Privacy policy

Who we are

This website is operated by Sleeepeasy Ltd, a company registered in England and Wales under company number 17348132, with its registered office at 128 City Road, London, EC1V 2NX, United Kingdom.

For the purposes of the UK GDPR and the Data Protection Act 2018, Sleeepeasy Ltd is the data controller for the personal information described in this policy. You can contact us about anything in it at info@sleeepeasy.com.

This policy explains what personal information we collect when you use sleeepeasy.com, why we collect it, who we share it with, and what rights you have over it.

What we collect

When you place an order we collect your name, billing and delivery address, email address, telephone number and the details of what you bought. Your card details are entered directly into our payment provider's systems — we never see or store your full card number.

When you contact us by email or through the site we collect your name, email address, and whatever you choose to tell us.

When you sign up to marketing we collect your email address and, if you give it, your name.

When you browse the site we automatically collect your IP address, device and browser type, the pages you view, how you arrived at the site, and similar technical information, through cookies and comparable technologies. See Cookies and tracking below.

We do not knowingly collect information from anyone under 18, and our products are not sold to under-18s.

Why we use it, and our lawful basis

We only use your personal information where the law allows us to. The bases we rely on are:

  • To perform our contract with you — taking and fulfilling your order, arranging delivery, handling returns and refunds, and answering questions about your order.
  • To comply with a legal obligation — keeping accounting and tax records, and meeting our obligations under consumer protection law.
  • For our legitimate interests — preventing fraud, keeping the site secure, understanding how the site is used so we can improve it, and defending legal claims. We only rely on this where your interests and rights do not override ours.
  • With your consent — sending you marketing emails, and setting non-essential cookies including the advertising and analytics cookies described below. You can withdraw consent at any time, and doing so does not affect anything we did before you withdrew it.

Cookies and tracking

Cookies are small files placed on your device. We use them in three ways.

Strictly necessary cookies make the site work — they remember what is in your basket, keep you signed in, and keep checkout secure. These are set without consent because the site cannot function without them.

Analytics cookies tell us how many people visit, which pages they look at and where they came from, so we can improve the site.

Advertising cookies and tracking technologies let us measure and target advertising. Specifically:

  • Meta Pixel and the Meta Conversions API. We use tools provided by Meta Platforms Ireland Ltd to understand which adverts lead to visits and purchases, and to show adverts to people who have visited our site. Some of this information is sent from your browser and some is sent directly from our servers to Meta (this is the Conversions API). Where you have consented, this may include a hashed — that is, scrambled and not directly readable — version of identifiers such as your email address or telephone number, which Meta uses to match the activity to a Meta account. Meta acts as a joint controller with us for the collection and transmission of this data, and as an independent controller for what it does with it afterwards. Meta's own privacy policy is at facebook.com/privacy/policy.
  • Google Ads and Google Analytics. We use tools provided by Google Ireland Ltd for the same purposes — measuring which adverts and search results bring people to the site, and understanding how the site is used.

Analytics and advertising cookies are only set where you have given consent. You can change or withdraw your choice at any time through the cookie settings on the site, and you can block or delete cookies in your browser settings — though the site may not work properly if you block the strictly necessary ones.

Who we share it with

We do not sell your personal information. We share it only with organisations that need it to provide our service to you, and only for that purpose:

  • Shopify, which hosts this store and processes orders on our behalf.
  • Payment providers, who process your payment and carry out fraud and identity checks.
  • Delivery companies and suppliers, who need your name, address and telephone number to deliver your order or collect a return.
  • Email and marketing providers, where you have asked to hear from us.
  • Meta and Google, as described under Cookies and tracking.
  • Professional advisers, insurers, and law enforcement or regulators, where we are required or permitted by law to do so.

Some of these organisations are based outside the UK, including in the United States. Where personal information leaves the UK we make sure it is protected to an equivalent standard, by relying on UK adequacy regulations or on the International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses.

How long we keep it

We keep order and transaction records for seven years after the end of the tax year they relate to, because HMRC requires it. We keep enquiry correspondence for two years. We keep marketing consents until you withdraw them, and for a short period afterwards so that we can prove you opted out. Website analytics data is kept in aggregated or pseudonymised form only.

Your rights

Under UK data protection law you have the right to:

  • ask for a copy of the personal information we hold about you;
  • have inaccurate information corrected;
  • ask us to delete information, where there is no good reason for us to keep it;
  • object to us using your information for our legitimate interests, and to object to direct marketing at any time;
  • ask us to restrict how we use your information while a query is resolved;
  • ask us to transfer your information to you or another provider in a machine-readable format; and
  • withdraw consent at any time, where we relied on consent.

To use any of these rights, email info@sleeepeasy.com. We will respond within one month. There is no charge, and we may ask you to confirm your identity first.

Every marketing email we send has an unsubscribe link at the bottom. Unsubscribing stops the marketing but does not stop the emails we have to send about an order you have placed.

Security

This site uses SSL encryption on every page, and payments are processed through PCI-DSS compliant providers. No system is perfectly secure, but we take appropriate technical and organisational measures to protect your information against loss, misuse and unauthorised access.

Complaints

If you are unhappy with how we have handled your personal information, please tell us first at info@sleeepeasy.com so we can put it right. You also have the right to complain to the Information Commissioner's Office, the UK data protection regulator, at ico.org.uk or on 0303 123 1113.

Changes to this policy

If we change this policy we will update it on this page and change the date below. If the change is significant we will tell you directly.

Contact

Sleeepeasy Ltd
128 City Road, London, EC1V 2NX, United Kingdom
Registered in England and Wales, company number 17348132
info@sleeepeasy.com — we aim to reply within one working day.

Last updated: 3 August 2026.