Privacy Policy





This Privacy Policy outlines how Pilloway ("we", "us", "our") gathers, processes, retains, and shares your personal data when you access pillowaypillow.com (the "Site") or purchase from us. It also sets out your rights regarding your personal data and contact information for privacy concerns.


We are dedicated to protecting your personal data in compliance with applicable privacy regulations, including the EU General Data Protection Regulation (GDPR), the UK General Data Protection Regulation (UK GDPR), the California Consumer Privacy Act (CCPA), the Australian Privacy Act 1988 and Australian Privacy Principles (APPs), and other relevant data protection laws.


 

1. What Personal Data We Gather


We collect two types of personal data:


Order and Account Details — when you complete or seek to complete a purchase, we obtain your name, billing and delivery address, email, phone number, and payment details. We do not retain complete payment card numbers; these are handled securely by our payment partners.


Device and Browsing Data — when you access our Site, we automatically gather information regarding your device and online activity, including IP address, web browser version, operating system, time zone, pages accessed, search queries leading to our Site, and your engagement with the Site. We collect this data via cookies, log files, web beacons, tags, and pixels.


 

2. How We Gather Your Personal Data


We collect personal data directly from you when you submit an order, set up an account, reach out to our support staff, opt into our email or SMS promotions, or use our Site. We also automatically collect information using cookies and tracking tools as you navigate the Site.


We collect only personal data that is reasonably required for our operations. We do not knowingly collect personal data from anyone under 13 years old.


 

3. How We Process Your Personal Data


We use your personal data for these purposes:



  • Processing and completing your orders, including payment handling, delivery, and sending order receipts and payment records.

  • Reaching out to you regarding your orders, including assistance with customer inquiries and service requests.

  • Sending promotional communications via email or SMS, provided you have agreed or we have a lawful reason to contact you.

  • To identify and assess orders for potential fraud or security concerns.

  • To enhance and refine our Site's performance through data analysis.

  • To deliver personalised ads to you on external platforms based on your browsing activity.

  • To meet our regulatory and legal requirements.


We will not apply your personal information to purposes unrelated to its original collection without your explicit agreement.


 

4. Text and Email Promotions


By entering your mobile number during checkout or completing an opt-in form, you agree to receive SMS communications from us regarding your purchases, incomplete orders, and special offers. Messaging frequency may vary and standard rates for texts and data may be charged. Receiving SMS promotions is optional and does not affect your ability to buy from us.


If you've opted in to receive our email promotions, we'll send you updates on our range and deals. You can remove yourself from email campaigns at any time via the unsubscribe option in each message, or exit SMS by texting STOP in response to any text. Alternatively, you can contact contact@pillowaypillow.com to opt out. Once you unsubscribe, you'll continue receiving order-related communications for ongoing purchases.


We do not share or trade your contact information with external businesses for their promotional activities.


 

5. Tracking Methods and Cookies


We employ cookies and similar tracking methods to enhance how you interact with our Site, monitor usage patterns, and display personalised ads. These consist of:



  • Essential cookies — required to keep the Site operating, including cart and session functionality.

  • Analytics cookies — help us learn how users navigate and interact with our Site.

  • Advertising and marketing pixels — deployed by platforms like Meta (Facebook/Instagram), Google, TikTok, and Snapchat to present you with ads matched to your online browsing patterns.


Our cookie consent banner lets you adjust your cookie settings when you access the Site. Alternatively, you may turn off cookies through your browser configuration, though doing so could impact how the Site functions for you.


 

6. Which Third Parties Receive Your Personal Data


Your personal data is shared with reliable partners who assist us in running our operations. These partners typically include:



  • Shopify — the platform we use for online retail.

  • Marketing communication platforms — email and SMS services for distributing promotional messages.

  • Site analytics services — including Google Analytics, to measure and improve how our website performs.

  • Advertising networks — such as Meta, Google, TikTok, and Snapchat, to deliver personalized ads.

  • Transaction processors — including Visa, Mastercard, PayPal, Apple Pay, and comparable services, to handle payments safely.

  • Logistics and order fulfillment services — to get your purchases to you.


We may also release your personal data when the law requires it, following a lawful legal demand, or to defend our legal interests. We do not commercially sell your personal data to other parties.


 

7. Cross-Border Information Transfers


Your personal data could be moved to, kept, and handled in regions outside where you live, including places with different privacy safeguards. When we move data across borders, we implement suitable protections to make sure it receives the same privacy treatment as outlined in this policy and required by law.


 

8. Data Security


We implement suitable precautions to defend your personal data against loss, theft, unauthorized viewing, and changes. The Site employs SSL (Secure Socket Layer) technology to encrypt every purchase. Payment details go through PCI-DSS certified vendors and stay off our servers.


Should we find evidence of a data incident likely to cause significant impact, we will alert the people affected and notify applicable regulatory bodies under the terms of applicable law.


 

9. Data Retention


Your personal information is kept for the duration needed to deliver our services, satisfy legal requirements, handle disputes, and uphold contractual terms. Once information is no longer necessary, we implement reasonable measures to eliminate or anonymize it.


 

10. Your Rights


Your jurisdiction may grant you the following options regarding the personal information we maintain:



  • Right of access — you may request the personal data we store concerning you.

  • Right to rectification — you may request that we correct false or incomplete personal data.

  • Right to erasure — you may request that we remove your personal data, unless we have legal duties to preserve it.

  • Right to object — you may decline our use of your personal data for promotional communications whenever you choose.

  • Right to portability — under certain conditions, you may request your data returned in a portable format.

  • Right to revoke consent — if we base our processing on your consent, you may revoke it at any moment.


To invoke any of these rights, reach out to us via contact@pillowaypillow.com. Our response time is within 30 days. We may require proof of identity to grant your request.


Residents of the UK and EU are granted additional protections under the UK GDPR and EU GDPR, such as filing complaints with their regional data protection authority. Those in California enjoy protections under the CCPA, including the ability to request what information we gather and to decline the sale of personal data — we do not engage in selling personal information. Those in Australia are covered under the Privacy Act 1988 and Australian Privacy Principles.


 

11. Complaints


If you believe we have mishandled your personal information, contact us initially at contact@pillowaypillow.com. We will examine the matter and provide our response within 30 days. Should our response not resolve your concern, you can escalate to your local data protection authority.


 

12. Changes to This Policy


This Privacy Policy may be revised periodically. We will refresh this page when modifications are made. We recommend checking this policy on a regular basis. Your continued engagement with our Site following any revisions indicates your agreement with the modified policy.


 

13. Contact Us


Should you have inquiries regarding this Privacy Policy or our data handling practices, please get in touch with our team at contact@pillowaypillow.com. We typically respond within 1 business day.


Pilloway · contact@pillowaypillow.com · pillowaypillow.com