Privacy Policy

01 Introduction

Sleep Interface ("we," "us," "our," or "the Studio") is a professional UI and digital design studio operating at 2600 S Parker Rd, Aurora, CO 80014, United States. We are committed to protecting the personal information of our clients, website visitors, and business contacts in accordance with applicable privacy laws, including the Colorado Privacy Act (CPA) and, where applicable, the General Data Protection Regulation (GDPR).

This Privacy Policy describes our practices regarding the collection, use, disclosure, and protection of personal data. It applies to all information collected through our website, through email correspondence, through project management platforms, and through any other means of communication used in connection with our services.

By visiting our website or engaging Sleep Interface for design services, you acknowledge and agree to the practices described in this Privacy Policy. If you do not agree with any aspect of this policy, please refrain from using our website or engaging our services.

02 Information We Collect

We collect personal information in a variety of ways depending on how you interact with us. The categories of information we may collect include:

• Contact Information — your name, email address, phone number, company name, and mailing address, provided when you contact us, submit an enquiry form, or initiate a project engagement
• Project and Business Information — details about your business, brand, products, and project requirements that you share with us in the course of a design engagement
• Payment Information — billing address and payment details processed through our third-party payment processors; we do not store full card numbers or banking credentials directly
• Communication Records — emails, messages, notes, and records of calls or meetings conducted in connection with your project or enquiry
• Website Usage Data — IP address, browser type, device type, pages visited, time spent on pages, referral sources, and other technical data collected automatically when you visit our website
• Design Assets and Content — brand materials, images, copy, and other files you provide to us for use in design work
• Feedback and Testimonials — reviews, testimonials, or feedback you voluntarily provide about our services

We collect only the information that is necessary for the purposes described in this policy and do not seek to collect sensitive personal data such as health information, financial account data, government identification numbers, or other sensitive categories unless strictly required and with your explicit consent.

03 How We Use Your Information

We use the personal information we collect for the following purposes:

• To respond to enquiries, provide project quotes, and communicate with prospective clients about our services
• To deliver design services, manage project workflows, and fulfil our contractual obligations to clients
• To process invoices and payments and maintain accurate financial records
• To send project updates, feedback requests, and service-related communications
• To improve our website, services, and client experience based on usage data and feedback
• To comply with legal obligations, respond to legal proceedings, and enforce our Terms of Service
• To protect against fraud, unauthorized access, and other harmful activities
• To send occasional marketing communications about new services, case studies, or updates — only with your consent and with an easy opt-out option

We do not use your personal information for automated decision-making or profiling that produces legal or similarly significant effects without your explicit consent. We do not sell your personal data to third parties under any circumstances.

04 Legal Basis for Processing

Where the GDPR or similar privacy frameworks apply to our processing of your personal data, we rely on the following legal bases:

• Contractual Necessity — processing required to perform our design services and fulfil obligations under a project agreement or proposal
• Legitimate Interests — processing carried out for our legitimate business interests, such as improving our services, maintaining business records, and communicating with clients, where those interests are not overridden by your privacy rights
• Legal Obligation — processing required to comply with applicable laws, regulations, or court orders
• Consent — processing based on your freely given, specific, and informed consent, such as for marketing communications or the use of non-essential cookies; consent may be withdrawn at any time

If you would like more information about the specific legal basis applicable to a particular processing activity, please contact us at hello@sleepinterface.com.

05 Information Sharing

Sleep Interface does not sell, rent, or trade your personal information to third parties for their own marketing or commercial purposes. We may share your information only in the following limited circumstances:

• Service Providers — we share information with trusted third-party service providers who assist us in operating our business, including payment processors, cloud storage providers, project management platforms, and email communication tools. These providers are contractually obligated to protect your data and use it only for the purposes we specify
• Legal Requirements — we may disclose your information if required by law, regulation, legal process, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others
• Business Transfers — in the event of a merger, acquisition, or sale of all or part of our business assets, your personal information may be transferred as part of that transaction. We will notify you of any such change and your options
• With Your Consent — we may share your information for any other purpose with your explicit prior consent

All third parties with whom we share personal data are required to implement appropriate technical and organizational measures to safeguard your information and are prohibited from using it for any purpose beyond what is necessary to provide the contracted services.

06 Data Retention

We retain personal information for as long as is necessary to fulfil the purposes for which it was collected, to comply with our legal obligations, and to resolve disputes or enforce our agreements. Specific retention periods include:

• Client project files, correspondence, and contract records are retained for a minimum of five (5) years following project completion, in accordance with applicable business and tax record-keeping requirements
• Payment records and invoices are retained for seven (7) years to comply with financial reporting and tax obligations
• Website usage data collected through analytics tools is retained for a maximum of twenty-six (26) months before being anonymized or deleted
• Marketing communication preferences and consent records are retained for the duration of our relationship with you and for three (3) years following the termination of that relationship
• Enquiry records from prospective clients who did not proceed to a project engagement are retained for a maximum of two (2) years

Upon expiration of the applicable retention period, personal data will be securely deleted or anonymized in a manner that prevents reconstruction or identification. You may request early deletion of your data subject to the conditions described in the Your Rights section of this policy.

07 Data Security

Sleep Interface takes the security of your personal information seriously and implements appropriate technical and organizational safeguards to protect it against unauthorized access, loss, alteration, disclosure, or destruction. Our security measures include:

• Use of reputable, industry-standard cloud platforms with built-in encryption and access controls for the storage of client files and project data
• Encrypted communication channels for the transmission of sensitive information
• Restricted access to client data on a need-to-know basis, with access controls and authentication requirements
• Regular review of our security practices and third-party tool configurations to identify and address potential vulnerabilities
• Use of secure, third-party payment processors that comply with PCI DSS standards for all financial transactions

While we take every reasonable precaution to protect your information, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee absolute security and encourage you to take appropriate precautions when sharing sensitive information electronically. In the event of a data breach that affects your personal information, we will notify you in accordance with applicable legal requirements.

08 Cookies and Tracking

Our website may use cookies and similar tracking technologies to enhance your browsing experience and collect usage data. Cookies are small text files stored on your device that allow us to recognize your browser and remember certain information about your visit.

We use the following categories of cookies:

• Essential Cookies — necessary for the basic functioning of our website, such as maintaining session state and enabling navigation. These cookies cannot be disabled without impairing your ability to use the site
• Analytics Cookies — used to collect anonymized data about how visitors interact with our website, including pages visited, time on site, and traffic sources. This data helps us improve our website and user experience
• Preference Cookies — used to remember your settings and preferences, such as theme selection or language, to improve your experience on return visits
• Marketing Cookies — may be used to track your visits across websites and deliver relevant advertising. These are only placed with your explicit consent

You may control and manage cookies through your browser settings. Most browsers allow you to refuse or delete cookies, though doing so may affect the functionality of our website. Where required by law, we will present a cookie consent banner and obtain your consent before placing non-essential cookies on your device.

09 Third-Party Services

Our website and business operations involve the use of various third-party services and platforms. These providers may independently collect or process data about you subject to their own privacy policies. Third-party services we commonly use include:

• Shopify — our website and e-commerce platform, which processes website usage data and transaction information in accordance with Shopify's Privacy Policy
• Figma — used for the creation and sharing of design deliverables; client project files may be stored within Figma's cloud infrastructure
• Notion — used for project management, documentation, and client communication; project-related information may be stored within Notion workspaces
• Google Workspace — used for email communication, document storage, and calendar management
• Stripe or similar payment processors — used to securely process client payments; payment data is handled directly by the processor and is subject to their respective privacy and security standards
• Google Analytics or similar analytics tools — used to collect anonymized website usage statistics

We encourage you to review the privacy policies of any third-party services that may process your data. Sleep Interface is not responsible for the privacy practices or data handling of third-party service providers beyond our contractual requirements.

10 Your Rights

Depending on your location and the applicable privacy laws, you may have the following rights regarding your personal information:

• Right of Access — the right to request a copy of the personal information we hold about you
• Right to Rectification — the right to request correction of any inaccurate or incomplete personal information we hold about you
• Right to Erasure — the right to request deletion of your personal information, subject to our legal retention obligations and legitimate business needs
• Right to Restriction — the right to request that we restrict the processing of your personal information in certain circumstances
• Right to Data Portability — the right to receive your personal information in a structured, commonly used, and machine-readable format
• Right to Object — the right to object to processing of your personal information based on our legitimate interests or for direct marketing purposes
• Right to Withdraw Consent — where processing is based on your consent, the right to withdraw that consent at any time without affecting the lawfulness of processing carried out prior to withdrawal
• Right to Lodge a Complaint — the right to file a complaint with the relevant data protection authority in your jurisdiction if you believe your rights have been violated

To exercise any of these rights, please contact us at hello@sleepinterface.com. We will respond to all verifiable requests within thirty (30) days. We may require you to verify your identity before fulfilling certain requests to protect the security of your personal information.

11 International Data Transfers

Sleep Interface is based in the United States. If you are located outside the United States and choose to provide personal information to us or engage our services, please be aware that your information may be transferred to, stored, and processed in the United States, where data protection laws may differ from those in your country of residence.

Where we transfer personal data from the European Economic Area (EEA), the United Kingdom, or other jurisdictions with data transfer restrictions, we will implement appropriate safeguards as required by applicable law, such as standard contractual clauses approved by the relevant authorities, or other legally recognized transfer mechanisms.

By submitting your personal information and engaging our services, you acknowledge and consent to the transfer of your data to the United States and its processing there in accordance with this Privacy Policy.

12 Children's Privacy

Our website and services are intended exclusively for individuals who are at least eighteen (18) years of age. We do not knowingly collect, solicit, or process personal information from children under the age of 13, or under the applicable age of digital consent in your jurisdiction.

If we become aware that we have inadvertently collected personal information from a child below the applicable age threshold, we will take immediate steps to delete such information from our records. If you believe we may have collected information from a child in error, please contact us immediately at hello@sleepinterface.com.

13 Changes to This Policy

Sleep Interface reserves the right to update this Privacy Policy at any time to reflect changes in our practices, legal requirements, or operational needs. When we make material changes to this policy, we will update the "Last Updated" date at the top of this page and, where appropriate, notify active clients by email.

We encourage you to review this Privacy Policy periodically to stay informed about how we are protecting your information. Your continued use of our website or engagement of our services following the posting of any changes constitutes your acceptance of the updated Privacy Policy.

If we make any changes that materially reduce your rights or significantly alter how we handle your personal data, we will provide prominent notice and, where required by law, seek your renewed consent.

14 Contact Information

If you have any questions, concerns, or requests relating to this Privacy Policy or our data practices, please do not hesitate to reach out to us. We take all privacy-related enquiries seriously and will respond promptly and transparently.

For data subject access requests, deletion requests, or complaints, please contact us in writing at the details below. We aim to acknowledge all privacy-related requests within five (5) business days and to resolve them within thirty (30) days.