Last updated: March 2026
1. Introduction
Sleepbiome Labs (“Company,” “we,” “us,” or “our”) respects your privacy and is committed to protecting the personal information you share with us. This Privacy Policy explains what information we collect, how we use it, how we share it, and what choices you have regarding your information when you visit our website sleepbiome.com (“Site”) or purchase our products.
By using our Site, placing an order, subscribing to our emails, or otherwise interacting with us, you agree to the collection and use of your information as described in this Privacy Policy. If you do not agree with this Policy, please do not use our Site or services.
2. Information We Collect
We collect information in three ways: information you provide directly to us, information collected automatically when you use our Site, and information from third-party sources.
Information you provide directly:
- Account and order information: name, email address, shipping address, billing address, phone number, and payment information when you place an order or create an account
- Subscription preferences: delivery frequency, plan type, and subscription management actions (pause, skip, cancel)
- Communications: any information you include when you contact our support team via email, phone, or contact form, including your name, email, order number, and the content of your message
- Reviews and user content: product reviews, testimonials, photographs, ratings, and any other content you voluntarily submit to our Site
- Email sign-up: your email address when you subscribe to our newsletter or promotional communications
- Survey responses: any information you provide in response to optional surveys, feedback forms, or product questionnaires
Information collected automatically:
- Device and browser information: IP address, browser type and version, operating system, device type, screen resolution, and language preferences
- Usage data: pages visited, time spent on each page, links clicked, referring URL, exit pages, and navigation patterns within our Site
- Location data: approximate geographic location based on your IP address (city/region level — we do not collect precise GPS location)
- Cookies and similar technologies: we use cookies, pixel tags, web beacons, and similar technologies to collect information about your browsing activity and preferences. See Section 7 (Cookies) for details.
Information from third-party sources:
- Payment processor: our payment processor (Square) provides us with transaction confirmation data including the last four digits of your payment card, transaction amount, and billing address. We do not receive or store your full credit card number.
- Shipping carriers: tracking information and delivery confirmation data from USPS, UPS, and other carriers we use to fulfill your order
- Analytics providers: aggregated and anonymized usage data from Google Analytics and similar tools
- Advertising platforms: if you arrive at our Site through a paid advertisement, the advertising platform (such as Meta or Google) may share limited information about the ad interaction, including the ad clicked and general demographic category. This data is used to measure advertising effectiveness and does not include your name or contact information unless you provide it directly.
3. How We Use Your Information
We use your information for the following purposes:
- To process and fulfill your orders, including payment processing, shipping, and delivery tracking
- To manage your subscription, including processing recurring charges, sending shipment notifications, and honoring pause/skip/cancel requests
- To communicate with you about your orders, account, or subscription, including order confirmations, shipping updates, and customer support responses
- To send promotional emails, product updates, and marketing communications (only if you have opted in — see Section 6)
- To improve our Site, products, and services by analyzing usage patterns, identifying technical issues, and understanding customer preferences
- To personalize your experience on our Site, including displaying relevant product recommendations
- To detect, prevent, and address fraud, unauthorized activity, and security issues
- To comply with legal obligations, enforce our Terms of Service, and protect the rights, property, and safety of Sleepbiome Labs, our customers, and the public
- To administer contests, promotions, surveys, or other Site features
- To aggregate and anonymize data for internal analytics and business intelligence purposes
We will never sell your personal information to third parties. We will never share your email address with third-party marketers. We will never use your personal information in a way that is materially different from what is described in this Privacy Policy without first obtaining your consent.
4. How We Share Your Information
We share your personal information only in the following limited circumstances:
Service providers: We share information with third-party service providers who perform services on our behalf, including payment processing (Square), email marketing (Klaviyo/Mailchimp), shipping and fulfillment (USPS, UPS), website hosting, analytics (Google Analytics), and customer support tools. These providers are contractually obligated to use your information only for the specific services they provide to us and are prohibited from using it for their own purposes.
Advertising partners: We may share limited, anonymized data with advertising platforms (such as Meta and Google) for the purpose of measuring ad performance and creating audience segments for targeted advertising. This data does not include your name, email, or other directly identifying information. You can opt out of targeted advertising — see Section 6.
Legal requirements: We may disclose your information if required to do so by law, regulation, legal process, or governmental request, including in response to a court order, subpoena, or similar legal instrument.
Business transfers: If Sleepbiome Labs is involved in a merger, acquisition, asset sale, or bankruptcy, your personal information may be transferred as part of that transaction. We will notify you via email and/or a prominent notice on our Site of any change in ownership or use of your personal information.
Protection of rights: We may disclose information when we believe in good faith that disclosure is necessary to protect our rights, protect your safety or the safety of others, investigate fraud, or respond to a government request.
With your consent: We may share your information for purposes not described in this Privacy Policy if we obtain your explicit consent.
5. Data Retention
We retain your personal information for as long as necessary to fulfill the purposes described in this Privacy Policy, unless a longer retention period is required or permitted by law. Specifically:
- Order and transaction data: retained for 7 years for tax, accounting, and legal compliance purposes
- Account information: retained for as long as your account is active. If you request account deletion, we will delete your personal information within 30 days, except for data we are legally required to retain
- Subscription data: retained for the duration of your active subscription plus 12 months after cancellation, for the purpose of enabling easy reactivation and honoring any applicable guarantee claims
- Email marketing data: retained until you unsubscribe. Upon unsubscribing, your email address is removed from our active marketing lists within 10 business days. We may retain a suppression record of your email address to ensure we do not accidentally re-add you to marketing lists
- Customer support communications: retained for 3 years for quality assurance and dispute resolution purposes
- Anonymized analytics data: retained indefinitely, as it cannot be used to identify you
6. Your Rights and Choices
Email marketing: You can unsubscribe from promotional emails at any time by clicking the “unsubscribe” link at the bottom of any marketing email, or by contacting us at care@sleepbiome.com. Transactional emails (order confirmations, shipping updates, subscription notifications) are not marketing communications and cannot be opted out of while you have an active order or subscription, as they contain essential information about your purchase.
Cookies: You can control and manage cookies through your browser settings. Most browsers allow you to refuse cookies, delete existing cookies, or alert you when a cookie is being set. Note that disabling cookies may affect the functionality of our Site, including the checkout process. See Section 7 for details.
Targeted advertising: You can opt out of targeted advertising by adjusting your privacy settings on Meta (facebook.com/adpreferences), Google (adssettings.google.com), and other advertising platforms. You can also opt out of interest-based advertising through the Digital Advertising Alliance at optout.aboutads.info.
Do Not Track: Our Site does not currently respond to “Do Not Track” browser signals. However, you can use the cookie and advertising opt-out methods described above to limit tracking.
Access and correction: You have the right to request access to the personal information we hold about you and to request correction of any inaccurate information. Contact us at care@sleepbiome.com to make such a request.
Deletion: You have the right to request deletion of your personal information, subject to certain legal exceptions (see California and international rights below). Contact us at care@sleepbiome.com to make a deletion request.
7. Cookies and Tracking Technologies
We use the following types of cookies and similar technologies:
Essential cookies: Required for the basic functionality of our Site, including shopping cart operation, checkout processing, and account authentication. These cannot be disabled without breaking core Site functionality.
Analytics cookies: Used to understand how visitors interact with our Site, including which pages are visited, time spent on each page, and navigation patterns. We use Google Analytics for this purpose. Google Analytics data is aggregated and anonymized. You can opt out of Google Analytics by installing the Google Analytics Opt-out Browser Add-on (tools.google.com/dlpage/gaoptout).
Advertising cookies: Used to track the effectiveness of our advertising campaigns and to deliver relevant advertisements to you on other websites. These cookies are placed by third-party advertising platforms (such as Meta Pixel and Google Ads) and are subject to those platforms’ respective privacy policies.
Preference cookies: Used to remember your preferences and settings, such as language, region, and display preferences, to enhance your experience on return visits.
You can manage your cookie preferences at any time through your browser settings. To learn more about cookies generally, visit allaboutcookies.org.
8. California Privacy Rights (CCPA/CPRA)
If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with specific rights regarding your personal information:
Right to know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business purpose for collecting the information, and the categories of third parties with whom we share the information.
Right to delete: You have the right to request that we delete the personal information we have collected about you, subject to certain legal exceptions (such as data required for completing transactions, detecting fraud, or complying with legal obligations).
Right to correct: You have the right to request that we correct inaccurate personal information that we maintain about you.
Right to opt out of sale or sharing: Sleepbiome Labs does not sell your personal information. We do not exchange personal information for monetary consideration. However, some sharing of data with advertising platforms for targeted advertising purposes may be considered “sharing” under CCPA. You have the right to opt out of this sharing by contacting us at care@sleepbiome.com or by adjusting your advertising preferences as described in Section 6.
Right to non-discrimination: We will not discriminate against you for exercising your privacy rights. You will not receive different pricing, product quality, or service levels as a result of making a privacy request.
To exercise your California privacy rights: Submit a request to care@sleepbiome.com with the subject line “California Privacy Request.” We will verify your identity before processing your request. We will respond to verified requests within 45 days.
Categories of personal information collected in the preceding 12 months:
| Category | Examples | Collected |
|---|---|---|
| Identifiers | Name, email, address, phone number, IP address | Yes |
| Commercial information | Purchase history, order details, subscription data | Yes |
| Internet activity | Browsing history, search history, Site interaction data | Yes |
| Geolocation | Approximate location from IP address | Yes |
| Financial information | Last four digits of payment card (via payment processor) | Yes |
| Sensory data | Photos submitted in product reviews (if applicable) | Yes |
| Professional information | Job title (if voluntarily provided in reviews or surveys) | No |
| Biometric information | Fingerprint, facial recognition data | No |
| Protected classifications | Race, religion, sexual orientation, medical conditions | No |
9. International Users (GDPR)
If you are located in the European Economic Area (EEA), the United Kingdom (UK), or Switzerland, the General Data Protection Regulation (GDPR) and applicable local data protection laws provide you with additional rights:
Legal basis for processing: We process your personal data based on the following legal bases:
- Contract performance: processing necessary to fulfill your order, manage your subscription, and provide customer support
- Legitimate interest: processing necessary for our legitimate business interests, including fraud prevention, Site security, analytics, and improving our products and services
- Consent: processing based on your explicit consent, such as email marketing and non-essential cookies. You may withdraw consent at any time
- Legal obligation: processing necessary to comply with applicable laws and regulations
Your GDPR rights:
- Right of access: request a copy of the personal data we hold about you
- Right to rectification: request correction of inaccurate or incomplete data
- Right to erasure (“right to be forgotten”): request deletion of your personal data, subject to legal exceptions
- Right to restrict processing: request that we limit the processing of your data in certain circumstances
- Right to data portability: request a copy of your data in a structured, commonly used, machine-readable format
- Right to object: object to the processing of your data based on legitimate interests, including objecting to direct marketing
- Right to withdraw consent: withdraw consent at any time where processing is based on consent
To exercise your GDPR rights: Submit a request to care@sleepbiome.com with the subject line “GDPR Privacy Request.” We will respond within 30 days.
Data transfers: Your personal data may be transferred to and processed in the United States, where our servers and business operations are located. The United States may not have data protection laws equivalent to those in your jurisdiction. By using our Site, you consent to this transfer. We implement appropriate safeguards to protect your data during international transfers.
Data Protection Officer: For GDPR-related inquiries, contact us at care@sleepbiome.com.
10. Children’s Privacy
Our Site and products are not intended for individuals under the age of 18. We do not knowingly collect personal information from children under 18. If we become aware that we have collected personal information from a child under 18, we will take steps to delete that information as quickly as possible. If you believe that a child under 18 has provided us with personal information, please contact us at care@sleepbiome.com.
11. Security
We implement reasonable administrative, technical, and physical security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include encryption of data in transit (SSL/TLS), secure payment processing through PCI-compliant third-party processors (Square), access controls limiting employee access to personal data on a need-to-know basis, and regular monitoring for security vulnerabilities.
However, no method of transmission over the Internet or method of electronic storage is 100% secure. While we strive to protect your personal information, we cannot guarantee its absolute security. You are responsible for maintaining the confidentiality of your account credentials and for any activity that occurs under your account.
12. Third-Party Links
Our Site may contain links to third-party websites, services, or applications. This Privacy Policy applies only to our Site and services. We are not responsible for the privacy practices or content of third-party websites. We encourage you to review the privacy policies of any third-party websites you visit.
13. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. When we make material changes, we will notify you by posting the updated Policy on this page with a revised “Last updated” date. If the changes are significant, we may also notify you by email.
Your continued use of the Site after the effective date of the revised Privacy Policy constitutes your acceptance of the changes. We encourage you to review this page periodically.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:
Email: care@sleepbiome.com Phone: (212) 300-5616
Sleepbiome Labs 585 S Winchester Blvd San Jose, CA 95128
For California privacy requests: care@sleepbiome.com with subject line “California Privacy Request” For GDPR requests: care@sleepbiome.com with subject line “GDPR Privacy Request”