Cloudy Mattress – Privacy Policy

Privacy Policy

Cloudy Mattress (“we,” “us,” or “our”) respects your privacy and is committed to protecting your personal information. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit or make a purchase from our website.

Personal Information We Collect

We collect personal information that you provide directly to us and information collected automatically.

Information You Provide

  • Name

  • Email address

  • Phone number

  • Billing and shipping address

  • Payment information (processed securely by third-party providers)

Information Collected Automatically

  • IP address

  • Device and browser information

  • Website usage data (pages viewed, time spent, interactions)

How We Use Your Information

We use your personal information to:

  • Process and fulfill orders

  • Provide customer support

  • Communicate with you regarding purchases or inquiries

  • Send marketing communications (where permitted)

  • Improve our website, services, and user experience

  • Prevent fraud and ensure security

Legal Basis for Processing (GDPR)

If you are located in the European Economic Area (EEA), we process your personal data under the following legal bases:

  • Contractual necessity – to process orders and deliver products

  • Legal obligation – to comply with tax and regulatory requirements

  • Legitimate interests – to improve services and prevent fraud

  • Consent – for marketing communications and cookies where required

Sharing Your Information

We do not sell your personal information.

We may share your information with trusted third parties, including:

  • Payment processors (e.g., Shopify Payments, Stripe, PayPal)

  • Financing providers (e.g., Klarna, Affirm, Snap Finance, if selected)

  • Shipping and logistics partners

  • Analytics and advertising providers (e.g., Google, Meta)

These parties are contractually obligated to protect your data.

Cookies and Tracking Technologies

We use cookies and similar technologies to:

  • Enable core website functionality

  • Improve performance and user experience

  • Analyze website traffic

  • Deliver relevant advertisements

Where required by law, we obtain your consent before placing non-essential cookies. You can manage cookie preferences through your browser settings.

Data Retention

We retain personal information only as long as necessary for the purposes described in this policy, including:

  • Fulfilling orders and providing services

  • Maintaining business and financial records

  • Complying with legal obligations

Order-related data is generally retained for up to 5 years to comply with tax and accounting requirements, unless a longer retention period is required by law.

Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

  • Encrypted connections (SSL)

  • Secure payment processing

  • Restricted access to sensitive data

In the event of a data breach, we will notify affected individuals and authorities as required by applicable law.

International Data Transfers

Your personal information may be transferred to and processed in countries outside your jurisdiction, including the United States and Canada.

Where required, we ensure appropriate safeguards are in place, such as standard contractual clauses or equivalent protections.

Your Privacy Rights

GDPR Rights (EEA Residents)

You have the right to:

  • Access your personal data

  • Correct inaccurate data

  • Request the deletion of your data

  • Restrict or object to processing

  • Request data portability

You may also lodge a complaint with your local data protection authority.

CCPA/CPRA Rights (California Residents)

You have the right to:

  • Know what personal information we collect and how it is used

  • Request deletion of your personal information

  • Opt out of the sale or sharing of personal information

  • Receive equal service regardless of exercising your rights

We do not sell or share personal information as defined under California law.

How to Exercise Your Rights

To submit a request, please contact us:

Email: support@cloudymattress.com

Please include:

  • Your full name

  • Email associated with your account

  • Description of your request

We may request additional information to verify your identity before processing your request.

Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices.

Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated “Last Updated” date.

Contact Us

If you have questions or concerns about this Privacy Policy, you may contact us at:

info@cloudymattress.com