Privacy Policy

1. Introduction

FORM Sleep LLC ("FORM Sleep," "we," "us," or "our") is committed to protecting the privacy and security of your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website formsleep.com (the "Website"), place an order, create an account, or interact with us in any way.

By using our Website, you consent to the data practices described in this Privacy Policy. If you do not agree with these practices, please do not use our Website.

2. Information We Collect

2.1 Information You Provide Directly

We collect information that you voluntarily provide to us, including: name (first and last), email address, phone number, shipping and billing address, zip/postal code, payment information (processed by third-party payment processors; we do not store full credit card numbers), account login credentials, order history and preferences, product reviews and feedback, customer service communications, and any other information you choose to provide through forms, surveys, or correspondence.

2.2 Information Collected Automatically

When you visit our Website, we automatically collect certain technical information, including: IP address, browser type and version, operating system, device type and identifiers, referring URL and exit pages, pages visited and time spent on each page, date and time of visit, click patterns and navigation behavior, and general geographic location (derived from IP address).

2.3 Information from Third Parties

We may receive information about you from third parties, including: payment processors (Stripe, Affirm, Klarna), advertising and analytics partners (Google Analytics, Meta Pixel, TikTok Pixel), social media platforms (when you interact with our social media accounts), and delivery and logistics partners.

3. How We Use Your Information

We use the information we collect to: process and fulfill your orders, including payment processing, shipping, and delivery updates; communicate with you about your orders, account, and customer service inquiries; send marketing communications (with your consent, where required by law), including promotional emails, text messages, and targeted advertising; improve our Website, products, and services through analytics and user behavior analysis; personalize your shopping experience and display relevant product recommendations; detect, prevent, and address fraud, security issues, and technical problems; comply with legal obligations and enforce our Terms and Conditions; and conduct research and analysis to improve our business operations.

4. Cookies and Tracking Technologies

We use cookies, web beacons, pixels, and similar tracking technologies to enhance your experience on our Website. These technologies help us remember your preferences and login information, understand how you use our Website and which pages you visit, measure the effectiveness of our advertising and marketing campaigns, deliver targeted advertisements based on your interests, and analyze Website traffic and usage patterns.

You can manage your cookie preferences through your browser settings. Most browsers allow you to block or delete cookies. However, blocking certain cookies may affect your ability to use some features of our Website, including the shopping cart and checkout process.

We may use the following types of cookies: strictly necessary cookies (required for Website operation and cannot be disabled), performance cookies (help us understand how visitors use our Website), functionality cookies (remember your preferences and settings), and targeting/advertising cookies (used to deliver relevant advertisements).

5. How We Share Your Information

FORM Sleep does not sell your personal information to third parties. We may share your information with the following categories of recipients, strictly for the purposes described in this Privacy Policy:

Service Providers: Companies that help us operate our business, including payment processors (Stripe, Affirm, Klarna), shipping and logistics providers, email and SMS marketing platforms, customer service tools, website hosting and CDN providers, and analytics services.

Business Transfers: In the event of a merger, acquisition, reorganization, or sale of assets, your information may be transferred as part of that transaction. We will notify you of any such change.

Legal Requirements: We may disclose your information if required to do so by law, in response to a valid subpoena or court order, to protect our rights or property, or to prevent fraud or illegal activity.

With Your Consent: We may share your information with third parties when you have given us explicit consent to do so.

6. Data Security

We implement industry-standard security measures to protect your personal information, including: SSL/TLS encryption for all data transmitted between your browser and our servers; PCI DSS-compliant payment processing through our third-party payment providers; restricted access to personal information limited to authorized employees who require it for their job functions; secure data storage on protected servers with access controls; regular security audits and vulnerability assessments; and employee training on data privacy and security best practices.

While we strive to protect your personal information, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security, but we are committed to protecting your data to the best of our ability.

7. Data Retention

We retain your personal information for as long as necessary to fulfill the purposes outlined in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically: order and transaction data is retained for seven (7) years for tax, accounting, and warranty purposes; account information is retained for as long as your account is active and for a reasonable period afterward; marketing preferences are retained until you unsubscribe or request deletion; website usage data and analytics are retained in aggregated, anonymized form indefinitely; and customer service communications are retained for three (3) years from the date of the last interaction.

When personal information is no longer needed, we will securely delete or anonymize it in accordance with our data retention policies.

8. Your Privacy Rights

8.1 All Users

Regardless of your location, you have the right to: access the personal information we hold about you; request correction of inaccurate or incomplete personal information; request deletion of your personal information (subject to certain exceptions); opt out of marketing communications at any time; and request that we restrict processing of your personal information.

8.2 California Residents (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) provide you with additional rights, including: the right to know what personal information we collect, use, disclose, and sell; the right to delete your personal information; the right to opt out of the sale or sharing of your personal information (FORM Sleep does not sell personal information); the right to non-discrimination for exercising your privacy rights; the right to correct inaccurate personal information; the right to limit the use and disclosure of sensitive personal information; and the right to data portability (receive your data in a commonly used, machine-readable format).

To exercise your CCPA/CPRA rights, contact us at info@formsleep.com or call 888-533-3842. We will respond to verifiable requests within forty-five (45) days. You may also designate an authorized agent to make a request on your behalf.

You may opt out of the sale or sharing of your personal information at any time by contacting us. Opt-out requests remain effective for twelve (12) months from the date of the request.

8.3 European Economic Area and UK Residents (GDPR/UK GDPR)

If you are located in the European Economic Area (EEA) or the United Kingdom, the General Data Protection Regulation (GDPR) and UK GDPR provide you with additional rights, including: the right to access your personal data; the right to rectification of inaccurate data; the right to erasure (right to be forgotten); the right to restrict processing; the right to data portability; the right to object to processing; and rights related to automated decision-making and profiling.

Our legal bases for processing your personal data include: performance of a contract (processing orders), consent (marketing communications), legitimate interests (improving our services and fraud prevention), and compliance with legal obligations.

To exercise your GDPR rights, contact us at info@formsleep.com. You also have the right to lodge a complaint with your local data protection authority.

9. Children's Privacy

Our Website is not directed to individuals under the age of eighteen (18). We do not knowingly collect personal information from children under 18. If we become aware that a child under 18 has provided us with personal information, we will take steps to delete such information promptly. If you are a parent or guardian and believe that your child has provided us with personal information, please contact us at info@formsleep.com.

10. Do Not Track Signals

Some browsers include a "Do Not Track" (DNT) feature that signals to websites that you do not want your online activity tracked. Because there is no uniform standard for interpreting DNT signals, our Website does not currently respond to DNT signals. However, you can manage your privacy preferences through your browser settings and the opt-out mechanisms described in this Privacy Policy.

11. International Data Transfers

Your information may be transferred to and processed in countries other than the country in which you reside. These countries may have data protection laws that are different from the laws of your country. When we transfer your personal information internationally, we implement appropriate safeguards, including standard contractual clauses approved by the European Commission, to ensure your information is protected in accordance with this Privacy Policy.

12. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Privacy Policy on this page with a revised "Last Updated" date. For significant changes, we may also notify you via email or a prominent notice on our Website. We encourage you to review this Privacy Policy periodically.

13. Contact Information

For questions, concerns, or requests regarding this Privacy Policy or your personal information, please contact us:

For CCPA/CPRA requests, you may also write to us at the above address, Attn: Privacy Officer.