At Starry Night Mattresses, your privacy is of utmost importance to us, and we are committed to safeguarding your personal information. This privacy notice is designed to inform you about how we handle your personal data, both in general and when you visit our website. It will also detail your privacy rights and the legal protections in place. 
 
Please be aware that we are continuously working to enhance our systems and processes, and this privacy notice may be subject to occasional updates. To ensure the accuracy and currency of the personal data we hold about you, kindly keep us informed of any changes during your relationship with us. 
 
Collection and Processing of Personal Information 
 
We collect and process various types of personal information, which may be obtained directly from you in a variety of ways, including: 

• Through our website (e.g., information you provide when filling out forms, registering your warranty, or setting up a profile) 
• When you make requests or inquiries, whether by mail, email, through our website, or over the telephone 
• Directly in our physical stores, at exhibitions, or shows we attend 
• If you choose to participate in surveys or enter competitions 
• When you post comments on our website or blog 
• When you engage with us through social media platforms such as Twitter or Facebook 

The information collected typically falls into the following categories:

• Contact details (e.g., last name, first name, address, postal code, telephone number, email) 
• Demographic information (e.g., nationality) 
• Your credit or debit card number (for transaction and reservation purposes) 
• Your preferences and interests
• Your feedback, opinions, questions, and comments, obtained from surveys or social media interactions
• Transaction history 
• Records of your communication with us 
• Credit checks, if you opt to pay by installments
• Details of your website visits and the resources you access 
• Data entered on our websites, including non-submitted (or abandoned) data 
• Your image captured by CCTV in our shops or premises for security purposes 

Additionally, some of the above information may be provided to us by third-party sources, such as: 

• When you order our products through a business customer, they may share certain information with us to fulfill your request.
• Reviews of our products or services posted on platforms like Trustpilot may provide us with information

We recommend reviewing the privacy notices and statements of any third parties that share your information with us, as we are not responsible for how they use, share, or make your personal data available. 
 
We may aggregate the information you provide directly to us or through third-party sources to enhance the services and information we offer to you. 
 
Data Collection from Suppliers 
 
For our supplier relationships, we collect contact details to facilitate order placement, payments, relationship management, and contract fulfillment. Rest assured, when returning a product, no additional delivery fee is charged when opting for an exchange or upgrade. 
 
Please note that we cannot exchange or refund products that have been damaged through misuse. 

Technical Personal Information 

When you interact with our websites, we automatically collect technical data about your equipment, browsing actions, and patterns. This data is gathered through the use of cookies, server logs, and similar technologies. We may also receive technical data from other websites that employ our cookies. 
 
Technical data may include: 

• Internet protocol (IP) address 
  
• Login data 
  
• Browser type and version 
  
• Time zone setting and location 
  
• Browser plug-in types and versions 
  
• Operating system and platform 
  
• Technology on the devices used to access our websites 
  
• The previous website from which you reached us 

Some technical data may be collected from or received from third parties, including: 
 

• Analytics providers such as Google (based outside the EU) 
  
• Advertising networks such as Criteo, DoubleClick, Affiliate Future, and Performance Horizon 
  
• Search information providers 

You can configure your browser to refuse all or some cookies, or to notify you when websites attempt to set or access cookies. However, please be aware that disabling or refusing cookies may result in certain parts of our websites becoming inaccessible or functioning improperly. 
 
Klarna 
 
To offer you Klarna's payment options, we may share certain aspects of your personal information, including contact and order details, with Klarna. This allows Klarna to assess your eligibility for their payment options and tailor them to your needs. 
 
Use of Your Information 
 
We only use your personal information when we have a lawful basis to do so. This can include the following: 

• The performance of a contract you enter into with us 
  
• Our legitimate interests or those of a third party 
  
• Compliance with a legal obligation 
  
• Your consent for specific purposes 

For example, we may use your information for: 

• Delivering our products and services 
  
• Processing orders and payments 
  
• Managing relationships with customers and suppliers, including warranty obligations and customer services 
  
• Fulfilling and responding to requests from you 
  
• Tailoring, developing, and improving our products, services, and website 
  
• Communication, including marketing and promotional messages, surveys, and analysis of feedback 
  
• Providing information about offers, events, new services, and new stores 
  
• Managing competition entries 
  
• Reviewing feedback, comments, and posts on review sites and social media platforms 
  
• Internal business management and operational purposes 
  
• Ensuring effective website presentation 
  
• Protecting you, our visitors, and our staff from crime 
  
• Preventing or detecting unlawful acts 
  
• Sharing Your Personal Information 

Your data may be accessed and shared with associated companies of Starry Night Mattresses. We also engage third-party service providers to assist in delivering our products, services, business operations, and system maintenance. For instance:

• Payments are frequently processed by secure third-party payment processors 
  
• Customer communications via email and phone are handled by Impact Call Centre Limited 
  
• Delivery companies are employed to deliver our products 
  
• When we use third-party service providers, we only disclose the personal information required for service delivery. We ensure that contracts are in place to secure your information and prohibit its use for their own direct marketing. 

In some cases, we may be required by law, such as court orders, or to prevent fraud or other crimes, to release your information to third parties. 
 
Opting Out of Marketing Messages 
 
You can request to stop receiving marketing messages at any time by:

• Using the unsubscribe, opt-out, or manage your preferences links in marketing messages 
  
• Contacting us at hello@starrynightmattresses.com 
  
• Using any of the contact details provided at the end of this notice 
  
• Opting out of marketing messages does not affect the use of your personal information for other purposes, such as handling warranty or other transactions.

Protection of Your Personal Data 
 
We have implemented security measures to prevent unauthorized access, loss, or disclosure of your personal data. Access to your data is limited to employees, agents, contractors, and third parties who require access for business purposes and are bound by confidentiality. 
 
In case of a suspected data breach, we will follow appropriate procedures and notify you and relevant regulators if legally required. 
 
Data Retention 
 
We aim to retain your information only as long as necessary for the permitted purposes. Certain warranties may require us to keep personal information for extended periods to fulfill our responsibilities. 
 
By law, we are obligated to retain certain basic information about customers and transactions for specified periods. 
 
Transferring Your Information Overseas 
 
Personal information may be transferred outside of the European Economic Area to third-party service providers. We take measures to ensure adequate data protection, as required by data protection