Skip to main content
SleepyHumanStudio

legal

Privacy Policy

Last updated: April 26, 2026

Sleepy Human Studio (“we”, “us”) operates www.sleepyhumanstudio.com. This Privacy Policy explains what personal information we collect, how we use it, and the choices you have. We comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA).

Information we collect

  • Account info: name and email address when you create an account.
  • Order info: shipping address, items purchased, order total. Payment details are handled directly by Stripe; we never see or store your full card number.
  • Communication: messages you send via the contact or custom-request forms.
  • Newsletter: your email address if you opt in.
  • Technical: basic log data (IP, browser, pages viewed) to keep the site secure and working.

How we use it

  • To process and ship your order.
  • To send order confirmations, tracking, and customer service replies.
  • To send the newsletter (only if you opted in — you can unsubscribe any time).
  • To detect and prevent fraud or abuse.
  • To meet legal and tax obligations.

Who we share with

We share only what’s necessary, and only with these processors:

  • Stripe — payment processing.
  • Shippo — carrier rate quotes and shipping labels.
  • Supabase — database and authentication.
  • Vercel — web hosting.
  • Resend — transactional email delivery.
  • Google Places — address autocomplete.

We do not sell your personal information.

Cookies

We use a small number of essential cookies for authentication and cart functionality. We do not use advertising or cross-site tracking cookies.

Your rights

You can:

  • Request a copy of the personal information we hold about you.
  • Ask us to correct anything that’s wrong.
  • Ask us to delete your account and associated data (orders may be retained for tax/legal reasons).
  • Withdraw consent for the newsletter at any time.

Email sleepyhumanstudio@gmail.com and we’ll get back to you within 30 days.

Retention

Order and tax records are kept for the period required by Canadian law (typically six years). Newsletter records are kept until you unsubscribe.

Security

We use industry-standard encryption in transit (HTTPS) and at rest, and access controls on our database. No system is perfectly secure, but we take reasonable steps to protect your data.

Contact

Questions about this policy? Email sleepyhumanstudio@gmail.com.