Privacy policy

PRIVACY POLICY

Last updated: 10 September 2026

SleepBump operates this store and website, including all associated information, content, features, tools, products and services, to provide you, as a customer, with a personalised shopping experience (the “Services”).

SleepBump uses Shopify, which enables us to provide the Services.

This Privacy Policy describes how we collect, use and disclose your personal information when you visit or use the Services, make a purchase or carry out any other transaction through the Services, or communicate with us.

In the event of any conflict between our Terms of Service and this Privacy Policy, this Privacy Policy shall prevail with regard to the collection, processing and disclosure of your personal information.

Please read this Privacy Policy carefully. By using or accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand how your information is collected, used and disclosed as described herein.

PERSONAL INFORMATION WE COLLECT OR PROCESS

When we use the term “personal information”, we mean information that identifies you or that can reasonably be associated with you or another individual.

Personal information does not include information collected anonymously or de-identified in a way that no longer reasonably allows you to be identified.

Depending on how you interact with the Services, your place of residence and the requirements of applicable law, we may collect or process the following categories of personal information, including certain inferences that may be made from this information:

  • Contact details, including your name, address, billing address, delivery address, telephone number and email address.

  • Financial information, including credit or debit card information, financial account information, transaction details, payment method and payment confirmation.

  • Account information, including your username, password, preferences and settings.

  • Transaction information, including the products you view, add to your basket, add to your wishlist or purchase, return, exchange or cancel, as well as your transaction history.

  • Communications with us, including information you provide when you contact our customer service team.

  • Device information, including information about your device, browser or network connection, IP address and other unique identifiers.

  • Usage information, including information about how and when you interact with the Services or browse our website.

SOURCES OF PERSONAL INFORMATION

We may collect personal information from the following sources:

  • Directly from you, including when you create an account, visit or use the Services, communicate with us or otherwise provide us with your personal information;

  • Automatically through the Services, including from your device when you use our products or services or visit our website, including through cookies and similar technologies;

  • From our service providers, including when we engage them to enable certain technological features or when they collect or process personal information on our behalf;

  • From our partners or other third parties.

HOW WE USE YOUR PERSONAL INFORMATION

Depending on how you interact with us or the Services you use, we may use your personal information for the following purposes:

  • Providing, personalising and improving the Services. We use your personal information to provide the Services, including to perform our contract with you, process your payments, process and dispatch your orders, remember your preferences and the products you are interested in, send you account-related notifications, process purchases, returns, exchanges or other transactions, create and manage your account, arrange delivery, facilitate returns and exchanges, enable the publication of reviews and create a personalised shopping experience, including by recommending products that may be of interest to you.

  • Marketing and advertising. We may use your personal information for marketing and promotional purposes, including to send you commercial and promotional communications by email, SMS or post, as well as to show you online advertisements for our products or services on our website or other websites, including based on products you have previously purchased or added to your basket and your activity on the Services.

  • Security and fraud prevention. We may use your personal information to authenticate your account, ensure the security of payments and purchases, detect, investigate or take action in relation to potentially fraudulent, illegal, harmful or malicious activity, protect our users and secure our Services. If you create an account, you are responsible for keeping your login credentials confidential. We recommend that you do not disclose your username, password or other access information to third parties.

  • Communicating with you. We use your personal information to provide customer support, respond to your enquiries, provide the Services and maintain our business relationship with you.

  • Legal obligations. We may use your personal information to comply with applicable laws and regulations, respond to valid legal requests from competent authorities, participate in legal or administrative proceedings and enforce our terms and policies.

HOW WE DISCLOSE YOUR PERSONAL INFORMATION

In certain circumstances, we may disclose your personal information to third parties for legitimate purposes and in accordance with this Privacy Policy.

These circumstances may include:

  • With Shopify, our suppliers and other service providers who act on our behalf, including for IT management, payment processing, data analysis, customer service, cloud storage, order fulfilment and delivery.

  • With our business and marketing partners in order to provide marketing services and show you advertisements. Some services may use information about your online activity to personalise the advertisements shown to you. Depending on where you live, you may have certain rights regarding the use of your personal information for targeted advertising.

  • When you request us to do so or provide your consent, including where necessary to dispatch your products or when you use certain social media widgets or integration features.

  • With our affiliates or within our group of companies, where applicable.

  • As part of a business transaction, such as a merger, acquisition or bankruptcy proceeding, as well as to comply with our legal obligations, respond to requests from competent authorities, enforce our terms or protect our Services, our rights and those of our users or third parties.

RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify, which collects and processes certain personal information relating to your access to and use of the Services in order to enable us to provide and improve the Services.

Information you provide through the Services may be transmitted to and shared with Shopify and third parties located in countries other than your country of residence where necessary to provide and improve the Services.

Shopify may also process certain information relating to your interactions with our store and with Shopify in order to provide certain enhanced features.

In these circumstances, Shopify may be responsible for processing certain aspects of your personal information, including where this involves responding to requests concerning the exercise of certain of your rights.

For more information about how Shopify uses personal information and the rights you may have, please refer to the Shopify Privacy Policy.

THIRD-PARTY WEBSITES AND LINKS

The Services may contain links to websites or other online platforms operated by third parties.

If you follow a link to a website that is not affiliated with or controlled by SleepBump, we recommend that you review the privacy and security policies and terms and conditions of those websites.

We do not guarantee and are not responsible for the privacy or security of such websites, or for the accuracy, completeness or reliability of the information provided on them.

Information you provide in public or semi-public spaces, including on third-party social media platforms, may be visible to other users and may be used by us or such third parties in accordance with their own policies.

The presence of such links on our website does not necessarily constitute a recommendation or endorsement of the content or owners of those platforms.

CHILDREN’S DATA

The Services are not intended for children, and we do not knowingly collect personal information from children who have not reached the applicable age of majority in their jurisdiction.

If you are the parent or legal representative of a child who has provided us with personal information, you may contact us using the contact details provided below to request its deletion.

As of the date this Privacy Policy was last updated, we are not aware that we knowingly sell or share personal information relating to individuals under the age of 16 as defined by applicable laws.

SECURITY AND RETENTION OF YOUR INFORMATION

Please note that no security measure is perfect or completely impenetrable, and we cannot guarantee absolute security.

In addition, information you transmit to us may not be completely secure during transmission.

We recommend that you do not use unsecured means of communication to transmit sensitive or confidential information.

The length of time for which we retain your personal information depends on various factors, including whether we need to retain the information to manage your account, provide the Services, comply with our legal obligations, resolve disputes or enforce our applicable agreements and policies.

YOUR RIGHTS AND CHOICES

Depending on where you live, you may have some or all of the following rights regarding your personal information.

However, these rights are not absolute and may only apply in certain circumstances. In some cases, we may be legally permitted to refuse your request.

  • Right of access and information. You may have the right to request access to the personal information we hold about you.

  • Right to erasure. You may have the right to request the deletion of the personal information we hold about you.

  • Right to rectification. You may have the right to request the correction of inaccurate personal information.

  • Right to data portability. In certain circumstances, you may have the right to receive a copy of your personal information and request that it be transferred to a third party.

  • Managing communication preferences. We may send you promotional communications. You can unsubscribe at any time by using the unsubscribe link included in our emails. Even after you unsubscribe, we may continue to send you necessary non-promotional communications, including those relating to your account or orders.

Rights Applicable in the United Kingdom and European Economic Area

If you reside in the United Kingdom or European Economic Area, and subject to the exceptions and limitations provided by applicable law, you may also have the following rights:

  • Right to object and right to restriction of processing. You may have the right to request that we stop or restrict the processing of your personal information for certain purposes.

  • Right to withdraw consent. Where we rely on your consent to process your personal information, you may withdraw that consent at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before consent was withdrawn.

You may exercise your rights where provided for through the Services or by contacting us using the contact details provided below.

We will not treat you unfairly or discriminate against you for exercising your rights.

We may need to verify your identity before processing your request, to the extent permitted or required by applicable law.

We will endeavour to respond to your request within the timeframes required by applicable law.

COMPLAINTS

If you have any complaints regarding the way we handle your personal information, please contact us using the contact details provided below.

Depending on where you live, you may also have the right to challenge our decision or lodge a complaint with the relevant data protection authority.

For individuals residing in the United Kingdom, the relevant authority is, in particular, the Information Commissioner’s Office (ICO).

INTERNATIONAL TRANSFERS

We may transfer, store and process your personal information outside the country in which you reside.

When we transfer your personal information outside the United Kingdom or European Economic Area, we rely on transfer mechanisms recognised by applicable law, such as the European Commission’s Standard Contractual Clauses or transfer mechanisms approved by the relevant UK authorities, where required.

These mechanisms are not required where the transfer is to a country recognised as providing an adequate level of protection under applicable regulations.

CHANGES TO THIS PRIVACY POLICY

We may update this Privacy Policy from time to time, including to reflect changes to our practices or for operational, legal or regulatory reasons.

We will publish the revised version of this Privacy Policy on this website and update the date of the latest revision.

Where required by applicable law, we will provide you with appropriate notice of any material changes.

CONTACT

If you have any questions about our privacy practices or this Privacy Policy, or if you wish to exercise any of your rights, you can contact us:

SleepBump Ltd
Eastern Wood Road Langage Industrial Estate
Plympton, Devon PL7 5ET
United Kingdom

Company Registration No.: 6546734
Company VAT No.: 929 3021 11

E-mail: contact@sleepbump.co.uk
Telephone: +44 7537 171018
Website: sleepbump.co.uk

For the purposes of applicable data protection laws, SleepBump Ltd acts as the data controller of your personal information, insofar as it determines the purposes and means of processing that information.