This privacy policy has been compiled to better serve those who are concerned with how their ‘Personally Identifiable Information’ (PII) is being used online. PII, as used in US privacy law and information security, is information that can be used on its own or with other information to identify, contact, or locate a single person, or to identify an individual in context. Please read our privacy policy carefully to get a clear understanding of how we collect, use, protect or otherwise handle your Personally Identifiable Information in accordance with our website.

What personal information do we collect from the people that visit our website or app?
When using our site, you may be asked to enter various information to help you with your experience. When you make a purchase or attempt to make a purchase through the Site, we collect certain information from you, including your name, billing address, shipping address, payment information (including credit card numbers), email address, and phone number. We refer to this information as “Order Information”. Although we save and store your order information for future orders we never save any type of credit card information or any other type of payment information in our system.

When you browse our store, we also automatically receive your computer’s internet protocol (IP) address in order to provide us with information that helps us learn about your browser and operating system.

When we talk about “Personal Information” in this Privacy Policy, we are talking both about Device Information and Order Information.

Email marketing (if applicable): With your permission, we may send you emails about our store, new products and other updates.

When do we collect information?
We collect information from you when you subscribe to a newsletter, place an order, setup an account, complete a transaction, verify your credit card, arrange for a delivery, return a purchase or enter other information on our site.

Financial Data
Financial information, such as data related to your payment method (e.g. valid credit card number, card brand, expiration date) that we may collect when you purchase, order, return, exchange, or request information about our services from the Site. We store only very limited, if any, financial information that we collect. Otherwise, all financial information is stored by our payment processors, PayPal and Square, and you are encouraged to review their privacy policy and contact them directly for responses to your questions.

Consent
When you provide us with personal information to complete a transaction, verify your credit card, place an order, arrange for a delivery or return a purchase, we imply that you consent to our collecting it and using it for that specific reason only.

If we ask for your personal information for a secondary reason, like marketing, we will either ask you directly for your expressed consent, or provide you with an opportunity to say no.

If after you opt-in, you change your mind, you may withdraw your consent for us to contact you, for the continued collection, use or disclosure of your information, at anytime, by contacting us at privacy@sleepybeeworx.com or mailing us at:
Sleepy Bee Worx LLC
P.O. Box 396, Franklinville, North Carolina US 27248

How do we use your information?
We may use the information we collect from you when you register for an account, make a purchase, sign up for our newsletter, respond to a survey or marketing communication (if applicable), surf the website, or use certain other site features in the following ways:

•To improve our website in order to better serve you.
•To allow us to better service you in responding to your customer service requests.
•If applicable to administer a contest, promotion, survey or other site feature.
•If applicable to send periodic emails regarding your order or other products and services.

We use the Device Information that we collect to help us screen for potential risk and fraud (in particular, your IP address), and more generally to improve and optimize our Site (for example, by generating analytics about how our customers browse and interact with the Site, and to assess the success of our marketing and advertising campaigns).

How do we protect visitor information?
We do not use vulnerability scanning and/or scanning to PCI standards.
We use regular Malware Scanning.
Your personal information is contained behind secured servers/networks on data storage, databases secured behind a firewall and is only accessible by a limited number of persons who have special access rights to such systems, and are required to keep the information confidential. In addition, all sensitive/credit information you supply is encrypted via a Comodo Secure Socket Layer (SSL) Technology. Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

We implement a variety of security measures when a user enters, submits, or accesses their information to maintain the safety of your personal information. Sensitive and private data exchange between the Site and its Users happens over a Comodo SSL secured communication channel and is encrypted and protected with a AES-256 (Military Grade) encryption with digital signatures. We adopt appropriate data collection, storage and processing practices and security measures to protect against unauthorized access, alteration, disclosure or destruction of your personal information, username, password, transaction information and data stored on our Site. You may request more information about our Comodo SSL Certificate by sending an email to security@sleepybeeworx.com.

Disclosure
We may disclose your personal information if we are required by law to do so or if you violate our Terms of Service.

Do we use ‘cookies’?
We may place a text file called a “cookie” in the browser files of your computer. The cookie itself does not contain personal information, although it will enable us to relate your use of this site to information that you have specifically and knowingly provided. The only personal information a cookie can contain is information supplied by the user such as filling out a site contact form. A cookie cannot read data from the user’s hard disk or read cookie files created by other sites. We use cookies to track user traffic patterns (as described above). Sleepy Bee Worx DOES NOT store any personal information in the cookie. A cookie in no way gives sites access to your computer hardware or software or any information about you. Our site simply creates cookies to help make our website usable by enabling basic functions like page navigation and the ability to use the contact forms on our site. You will not get the best experience and full use of our site if these basic essential cookies are disabled.

Your shopping cart contents are stored in “cookies.” A cookie is a small file placed on your computer’s hard drive by a web site. As you shop, the “cookie” records each purchase and the price in your shopping cart. Without the cookies, the shopping cart cannot “remember” all of your items. As a result each time you leave the cart to continue shopping, the items disappear. Cookies will also remember the items added to your cart so when you return at a later time they will still be there. We simply create a cookie to store the items in your shopping cart.

We collect Device Information using the following technologies:

– “Cookies” are data files that are placed on your device or computer and often include an anonymous unique identifier. For more information about cookies, and how to disable cookies, visit http://www.allaboutcookies.org.

– “Log files” track actions occurring on the Site, and collect data including your IP address, browser type, Internet service provider, referring/exit pages, and date/time stamps.

You can choose to have your computer warn you each time a cookie is being sent, or you can choose to turn off all cookies. You do this through your browser (like Internet Explorer or Google Chrome) settings. Each browser is a little different, so look at your browser’s Help menu to learn the correct way to modify your cookies. You can also use the Cookie Bar at the bottom of any page to either “Accept” or disable cookies but keep in mind, if you disable the essential cookies, some features will be disabled that make your site experience more efficient and some of our services will not function properly.
However, you can still place orders. View our Cookie Policy.

Google Website Analytics
Google’s advertising requirements can be summed up by Google’s Advertising Principles. They are put in place to provide a positive experience for users. https://support.google.com/adwordspolicy/answer/1316548?hl=en
We have not enabled Google AdSense on our site but we may do so in the future.
We may also partner with selected third-party vendors such as Google Analytics to allow tracking technologies and re-marketing services on the Site through the use of first party cookies and third-party cookies, to, among other things, analyze and track users’ use of the Site, determine the popularity of certain content and better understand online activity. By accessing the Site and clicking “Accept” on our cookie bar, you consent to the collection and use of your information by these third-party vendors. However, you can disable this by clicking on “Settings” to make cookie changes. You are encouraged to review our Cookie Policy and their privacy policy and contact them directly for responses to your questions. We do not transfer personal information to these third-party vendors. However, if you do not want any information to be collected and used by tracking technologies, you can use the cookie bar at the bottom of our web page to opt-out, you can visit the third-party vendor or the Network Advertising Initiative Opt-Out Tool or Digital Advertising Alliance Opt-Out Tool. View our Cookie Policy.

You should be aware that getting a new computer, installing a new browser, upgrading an existing browser, or erasing or otherwise altering your browser’s cookies files may also clear certain opt-out cookies, plug-ins, or settings.

Third Party Disclosure
We do not sell, trade, or otherwise transfer to outside parties your personally identifiable information.

Third Party Links
Occasionally, at our discretion, we may include or offer third party products or services on our website. These third party sites have separate and independent privacy policies. We therefore have no responsibility or liability for the content and activities of these linked sites. Nonetheless, we seek to protect the integrity of our site and welcome any feedback about these sites.

However, certain third-party service providers, such as payment gateways and other payment transaction processors, have their own privacy policies in respect to the information we are required to provide to them for your purchase-related transactions.

For these providers, we recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

In particular, remember that certain providers may be located in or have facilities that are located a different jurisdiction than either you or us. So if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

As an example, if you are located in Canada and your transaction is processed by a payment gateway located in the United States, then your personal information used in completing that transaction may be subject to disclosure under United States legislation, including the Patriot Act.

Once you leave our store’s website or are redirected to a third-party website or application, you are no longer governed by this Privacy Policy or our website’s Terms of Service.

Links
When you click on links on our store, they may direct you away from our site. We are not responsible for the privacy practices of other sites and encourage you to read their privacy statements.

Age of Consent
By using this site, you represent that you are at least the age of majority in your state or province of residence, or that you are the age of majority in your state or province of residence and you have given us your consent to allow any of your minor dependents to use this site.

Controls for DO-NOT-TRACK Features
Most web browsers and some mobile operating systems [and our mobile applications] include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected.  No uniform technology standard for recognizing and implementing DNT signals has been finalized. As such, we do not currently respond to DNT browser signals or any other mechanism that automatically communicates your choice not to be tracked online.  If a standard for online tracking is adopted that we must follow in the future, we will inform you about that practice in a revised version of this Privacy Policy./Most web browsers and some mobile operating systems [and our mobile applications] include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. If you set the DNT signal on your browser, we will respond to such DNT browser signals.

California Online Privacy Protection Act
CalOPPA is the first state law in the nation to require commercial websites and online services to post a privacy policy. The law’s reach stretches well beyond California to require a person or company in the United States (and conceivably the world) that operates websites collecting personally identifiable information from California consumers to post a conspicuous privacy policy on its website stating exactly the information being collected and those individuals with whom it is being shared, and to comply with this policy. – See more at: http://consumercal.org/california-online-privacy-protection-act-caloppa/#sthash.0FdRbT51.dpuf
According to CalOPPA we agree to the following:
Users can visit our site anonymously
Once this privacy policy is created, we will add a link to it on our home page, or as a minimum on the first significant page after entering our website.
Our Privacy Policy link includes the word ‘Privacy’, and can be easily be found on the page specified above.
Users will be notified of any privacy policy changes:
• On our Privacy Policy Page

Users are able to change their personal information:
• By emailing us
• By logging in to their account

How does our site handle do not track signals?
We honor do not track signals and do not track, plant cookies, or use advertising when a Do Not Track (DNT) browser mechanism is in place.
Does our site allow third party behavioral tracking?
It’s also important to note that we do not allow third party behavioral tracking

COPPA (Children Online Privacy Protection Act)
When it comes to the collection of personal information from children under 13, the Children’s Online Privacy Protection Act (COPPA) puts parents in control. The Federal Trade Commission, the nation’s consumer protection agency, enforces the COPPA Rule, which spells out what operators of websites and online services must do to protect children’s privacy and safety online.
We do not specifically market to children under 13.

Fair Information Practices
The Fair Information Practices Principles form the backbone of privacy law in the United States and the concepts they include have played a significant role in the development of data protection laws around the globe. Understanding the Fair Information Practice Principles and how they should be implemented is critical to comply with the various privacy laws that protect personal information.

In order to be in line with Fair Information Practices we will take the following responsive action, should a data breach occur:
We will notify the users via email
• Within 1 business day

We will notify the users via in site notification
• Within 1 business day

We also agree to the individual redress principle, which requires that individuals have a right to pursue legally enforceable rights against data collectors and processors who fail to adhere to the law. This principle requires not only that individuals have enforceable rights against data users, but also that individuals have recourse to courts or a government agency to investigate and/or prosecute non-compliance by data processors.

CAN SPAM Act
The CAN-SPAM Act is a law that sets the rules for commercial email, establishes requirements for commercial messages, gives recipients the right to have emails stopped from being sent to them, and spells out tough penalties for violations.
We collect your email address in order to:
• Send information, respond to inquiries, and/or other requests or questions.
• Market to our mailing list or continue to send emails to our clients after the original transaction has occurred

To be in accordance with CANSPAM we agree to the following:
• NOT use false, or misleading subjects or email addresses
• Identify the message as an advertisement in some reasonable way
• Include the physical address of our business or site headquarters
• Monitor third party email marketing services for compliance, if one is used.
• Honor opt-out/unsubscribe requests quickly
• Allow users to unsubscribe by using the link at the bottom of each email

If at any time you would like to unsubscribe from receiving future emails, you can follow the instructions at the bottom of each email
and we will promptly remove you from ALL correspondence.

Changes to this Privacy Policy
We reserve the right to modify this privacy policy at any time, so please review it frequently. Changes and clarifications will take effect immediately upon their posting on the website. If we make material changes to this policy, we will notify you here that it has been updated, so that you are aware of what information we collect, how we use it, and under what circumstances, if any, we use and/or disclose it.

CONTACT US

For more information about our privacy practices, if you have questions, or if you would like to make a complaint, please contact us by e‑mail at privacy@sleepybeeworx.com or by mail using the details provided below:

Sleepy Bee Worx
Privacy Compliance Officer
P.O. Box 396
Franklinville NC 27248
United States

This document was last revised on February 3rd, 2020.