What we hold close.

When you order or sign in, we collect:

• Identity — your name and email address
• Order details — shipping address, phone number, items ordered
• Account — a password hash (we never see your actual password)
• Payment — collected and stored by Stripe, never by us. We see only the last four digits, card brand, and a transaction reference.
• Health screening — your yes/no answers to our three-question safety screening are stored only on your device (browser localStorage). They are not transmitted to or stored on our servers.

• To fulfill, ship, and support your order
• To send transactional emails (order confirmation, shipping updates)
• To honour returns, refunds, and warranty claims
• To comply with tax and accounting obligations
• If you opt in: to send occasional new-product or restock emails

We share data only with the service providers needed to run the business:

• Stripe — payments processor
• USPS / UPS / FedEx — shipping carriers
• Resend (or equivalent) — transactional email
• Cloudflare — DNS, security, content delivery

We do not sell, rent, or otherwise share your personal information with marketers.

The site uses essential first-party cookies to keep you signed in and to remember your cart. We do not use third-party advertising cookies. If we add analytics in the future, we will use a privacy-respecting service (Plausible, Fathom) and update this page first.

You may at any time:

• Request a copy of the personal data we hold on you
• Request correction or deletion of your data
• Withdraw consent for any marketing email
• Lodge a complaint with your local data-protection authority (e.g. ICO in the UK, CNIL in France, state Attorneys General in the US)

To exercise any of these rights, write to sales@essentialspillow.com. We respond within 30 days.

ESSENTIALS does not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal information, write to sales@essentialspillow.com and we'll delete it.

We retain order records for 7 years to satisfy tax and accounting law. Account data is retained until you ask us to delete it. Health-screening answers, as noted above, never leave your device.

If we materially change this policy we will update the “last updated” date below and, where required by law, notify you by email.