Privacy policy

In this policy, asleep, we, us, or our means asleep, the operator of asleep.lt and the controller of the personal data processed through it.

For any privacy question, to exercise your rights, or to withdraw consent, email info@asleep.lt or use our contact page.

Depending on how you use the website, we may process:

• identity and contact data – your first and last name, email address, and telephone number;
• order and delivery data – shipping and billing address, city, postcode, country, selected products, quantities, prices, discount code, and order status;
• payment data – payment method, payment status, and transaction identifiers. We do not receive or store your complete payment card details; these are handled securely by the payment service provider;
• communications data – the content of your messages, enquiries, reviews, and correspondence with us;
• marketing data – newsletter subscription, consent and withdrawal records, and interactions with our communications;
• technical and usage data – IP address, browser and device information, language, approximate location, pages visited, referral source, actions on the website, cookies, and other online identifiers;
• security data – server logs, request times, and information needed to detect abuse, fraud, or technical issues.

Please do not provide more personal data than is necessary for the relevant purpose.

We receive data directly from you when you complete a form, begin checkout, place an order, contact us, or subscribe to updates. Technical and usage data may be collected automatically from your device through cookies and similar technologies. We may also receive a payment confirmation from a payment service provider or delivery status from a delivery partner.

We process personal data for the following purposes and on the following legal bases:

• to answer enquiries, provide a quotation, accept and fulfil an order, deliver products, and administer payments, returns, or warranties – to take steps at your request before entering into a contract or to perform a contract;
• to maintain accounting records and comply with tax, consumer protection, and other legal requirements – to comply with a legal obligation;
• to secure the website, prevent fraud, diagnose faults, improve our services, and establish or defend legal claims – based on our legitimate interests in operating safely and effectively;
• to send newsletters and personalised marketing communications – based on your consent where consent is required by law. You may withdraw consent at any time;
• to measure website usage and advertising effectiveness – based on your consent where required for cookies or similar technologies;
• for other purposes explained to you when the data is collected, based on the legal basis stated at that time.

If you do not provide data required to enter into or perform a contract, we may be unable to provide the relevant service. Data used for marketing or non-essential analytics is optional.

The website may use essential cookies needed for the shopping cart, language selection, security, and other core functions. With consent where required, we may also use analytics and marketing technologies, including PostHog, Google Analytics, and Meta tools. These services may set cookies or similar identifiers and receive information about your device and activity on the website.

You can change your non-essential cookie choices through the cookie settings displayed on the website, where available, or through your browser. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal. Blocking essential cookies in your browser may prevent some website features from working.

We disclose only the personal data necessary for the stated purposes to the following categories of recipients:

• website hosting, infrastructure, security, and technical support providers;
• our payment service provider, Stripe;
• our customer and subscriber data management provider, Airtable;
• our email delivery provider, Resend;
• delivery, warehousing, and customer support partners;
• analytics and advertising providers such as PostHog, Google, and Meta when the relevant tools are enabled;
• accountants, auditors, legal advisers, insurers, and other professional advisers;
• public authorities, courts, or law enforcement where disclosure is required by law or necessary to protect our rights or those of others.

We do not sell personal data. Service providers may process data only under a contract and our instructions, or as independent controllers where this follows from the service they provide and applicable law.

Some service providers may process data outside the European Economic Area. In those cases, we rely on a European Commission adequacy decision, Standard Contractual Clauses, or another safeguard permitted by the GDPR. You may request information about safeguards used for a particular transfer by emailing info@asleep.lt.

We keep personal data only for as long as needed for the purpose for which it was collected or as required by law. We generally apply the following principles:

• order, payment, invoice, and accounting data is kept for the period required by applicable law;
• customer service enquiries and correspondence are normally kept for up to 2 years after the matter is resolved, unless needed longer to perform a contract or address legal claims;
• newsletter and marketing data is kept until consent is withdrawn or for no longer than 2 years after the last active interaction, unless the law requires otherwise;
• reviews are kept while published or until you ask us to remove them, unless we have a lawful reason to retain them longer;
• technical and security logs are normally kept for up to 12 months;
• analytics and cookie retention depends on the settings of the relevant tool and the lifetime of each cookie.

At the end of the retention period, we delete or irreversibly anonymise the data unless it must be retained for an ongoing dispute, investigation, or legal obligation.

We use reasonable technical and organisational measures designed to protect personal data against unauthorised access, alteration, disclosure, loss, or destruction. Access is limited to people and service providers who need the data to carry out their duties. However, no method of transmission or storage can guarantee absolute security.

Under the GDPR and other applicable law, and depending on the circumstances, you have the right to:

• receive information about processing and access your personal data;
• correct inaccurate data and complete incomplete data;
• request deletion of your personal data;
• restrict the processing of your personal data;
• object to processing based on legitimate interests and object to direct marketing at any time;
• receive data you provided in a structured, commonly used, machine-readable format and, where applicable, transmit it to another controller;
• withdraw consent at any time;
• not be subject to a decision based solely on automated processing that produces legal or similarly significant effects.

To exercise your rights, email info@asleep.lt. We may ask for information needed to verify your identity before acting on a request. We will respond to a valid request without undue delay and normally within one month.

If you believe your data has been processed unlawfully, you may also lodge a complaint with the Lithuanian State Data Protection Inspectorate at vdai.lrv.lt or with the supervisory authority in the EU country where you live or work.

The website is not intended for children under 16 to use our services independently. We do not knowingly collect children's personal data without appropriate involvement from a parent or guardian. If you believe a child has provided data to us improperly, please contact us.

The website may link to third-party websites or services. We are not responsible for their content or privacy practices, so we recommend reading the privacy information of every website you visit.

We may update this privacy policy when the website, our activities, or applicable law changes. The latest version will always be published on this page with its revision date. Where required, we will provide additional notice of material changes.