This Privacy Policy is incorporated by reference into the Helix Sleep, Inc. Terms and Conditions (the “Terms”). The term “Helix,” “we,” and “us” includes Helix Sleep, Inc. and our affiliates and subsidiaries. The Privacy Policy explains how Helix may collect, use and disclose information we obtain through the website (“Site”), our blog, our branded pages, on social media services, or any of the other sites, services, features, content, applications and products we offer in the United States and Canada (collectively, the “Services”). All other terms not defined herein will have the meanings set forth in the Terms.

“Personal Information” means information that alone or when in combination with other information may be used to readily identify, contact, or locate you, such as: name, address, email address, or phone number. We do not consider Personal Information to include information that has been anonymized so that it does not allow a third party to easily identify a specific individual.

When you visit www.helixsleep.com or otherwise use our Services, you are consenting to the collection, transfer, manipulation, storage, disclosure, and other uses of your information as permitted by this Privacy Policy.

The Site Collects Your Information.
We collect Personal Information when you register to use the Site or other Services; use the Site or other Services; and communicate with us. We also collect information, such as anonymous usage statistics, by using cookies, server logs, and other similar technology as you use the Site.

Personal Information Collection. When you purchase a Product, you are given the option to register with the Site. If you do not register, you may checkout as a guest. In any event, when you purchase a Product, you must provide us with Personal Information, such as your name, email address, shipping address, and billing address. In addition, given that we help to customize your Products based on certain of your physical attributes, we will also ask you to provide, among other things, your height, weight, body shape match, age bracket, gender, sleeping preferences and sleeping pains/allergies.

Using the Site. We collect information you post through the Site and other Services, email or other communication. For example, when you interact with other users by posting a review, the Site will collect the information you provide in such submissions, including any Personal Information.

Making Payments. When you make payments through the Site, you may need to provide Personal Information to our third-party payment service provider, Shopify Payments via Stripe, such as your credit card number. Additionally if you choose to use a financing option, another third-party payment service provider, Klarna, Affirm or Zibby, may ask for Personal Information. And if you choose to use another one of our third-party payment options such as Amazon Pay or PayPal, they may ask for Personal Information. For more information on the terms and privacy policies of these third-party payment service providers, please visit their websites directly.

Customer Support. We may collect Personal Information through your communications with our customer-support team. This includes phone calls, live chats, email, and social media.

Cookies, Automatic Data Collection, and Related Technologies. The Site collects and stores information that is generated automatically as you use it, including your preferences and anonymous usage statistics. You should assume that the Site can and will collect and store your on-site behavior such as pages viewed, clicks, etc in additional to information you provide directly.

When you visit the Site, we and our third-party service providers receive and record information on our server logs from your browser, including your IP address, and from cookies and similar technology. Cookies are small text files placed in visitors’ computer browsers to store their preferences. Most browsers allow you to block and delete cookies. However, if you do that, the Site may not work properly.

By using the Site and Services, you are authorizing us to gather, parse, and retain data related
to the provision of the Site and Services.

By using our website, you (the visitor) agree to allow third parties to process your IP address, in order to determine your location for the purpose of currency conversion. You also agree to have that currency stored in a session cookie in your browser (a temporary cookie which gets automatically removed when you close your browser). We do this in order for the selected currency to remain selected and consistent when browsing our website so that the prices can convert to your (the visitor) local currency.

Opt-Out. As noted above, you may stop or restrict the placement of cookies on your computer or remove them from your browser by adjusting your web browser preferences. Please note that cookie-based opt-outs are not effective on mobile applications. However, on many mobile devices, application users may opt out of certain mobile ads via their device settings.

The online advertising industry also provides websites from which you may opt-out of receiving targeted ads from our data partners and our other advertising partners that participate in self-regulatory programs. You can access these, and also learn more about targeted advertising and consumer choice and privacy, at www.networkadvertising.org/managing/opt_out.asp andwww.aboutads.info/choices/. You can also choose not to be included in Google Analytics by contacting us.

To be clear, whether you are using our opt-out or an online industry opt-out, these cookie-based opt-outs must be performed on each device and browser that you wish to have opted-out. For example, if you have opted out on your computer browser, that opt-out will not be effective on your mobile device. You must separately opt out on each device. We hold no liability in the event that you opt-out incorrectly or a dispute arises.

Please note that we do not respond to or honor “do not track” (a/k/a/ DNT) signals or similar mechanisms transmitted by web browsers.

How Helix Uses Your Information.
We use Personal Information to facilitate and improve our services, communicate with you and for marketing purposes.

Internal and Service-Related Usage. We may use and retain any data we collect, including Personal Information and non-personally identifiable information, and share it with third party business partners, to provide and improve our products and services, including the Products we sell and the features, functionality and usability of the Site.

Communications. We may send email to the email address you provide to us to verify your account and for informational and operational purposes, such as account management, customer service, or system maintenance.

Marketing. We may use information, including Personal Information, to facilitate transmittal of information that may be useful, relevant, valuable or otherwise of interest to you (e.g., sharing information with a third-party mattress review site with which we may partner who may seek to communicate with you in an effort to improve our products and services).

Aggregate Data. We may anonymize and aggregate data collected through the Site and use it for any purpose.

Helix May Disclose Your Information.
We may share your information with our third-party service providers; to comply with legal obligations; and to protect and defend our rights and property.

We Use Vendors and Service Providers. We may share any information we receive with vendors and service providers retained in connection with the provision of our products and services, including the Products we sell and the features, functionality and usability of the Site. We contract with various Vendors and Service Providers for services related to our business including, but not limited to, shipping, name and address verification, email distribution, market research, third party advertising, fraud prevention, promotions management, and payment processing. We may share your information, which may include Personal Information, with Vendors and Service Providers in connection with providing you with information, products or services that we think may interest you, and we or such Vendor and Service Provider may contact you about their products and/or services. We take measures to ensure to only share information they need to perform these services and never share credit card information. Additionally, we may share IP address and similar device or other automatically collected information with our Vendors and Service Providers, and as otherwise permitted by this Privacy Policy. We may also share Personal Information, anonymized information, and aggregate information with our Vendors and Service Providers who provide analytics, marketing, fulfillment, fraud detection and prevention and other services, or who may contact you about their products and services. In addition, these Vendors and Service Providers may share with us information about you that they have independently developed or acquired in accordance with their own privacy policies and practices. We may use such information for any purpose permitted by this Privacy Policy. You hereby consent to our sharing of Personal Information with our Vendors and Service Providers for the purposes described above.

Displaying to Other Users. The content you post to the Site, email, or other communication may be displayed on the Site. Other users of the Site may be able to see some information about you, such as your name if you submit a review. We are not responsible for privacy practices of the other users who will view and use the posted information.

Marketing. We may allow access to other data collected by the Site to facilitate transmittal of information that may be useful, relevant, valuable or otherwise of interest to you (e.g., sharing information with a third-party mattress review site with which we may partner who may seek to communicate with you in an effort to improve our products and services).

As Required By Law and Similar Disclosures. We may access, preserve, and disclose your Personal Information, other account information, and content if we believe doing so is required or appropriate to comply with law enforcement requests and legal process, such as a court order or subpoena; respond to your requests; or protect yours’, ours’ or others’ rights, property, or safety.

Merger, Sale, or Other Asset Transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, then your information may be sold or transferred as part of such a transaction as permitted by law and/or contract. The use of your Personal Information following any of the foregoing events should be governed by the provisions of this Privacy Policy in effect at the time such Personal Information was collected.

Security of Your Information.
We take steps to ensure that your information is treated securely and in accordance with this Privacy Policy. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us. We do not accept liability for unintentional disclosure.

By using the Site or providing Personal Information to us, you agree that we may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of the Site. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Site or sending an e-mail to you. You may have a legal right to receive this notice in writing. To receive free written notice of a security breach (or to withdraw your consent from receiving electronic notice), please notify us at info@helixsleep.com.

Children’s Privacy.
We do not knowingly collect information from children under 13 and we do not want it. We will take steps to delete it if we learn we have collected it.

We do not knowingly collect, maintain, or use Personal Information from children under 13 years of age, and no part of the Site is directed to children under the age of 13. If you learn that your child has provided us with Personal Information without your consent, you may alert us at info@helixsleep.com. If we learn that we have collected any Personal Information from children under 13, we will promptly take steps to delete such information and terminate the child’s account.

International Users.
By using the Site, you will transfer data to the United States.

By choosing to visit the Site or otherwise provide information to us, you agree that any dispute over privacy or the terms contained in this Privacy Policy will be governed by the laws of the State of New York, U.S.A., and the adjudication of any disputes arising in connection with Helix or the Site will be in accordance with the Terms, including binding arbitration conducted in a forum located in the State of New York.

If you are visiting from the European Union or other regions with laws governing data collection and use, please note that you are agreeing to the transfer of your information to the United States and processing globally. By providing your information you consent to any transfer and processing in accordance with this Policy.

Update your Information or Pose a Question or Suggestion.
If you would like to update or correct any information that you have provided to us through your use of the Site or otherwise, or if you have suggestions for improving this Privacy Policy, please send an e-mail to info@helixsleep.com.

Changes to Our Privacy Policy and Practices.
We may revise this Privacy Policy, so review it periodically. Posting of Revised Privacy Policy. We will post any adjustments to the Privacy Policy on this web page, and the revised version will be effective when it is posted. If you are concerned about how your information is used, bookmark this page and read this Privacy Policy periodically.

Contact Information
Helix Sleep, Inc.
1123 Broadway, #600
New York, NY 10010
info@helixsleep.com



California Consumer Privacy Act

Last Update:  June 23, 2020

This Notice to California Residents (“CCPA Notice”), provided by Helix Sleep, Inc. (“Helix,” “we,” “us,” or “our”) pursuant to the California Consumer Privacy Act (“CCPA”), applies to natural persons who reside in the State of California (“consumers” or “you”), that visit our website available at https://helixsleep.com/ (the “Website”), purchase products or services from us, or otherwise engage or interact with us. Any terms used herein but not defined shall have the meaning assigned in our Privacy Policy, available at https://helixsleep.com/pages/privacy, or the CCPA, as applicable.   

In the event of any conflict or inconsistency between this CCPA Notice and our Privacy Policy, this CCPA Notice shall control only with respect to the Personal Information (as defined in CCPA) of consumers, their households or devices. If you are located outside of the State of California this CCPA Notice does not apply to you and you should refer to our Privacy Policy. 

 

Categories of Personal Information. Helix has or may have collected and/or received the Categories of Personal Information identified below (with examples) from or about consumers, their households or devices, within the twelve (12) months preceding the Last Update of this CCPA Notice (“Last Update”).  Personal Information does not include (i) publicly available information from government records; (ii) deidentified or aggregated Personal Information; or (iii) information excluded from the CCPA including information regulated by certain sector-specific data protection laws including the Health Insurance Portability and Accountability Act of 1996,  the California Confidentiality of Medical Information Act, the Gramm-Leach-Bliley Act of 1999, and the California Financial Information Privacy Act. 

- Identifiers.  A real name, postal address, online identifier, IP address, email address.

- Categories of Personal Information Listed in Cal. Civ. Code § 1798.80(e)). A name, signature, physical characteristics or description, address, telephone numberbank account number, or any other financial information. Some Personal Information included in this category may overlap with other categories.

- Protected classification characteristics under California or federal law. Age (40 years or older) and gender.

- Commercial Information. Records of products or services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies.

- Internet or other similar network activity. Browsing history, search history, information on a consumer’s interaction with a website, application, or advertisement.

- Inferences. Inferences drawn from any of the information identified above to create a profile about a consumer reflecting the consumer’s preferences and characteristics.

Categories of Sources. We collect the Categories of Personal Information listed above from the following Categories of Sources: (i) directly from consumers (e.g., forms, surveys, responses, or other direct interactions from or with consumers), (ii) indirectly from consumers (e.g., consumer activity online, interactions with our Site and other sites), and (iii) advertising networks. 

Use of Personal Information. We may use or disclose the Personal Information we collect for one or more of the following commercial or business purposes (each, a “Business Purpose”): (i) as set forth in the “How Helix Uses Your Information” section of the Privacy Policy, (ii) for order processing and fulfillment; (iii) for analytics purposes, (iv) to investigate and to manage enquiries, disputes and legal proceedings, (v) to comply with court orders, mandatory dispute resolution determinations and mandatory government authority or law enforcement orders or directions, (vi) as described to you when collecting your Personal Information or as otherwise permissible under the CCPA, (vii) to evaluate or consummate a merger, divestiture, restructuring, reorganization, dissolution, or other sale or transfer of some or all of our assets, whether as a going concern or as part of bankruptcy, liquidation, or similar proceeding, in which Personal Information is among the assets transferred, 

Categories of Recipients. We may share your Personal Information with the following Categories of Third Party Recipients for Business Purposes:

- Service Providers, which include IT and cloud hosting companies, payment and financing providers, transactions reporting providers, customer relationship management, email marketing providers, social media networks, advertising service providers, analytics providers, shipping and distribution, fraud detection and preventions, promotions management, and providers of administrative services

Disclosures of Personal Information for a Business Purpose. In the twelve (12) months preceding the Last Update, we may have disclosed for a Business Purpose the Categories of Personal Information to the Categories of Third Parties set forth in Table I. In the twelve (12) months preceding the Last Update, we have not sold Personal Information.

 

Category of Personal Information | Categories of Recipients with Whom We Share this Personal Information:
Identifiers | Service Providers
Categories of Personal Information Listed in Cal. Civ. Code § 1798.80(e)). | Service Providers
Protected classification characteristics under California or federal law | Service Providers
Commercial Information | Service Providers
Internet Activity Information | Service Providers
Geolocation Data | Service Providers 

                               

The CCPA provides consumers with specific rights regarding their Personal Information. This section describes such rights and explains how to exercise them. 

Right to Know About Personal Information. You have the right to request that we disclose certain information to you about our collection, disclosure, sale and use of your Personal Information. Once we receive and verify your request, we will disclose to you the following (to the extent applicable to your request): 

- Specific pieces of Personal Information we collected about you in the preceding twelve (12) months (also known as a data portability request);

- Categories of Personal Information we collected about you in the preceding twelve (12) months;

- Categories of Sources from which the Personal Information was collected;

- Our Business Purpose for collecting that Personal Information; and

- Categories of Personal Information we disclosed for a Business Purpose and the Categories of Third Party Recipients to whom the Personal Information was disclosed. 

Right to Request Deletion. You have the right to request that we delete any of Personal Information that we collected from you and retained, subject to certain exceptions. Once we receive and verify your request, we will delete (and direct our service providers to delete) your Personal Information from our records, unless an exception applies. 

Exercising Rights to Know or Request Deletion. To exercise the rights to know or request deletion described above, please submit a verifiable consumer request to us by submitting your request by email to info@helixsleep.com. You may only make a verifiable consumer request under the right to know twice within a 12-month period. The verifiable consumer request must: (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information related to you. 

Verification Process. To submit a verifiable consumer request, the consumer may be required to provide up to three data points, which may include additional Personal Information, to enable us to verify the consumer’s identity with the degree of certainty required by the CCPA. We will use Personal Information provided in a verifiable consumer request solely for the purpose of verifying the requestor’s identity or authority to make the request. We or a third party on our behalf may follow up with you to determine whether a request is a verifiable consumer request under applicable law. If we cannot verify your identity or authority to make the request and confirm the Personal Information relates to you, we will deny the consumer request in whole or in part and will not to disclose the information requested or, as applicable, will not delete the information requested. We will respond to any such consumer request with a denial, and will also explain why it has no reasonable method by which it can verify the identity of the requestor.

Response Timing and Format. We will confirm receipt of a verifiable consumer request within then (10) business days of its receipt. We will endeavor to respond to a verifiable consumer request within forty-five (45) calendar days of its receipt. If we require more time, we will notify you of the extension and provide an explanation of the reason for the extension in writing, and we will provide you with a response no later than ninety (90) calendar days of receipt of the request. We will deliver our written response by mail or electronically. Any disclosures we provide will only cover the 12-month period preceding the verifiable consumer request’s receipt. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. We may charge a reasonable fee to process or respond to your verifiable consumer requests if they are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will inform you of the reasons for this decision and provide you with a cost estimate before completing your request.

Right to Opt-Out of the Sale of Personal Information. We do not sell the Personal Information of consumers (including minors under 16 years of age). However, if you are 16 years of age or older, you have the right, at any time, to direct us to not sell your Personal Information (the “right to opt-out”) and if you are under 16 years of age you have the right to opt-in to the sale of your Personal Information. In the twelve (12) months preceding the Last Update, we have not sold Personal Information.

Right to Non-Discrimination. We will not discriminate against you for exercising any of your CCPA rights. We will not (i) deny you products or services, (ii) charge you different prices or rates for products or services, including through granting discounts or other benefits, or imposing penalties (except for financial incentives permitted by the CCPA, see below), (iii) provide you a different level or quality of products or services, and (iv) suggest that you may receive a different price or rate for products or services or a different level or quality of products or services. 

If you submit a request to know or delete your Personal Information through the use of an authorized agent, we may require that you (i) provide the authorized agent written permission to act on your behalf, and (ii) verify their identity directly with us. We may deny a request from an authorized agent that does not submit proof of authorization.

Pursuant to California’s “Shine the Light” law (Civil Code Section § 1798.83), California residents have the right to request certain information regarding our disclosure of Personal Information to third parties for their direct marketing purposes, including the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. 

To make such a request, please send an email to info@helixsleep.com. 

This CCPA Notice is effective as of the date of the Last Update stated at the top of this CCPA Notice.  We may change this CCPA Notice from time to time with or without notice to you. By visiting or accessing the Website, purchasing products or services from us, or otherwise engaging or interacting with us after we make any such changes to this CCPA Notice, you are deemed to have accepted such changes.  Please be aware that, to the extent permitted by applicable law, and without prejudice to the foregoing, our use of your Personal Information is governed by the CCPA Notice in current effect.  Please refer back to this CCPA Notice on a regular basis. 

If you have any questions or comments about this notice, the ways in which we collect and use your information described below and in the CCPA Notice, your choices and rights regarding such use, or wish to exercise your rights under California law, please do not hesitate to contact us at: 

Helix Sleep, Inc.
1123 Broadway, #600
New York, NY 10010
info@helixsleep.com