Privacy Policy

Last updated: October 4, 2026

This Privacy Policy explains how Sleep Community (sleep-community.org) collects, uses, and protects your personal data when you visit or interact with this website. Sleep Community is an independent reader community covering sleep improvement, product reviews, routines, and health-related insights.

We are committed to protecting your privacy and handling your data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and all applicable data protection laws.

1. Data Controller

The entity responsible for processing your personal data is:

For any questions, requests, or concerns regarding this Privacy Policy or your personal data, please contact us using the details above.

2. Data We Collect

Depending on how you use our website, we may collect the following categories of personal data:

• Usage data: IP address, browser type, operating system, referring URLs, pages visited, time and date of your visit, and duration of page views.
• Device data: Device type, screen resolution, and language settings.
• Cookie data: Identifiers stored on your device via cookies or similar tracking technologies (see Section 5).
• Communication data: If you contact us by email, we process the information you provide in that correspondence (e.g., your email address, name, and message content).
• Voluntarily submitted data: Any information you actively provide through forms or community features, such as comments or subscriptions.

We do not intentionally collect sensitive personal data (special categories under Article 9 GDPR) unless explicitly provided by you with your consent.

3. Legal Basis for Processing

We process your personal data on the following legal grounds as defined by Article 6 GDPR:

• Consent (Art. 6(1)(a) GDPR): Where you have actively given consent, for example by accepting cookies or subscribing to communications. You may withdraw consent at any time.
• Legitimate interests (Art. 6(1)(f) GDPR): For operating the website, ensuring technical security, preventing fraud, analysing how visitors use the site to improve content, and serving contextually relevant editorial material. These interests do not override your fundamental rights and freedoms.
• Legal obligation (Art. 6(1)(c) GDPR): Where we are required to retain or disclose data to comply with applicable law.
• Contract performance (Art. 6(1)(b) GDPR): If you use interactive features that constitute or relate to a contractual relationship with us.

4. Purposes of Processing

We use your personal data for the following purposes:

• Providing, operating, and maintaining the website and its content.
• Analysing website traffic and user behaviour to improve the reader experience.
• Displaying relevant advertising or sponsored content (via third-party partners, see Section 7).
• Ensuring the technical security and integrity of our systems.
• Responding to your enquiries or support requests.
• Complying with legal obligations.
• Sending newsletters or updates, where you have subscribed and given your consent.

5. Cookies and Tracking Technologies

Sleep Community uses cookies and similar technologies (e.g., pixels, local storage) to improve your browsing experience, analyse site traffic, and support advertising functionality.

Types of cookies we use:

• Strictly necessary cookies: Required for the website to function correctly. These cannot be disabled.
• Analytics cookies: Help us understand how visitors interact with the site (e.g., pages visited, time on site). Data is typically aggregated and anonymised.
• Preference cookies: Store your settings and preferences (e.g., language, cookie consent status).
• Marketing and advertising cookies: Used by third-party partners to deliver targeted advertisements and measure campaign performance. These cookies may track you across different websites.

Managing cookies:

When you first visit the website, you will be presented with a cookie consent banner. You may accept all cookies, reject non-essential cookies, or customise your preferences. You can change your cookie settings at any time via the consent manager accessible on the site.

You may also control cookies through your browser settings. Please note that disabling certain cookies may affect the functionality of the website. For more information on managing cookies, visit www.allaboutcookies.org.

6. Hosting and Technical Infrastructure

Our website is hosted by external service providers (hosting companies). When you visit our website, your IP address and technical connection data are transmitted to and processed by our hosting provider's servers. This is technically necessary to deliver the website to your device.

Hosting is carried out on the basis of our legitimate interests in the reliable and secure operation of the website (Art. 6(1)(f) GDPR). Where applicable, we have entered into data processing agreements with our hosting providers in accordance with Art. 28 GDPR.

SSL / TLS Encryption

This website uses SSL/TLS encryption for all data transmitted between your browser and our servers. You can identify an encrypted connection by the https:// prefix and the padlock icon in your browser's address bar. Encrypted transmission ensures that data you send to us — including any personal information — cannot be read by unauthorised third parties.

7. Third-Party Services and Data Sharing

We may share your data with selected third parties where necessary to operate the website and deliver our services. Categories of recipients include:

• Hosting and infrastructure providers: To host and maintain the website and its technical components.
• Analytics providers: To collect and analyse usage statistics. Data may be pseudonymised or anonymised where technically possible.
• Advertising technology partners: To serve, measure, and optimise advertisements displayed on the site. These partners may set their own cookies and process data in accordance with their own privacy policies.
• Email service providers: If you subscribe to our newsletter, your email address and related data are processed by our email delivery platform.
• Legal and regulatory authorities: Where we are legally required to disclose personal data.

We do not sell your personal data. We do not share your data with third parties for their own marketing purposes without your explicit consent.

International Data Transfers

Some of our third-party service providers may be located outside the European Economic Area (EEA). Where personal data is transferred to countries not deemed adequate by the European Commission, we ensure that appropriate safeguards are in place — such as Standard Contractual Clauses (SCCs) adopted by the European Commission (Art. 46 GDPR) — to protect your data.

8. Data Retention

We retain your personal data only for as long as necessary to fulfil the purposes outlined in this Privacy Policy, or as required by applicable law. Specifically:

• Server log data (including IP addresses) is typically retained for a maximum of 30 days unless longer retention is required for security or legal reasons.
• Cookie and analytics data is retained in accordance with the cookie lifetime defined at the time of consent, generally between 30 days and 24 months.
• Email correspondence is retained for as long as necessary to handle your enquiry and for a reasonable period thereafter.
• Newsletter subscriptions are retained until you unsubscribe or withdraw consent.

Once data is no longer needed, it is securely deleted or anonymised.

9. Your Data Subject Rights

Under the GDPR, you have the following rights regarding your personal data:

• Right of access (Art. 15 GDPR): You may request a copy of the personal data we hold about you.
• Right to rectification (Art. 16 GDPR): You may request that inaccurate or incomplete data be corrected.
• Right to erasure (Art. 17 GDPR): You may request deletion of your personal data under certain conditions ("right to be forgotten").
• Right to restriction of processing (Art. 18 GDPR): You may request that we restrict the processing of your data in certain circumstances.
• Right to data portability (Art. 20 GDPR): You may request that we provide your data in a structured, machine-readable format or transfer it to another controller.
• Right to object (Art. 21 GDPR): You may object to processing based on legitimate interests or for direct marketing purposes at any time.
• Right to withdraw consent (Art. 7(3) GDPR): Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
• Right not to be subject to automated decision-making (Art. 22 GDPR): You have the right not to be subject to decisions based solely on automated processing that produce significant legal or similar effects on you.

To exercise any of these rights, please contact us at: hello@trustedinsightslimited.com

We will respond to your request within 30 days. We may need to verify your identity before processing your request.

Right to Lodge a Complaint

If you believe that the processing of your personal data violates the GDPR, you have the right to lodge a complaint with a supervisory authority. You may contact the data protection authority in your country