Privacy Policy

Last updated: 25 September 2026

1. Who we are (data controller)

This Privacy Policy explains how SleepyPods (“we”, “us”) uses personal data collected through our store at sleepypods.pl. SleepyPods is the controller of your personal data. As we are a business established in the European Union (Poland), we comply with the EU General Data Protection Regulation (GDPR) and, for customers in the UK, with the UK GDPR and the Data Protection Act 2018. For any data protection matter, contact us only:

• by e-mail: kontakt@sleepypods.pl
• through our contact form.

2. What data we use and why

• Orders – name, delivery and billing address, e-mail address, phone number and order details: to conclude and perform the contract, take payment, deliver, and handle cancellations, returns and complaints.
• Contact form and e-mail – your e-mail address and message: to reply and deal with your request.
• Payment data – processed directly by payment providers; we do not store full card details.
• Technical data and cookies – device information, IP address and activity in the store: to run the store and, only where you consent, for analytics and marketing.
• Marketing e-mails – your e-mail address and engagement with our e-mails, if you have subscribed.

3. Lawful bases

• Contract (Article 6(1)(b) UK GDPR/GDPR) – processing and delivering orders, cancellations, returns and complaints;
• Legal obligation (Article 6(1)(c)) – in particular tax and accounting obligations;
• Legitimate interests (Article 6(1)(f)) – answering enquiries, establishing and defending legal claims, preventing fraud, and keeping the store secure;
• Consent (Article 6(1)(a)) – marketing e-mails and non-essential cookies, including analytics and advertising pixels.

4. Cookies and similar technologies

We use strictly necessary cookies to run the store and your basket. We use non-essential cookies and similar technologies – analytics, and advertising pixels such as the Meta pixel – only with your consent, which you can give or withdraw at any time in our cookie banner. You can also control cookies in your browser settings.

5. Who receives your data

We share data only with providers that help us run the store, and only as needed:

• Shopify – the platform our store runs on (hosting, checkout and infrastructure);
• payment providers;
• couriers and delivery companies;
• Klaviyo – to send our e-mails, including marketing e-mails (with your consent);
• Meta Platforms (Facebook/Instagram) – advertising measurement via the Meta pixel (with your consent);
• authorities, professional advisers or a buyer of our business, where required by law or in connection with a business transaction.

We do not sell personal data.

6. International transfers

Your data may be processed outside the UK and the European Economic Area – for example in Canada or the United States – because of the providers we use, such as Shopify, Klaviyo and Meta. When this happens, we rely on recognised safeguards: adequacy regulations or decisions (such as the UK Extension to the EU-US Data Privacy Framework), or standard contractual clauses approved by the European Commission together with the UK International Data Transfer Addendum or Agreement. You can ask us for more information about these safeguards.

7. How long we keep your data

• order data – for as long as required by tax and accounting laws and until the limitation period for legal claims expires;
• correspondence – until your matter is resolved, and then until the limitation period for claims expires;
• data processed based on your consent – until you withdraw your consent.

8. Your rights

You have the right to: access your data; have it rectified; have it erased; restrict its processing; data portability; object to processing based on legitimate interests (and to object at any time to direct marketing); and withdraw your consent at any time, without affecting the lawfulness of processing before withdrawal. To exercise these rights, e-mail kontakt@sleepypods.pl. We will reply within one month. We do not make decisions based solely on automated processing that have legal or similarly significant effects on you.

9. Complaints

If you are unhappy with how we use your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office (ICO) at ico.org.uk, or to our lead supervisory authority in Poland, the President of the Personal Data Protection Office (UODO) at uodo.gov.pl.

10. Providing your data

Providing your data is voluntary, but it is necessary to place and fulfil an order and for us to deal with your enquiries.

11. Children

Our store is not directed at children under 13, and we do not knowingly collect their personal data. If you believe a child has given us personal data, contact us and we will delete it.

12. Security

We use appropriate technical and organisational measures to protect your data, but no method of transmission or storage is completely secure.

13. Changes to this policy

We may update this Privacy Policy, for example if the law or the way our store works changes. The current version is always available on this page, with its “Last updated” date.

14. Contact us

If you have any questions about this Privacy Policy or want to exercise your rights, e-mail us at kontakt@sleepypods.pl or use our contact form. We usually reply within 24 hours on business days.