PRIVACY POLICY

Updated: October 2025

This Privacy Policy describes how Mylevel Pillows Limited ("we", "us", or "our") collects, uses, and protects your personal information when you use our website www.mylevelpillows.com (the "Website"). We are committed to ensuring that your privacy is protected in accordance with UK data protection laws.

1. Information We Collect

We may collect and process the following data:

·         • Name, address, email address, and phone number

·         • Payment information (processed securely by third-party providers)

·         • Order history and delivery information

·         • Website usage data, IP address, and browser information

2. How We Use Your Information

We use your information to:

·         • Process and deliver your orders

·         • Communicate with you about your order or queries

·         • Improve our website and customer service

·         • Comply with legal obligations

·         • Send marketing communications (only with your consent)

3. Legal Basis for Processing

Under the UK GDPR, we rely on the following legal bases for processing your personal data:

·         • Your consent

·         • Performance of a contract

·         • Compliance with legal obligations

·         • Our legitimate interests

4. Sharing Your Information

We may share your data with trusted third parties including:

·         • Payment processors (e.g., Squarespace payments, PayPal, Stripe)

·         • Delivery partners (e.g., Evri, Royal Mail)

·         • IT and website service providers

·         • Legal or regulatory authorities if required by law

5. Data Security

We take reasonable steps to ensure your data is secure and protected from unauthorised access, disclosure, or loss.

6. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including legal, accounting, or reporting requirements.

7. Your Rights

Under UK data protection law, you have the right to:

·         • Access your personal data

·         • Request correction or deletion

·         • Object to or restrict processing

·         • Withdraw consent at any time

·         • Lodge a complaint with the Information Commissioner’s Office (ICO)

8. Cookies

Our Website uses cookies to improve user experience and analyse traffic. Please refer to our Cookie Policy (below) for more information.

9. Third-Party Links

Our website may contain links to third-party websites such as the secure payment processor. We are not responsible for the privacy practices or content of such sites.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated effective date.

Update: October 2025

10.1 Privacy Policy Update Clause (Analytics and Marketing)

We use the following third-party services to analyze user behavior, understand website performance, and deliver personalized advertising. We only activate these services after you have given your explicit consent via our cookie banner. Our legal basis for processing data with these tools is your consent (Art. 6(1)(a) GDPR).

10.2 Microsoft Clarity (User Behavior Analytics)

Purpose: To understand how visitors interact with our website. This includes Heatmaps (visualizing clicks, taps, and scrolling behavior) and Session Recordings (replaying anonymized user sessions) to identify user experience issues, bugs, and areas for improvement.

Data Collected: Technical and behavioral data such as IP address (anonymized), device/browser information, pages visited, time spent on pages, and non-sensitive interaction data (e.g., mouse movements, clicks).

Data Masking: To protect your privacy, Microsoft Clarity is configured to automatically mask data entered into form fields (such as passwords, email addresses, and payment information) so that this sensitive information is never collected or visible to us.

Data Controller/Processor: Microsoft Ireland Operations Limited (MIOL) acts as a separate data controller in the European Economic Area (EEA), ensuring compliance with GDPR.

International Transfers: Data is stored in the United States and is protected by the EU-US Data Privacy Framework (DPF), which is an approved data transfer safeguard under the GDPR.

10.3 Meta Pixel (Advertising and Measurement)

Purpose: To measure, optimize, and build audiences for advertising campaigns run on Meta platforms (Facebook, Instagram). This allows us to track conversions, ensure our ads are shown to the right audience, and create Custom Audiences for future marketing efforts.

Data Collected: HTTP headers (IP address, browser information), Pixel-specific data (Pixel ID, Meta cookie), button click data, and optional values for conversion tracking. This data can be linked to your Meta profile

Joint Controllership: We and Meta Platforms Ireland Ltd. are considered Joint Controllers for the collection and transmission of this data to Meta. We have entered into a data sharing agreement (Meta’s Controller Addendum) which defines our respective responsibilities.

International Transfers: Data is transferred to Meta servers in the United States and is secured through the EU-US Data Privacy Framework (DPF).

11. Contact Us

If you have any questions about this Privacy Policy or your data, please contact us at:

Email: customersupport@mylevelpillows.com