1. Introduction
SleepScorePro is committed to protecting and respecting your privacy in accordance with the General Data Protection Regulation (GDPR) (EU) 2016/679 and the UK GDPR (as retained in UK law by the European Union (Withdrawal) Act 2018). This policy explains your rights as a data subject and how we process your personal data.
2. Who We Are (Data Controller)
SleepScorePro operates as the data controller for personal data collected through this website. We are not a medical organisation. We are an independent educational sleep awareness platform.
Contact: contact[at]sleepscorepro.com
3. Legal Basis for Processing
We process personal data under the following legal bases:
- Consent (Article 6(1)(a)): For analytics cookies, email marketing communications, and newsletter subscriptions. You can withdraw consent at any time.
- Legitimate interests (Article 6(1)(f)): For security logging, fraud prevention, and technical operation of the platform.
- Contract performance (Article 6(1)(b)): For responding to contact form submissions and enquiries.
4. What Personal Data We Collect
- Contact form data: Name, email address, message content when you use our contact form.
- Email subscribers: Email address, name (optional), and sleep score data you choose to share when subscribing to our newsletter.
- Analytics data (with consent): Anonymised usage data via Google Analytics 4 - pages visited, general geographic region, browser type. IP addresses are anonymised. We do not collect personally identifiable analytics data.
- Sleep tool data: Sleep data entered into our calculators (bedtime, sleep hours, etc.) is processed entirely in your browser and stored in localStorage. It is never transmitted to our servers.
5. Your Rights Under GDPR
As a data subject under the GDPR, you have the following rights:
Right of Access (Article 15)
Request a copy of all personal data we hold about you.
Right to Rectification (Article 16)
Request correction of inaccurate or incomplete personal data.
Right to Erasure (Article 17)
"Right to be forgotten" - request deletion of your personal data.
Right to Restriction of Processing (Article 18)
Request that we limit how we use your data in certain circumstances.
Right to Data Portability (Article 20)
Receive your personal data in a structured, machine-readable format.
Right to Object (Article 21)
Object to processing based on legitimate interests or for direct marketing.
Right to Withdraw Consent (Article 7(3))
Withdraw consent at any time where processing is based on consent.
Right to Lodge a Complaint
File a complaint with your national data protection authority.
To exercise any of these rights, email us at contact[at]sleepscorepro.com. We will respond within 30 days.
6. Data Retention
- Contact form submissions: retained for 24 months, then permanently deleted.
- Email subscribers: retained until you unsubscribe or request deletion.
- Analytics data: retained per Google Analytics 4 default policy (14 months for user and event data).
7. International Data Transfers
We use Google Analytics 4 and email service infrastructure that may transfer data outside the EEA (including to the United States). Such transfers are subject to appropriate safeguards including Standard Contractual Clauses (SCCs) as approved by the European Commission.
8. Cookies and Consent
We use a cookie consent banner that gives you granular control over analytical and marketing cookies. Essential cookies required for the site to function cannot be disabled. Our Cookie Policy provides full details.
9. Children's Data
Our services are not directed at children under 16 years of age. We do not knowingly collect personal data from children under 16. If you believe we have inadvertently collected such data, please contact us immediately.
10. Data Protection Authority
If you are located in the EU/EEA and believe your GDPR rights have been violated, you have the right to lodge a complaint with your local data protection authority. A list of EU data protection authorities is available at edpb.europa.eu. UK residents may contact the Information Commissioner's Office (ICO) at ico.org.uk.
11. Updates to This Policy
We may update this GDPR Policy from time to time. The date at the top of the page indicates the most recent update. Material changes will be communicated via a notice on our website.
12. Contact
For GDPR-related enquiries: contact[at]sleepscorepro.com