communication and oversight:

Sleepal Customer Support

Email:

Sleepal Europe Ltd., 22 Bishopsgate

Website:

support@sleepal.ai

All references to “GDPR” in this Privacy Policy should be understood to include the UK GDPR. UK residents may contact the Information Commissioner’s Office (ICO) at www.ico.org.uk for further guidance.

Contact Us

Sleepal Privacy Team

www.sleepal.ai

+1 (888) 629-4882

22000 Opportunity Way, Dock 1–5

Riverside, CA 92518

United States

Monday – Friday, 9:00 AM – 6:00 PM CST