Privacy Policy

Interpretation

Words with the initial letter capitalized have meanings defined under the following conditions. The same definitions apply whether they appear in singular or plural.

Definitions

For the purposes of this Privacy Policy:

• Account means a unique account created for you to access our Service or parts of our Service.
• Affiliate means an entity that controls, is controlled by, or is under common control with a party, where "control" means ownership of 50% or more of the shares, equity interest, or other securities entitled to vote for election of directors or other managing authority.
• Business, for the purpose of CCPA/CPRA, refers to the Company as the legal entity that collects consumers' personal information and determines the purposes and means of processing that information while doing business in California.
• CCPA and/or CPRA refer to the California Consumer Privacy Act and the California Privacy Rights Act of 2020.
• Company (referred to as either "the Company", "We", "Us" or "Our") refers to Slumberbuds LLC, 29952 Autumn Gold, New Hudson, MI 48165.
• Consumer, for the purpose of CCPA/CPRA, means a natural person who is a California resident as defined by the law.
• Cookies are small files placed on your computer, mobile device, or any other device by a website, containing the details of your browsing history among its many uses.
• Country refers to Michigan, United States.
• Device means any device that can access the Service, such as a computer, cellphone, or digital tablet.
• Do Not Track (DNT) is a concept promoted by U.S. regulatory authorities for allowing internet users to control the tracking of their online activities across websites.
• Personal Data is any information that relates to an identified or identifiable individual. For CCPA/CPRA, Personal Data includes any information that identifies, relates to, describes, or could reasonably be linked, directly or indirectly, with you.
• Service refers to the Website.
• Service Provider means any natural or legal person who processes data on behalf of the Company.
• Third-party Social Media Service refers to any website or social network through which a user can log in or create an account to use the Service.
• Usage Data refers to data collected automatically, generated by the use of the Service or from the Service infrastructure itself.
• Website refers to Slumberbuds, accessible from www.slumber-buds.com.
• You means the individual accessing or using the Service, or the company or other legal entity on behalf of which such individual is accessing or using the Service.

Types of Data Collected

Business Transactions

If the Company is involved in a merger, acquisition, or asset sale, your Personal Data may be transferred. We will provide notice before it becomes subject to a different Privacy Policy.

Law Enforcement

Under certain circumstances, the Company may be required to disclose Personal Data if required to do so by law or in response to valid requests by public authorities.

Other Legal Requirements

The Company may disclose Personal Data in good faith when necessary to:

• Comply with a legal obligation
• Protect and defend the rights or property of the Company
• Prevent or investigate possible wrongdoing in connection with the Service
• Protect the personal safety of users of the Service or the public
• Protect against legal liability

Analytics

We may use third-party Service Providers to monitor and analyze the use of our Service.

• Google Analytics

  Google Analytics is a web analytics service offered by Google that tracks and reports website traffic. You can opt out by installing the Google Analytics opt-out browser add-on.

  For more information, visit Google Privacy & Terms.

Email Marketing

We may use your Personal Data to contact you with newsletters, marketing, or promotional materials. You may opt out by following the unsubscribe link or contacting us.

We currently manage email marketing directly and do not rely on third-party email marketing providers.

Payments

We may provide paid products and/or services and use third-party services for payment processing. We do not store payment card details; they are provided directly to payment processors who adhere to PCI-DSS standards.

We partner with third-party payment processors to complete transactions securely. We will update this section with specific providers if and when additional processors are introduced.

Categories of Personal Information Collected

We collect information that identifies, relates to, describes, references, or could reasonably be linked with a particular consumer or device. The following categories may have been collected in the last twelve months:

• Category A: Identifiers. Examples include real name, alias, postal address, online identifier, IP address, email address, account name, driver's license number, passport number, or similar identifiers. Collected: Yes.
• Category B: Personal information categories listed in the California Customer Records statute(Cal. Civ. Code § 1798.80(e)). Examples include name, signature, physical characteristics, address, telephone number, passport number, driver's license number, financial information, or medical information. Collected: Yes.
• Category C: Protected classification characteristics. Examples include age, race, national origin, religion, marital status, medical condition, disability, sex, sexual orientation, veteran status, or genetic information. Collected: No.
• Category D: Commercial information. Records and history of products or services purchased or considered. Collected: Yes.
• Category E: Biometric information. Collected: No.
• Category F: Internet or other similar network activity. Interaction with our Service or advertisement. Collected: Yes.
• Category G: Geolocation data. Collected: No.
• Category H: Sensory data. Collected: No.
• Category I: Professional or employment-related information. Collected: No.
• Category J: Non-public education information. Collected: No.
• Category K: Inferences drawn from other personal information. Collected: No.
• Category L: Sensitive personal information. Examples include account login and password. Collected: Yes.

Personal information does not include publicly available information, deidentified or aggregated data, or information excluded from CCPA/CPRA.

Sources of Personal Information

• Directly from you.
• Indirectly from you. For example, from observing activity on our Service.
• Automatically from you. For example, through cookies.
• From Service Providers.

Use of Personal Information

We may use or disclose personal information for business or commercial purposes, including operating the Service, providing support, fulfilling transactions, complying with law, and internal administration and auditing. If we collect additional categories or use information for new purposes, we will update this policy.

Disclosure of Personal Information

We may have disclosed the following categories in the past twelve months for business or commercial purposes: Identifiers (A), California Customer Records information (B), Commercial information (D), and Internet or similar network activity (F).

Share of Personal Information

We may share your personal information with Service Providers, payment processors, affiliates, business partners, and third parties you authorize.

Sale of Personal Information

We do not sell personal information as commonly understood, but certain sharing with Service Providers may be deemed a sale under CCPA/CPRA. Categories that may have been sold include A, B, D, and F.

Sale of Personal Information of Minors Under 16

We do not knowingly collect personal information from minors under 16. If you believe we have collected such information, please contact us.

Your Rights under the CCPA/CPRA

If you are a California resident, you have the following rights:

• The right to notice of categories collected and purposes.
• The right to know/access specific pieces of personal information collected.
• The right to opt out of the sale or sharing of Personal Data.
• The right to correct Personal Data.
• The right to limit use and disclosure of sensitive Personal Data.
• The right to delete Personal Data, subject to exceptions.
• The right not to be discriminated against for exercising these rights.

Exercising Your CCPA/CPRA Data Protection Rights

To exercise these rights, you can contact us:

• By email: info@slumber-buds.com
• By visiting this page on our website: www.slumber-buds.com/r.

Requests must provide sufficient information for us to verify identity and describe the request in detail. We will respond within 45 days, with a possible 45-day extension when reasonably necessary.

Do Not Sell My Personal Information

You have the right to opt out of the sale of your personal information. Once we receive a verifiable request, we will stop selling your personal information. Opt-outs may be browser-specific.

Website

If applicable, use privacy preference controls on the Service or visit the following platforms:

• NAI opt-out platform
• EDAA opt-out platform
• DAA opt-out platform

Mobile Devices

Adjust device settings such as "Opt out of Interest-Based Ads" on Android or "Limit Ad Tracking" on iOS to control personalized advertising. You can also disable location sharing in device preferences.

Limit the Use or Disclosure of My Sensitive Personal Information

California residents may request to limit the use or disclosure of sensitive personal information. We collect, use, and disclose such information only as necessary to provide the Service. Contact us for more details.