At National Sleep Center, we are committed to protecting the privacy and personal data of our users in compliance with the General Data Protection Regulation (GDPR) (EU) 2016/679. This policy outlines how we collect, use, store, and protect your personal information when you interact with our website: https://www.nationalsleepcenter.com.
1. Who This Policy Applies To
This policy applies to all users who access our website from the European Economic Area (EEA) or who are otherwise subject to the GDPR.
2. Lawful Basis for Processing
We only collect and process personal data where we have a lawful basis to do so. This includes:
Consent: When you voluntarily provide data (e.g., subscribing to a newsletter).
Contract: To fulfill an order or respond to inquiries.
Legal Obligation: Where required by law.
Legitimate Interest: To improve website functionality and user experience, where your rights are not overridden.
3. Personal Data We Collect
We may collect the following types of data:
Identifying Information: Name, email address, etc.
Technical Data: IP address, browser type, device type, cookies.
Usage Data: Pages visited, time spent on the site, interaction data.
4. How We Use Your Data
We use your personal data to:
Provide and improve our services
Respond to your inquiries and requests
Send updates, offers, or newsletters (with your consent)
Analyze site usage and performance
Maintain website security and functionality
5. Data Storage and Retention
We retain personal data only for as long as necessary to fulfill the purposes outlined in this policy or as required by law. Data is securely stored and protected against unauthorized access, disclosure, alteration, or destruction.
6. Your Rights Under GDPR
Under the GDPR, you have the right to:
Access your personal data
Rectify inaccurate or incomplete data
Erase your data (“right to be forgotten”)
Restrict or object to processing
Data portability – receive a copy of your data in a portable format
Withdraw consent at any time, without affecting the lawfulness of prior processing
Lodge a complaint with a supervisory authority
To exercise any of your rights, please use the contact form on our website.
7. Data Sharing
We do not sell or rent your personal data. We may share data with:
Trusted service providers (e.g., payment processors, analytics tools) under strict data protection agreements.
Regulatory bodies or law enforcement, when required by law.
8. Cookies and Tracking
We use cookies and similar technologies to improve site performance and user experience. You can manage your cookie preferences through your browser settings or our cookie banner when visiting the site.
For more information, please see our [Cookie Policy].
9. International Data Transfers
If we transfer personal data outside the EEA, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses (SCCs) or other GDPR-compliant mechanisms.
10. Policy Updates
We may update this GDPR Policy from time to time. Changes will be posted on this page with the updated effective date. Continued use of the website constitutes your acceptance of any changes.