Legal
Privacy Policy
Last updated: 3 November 2026
Draft policy — under review. If anything here is unclear, please contact us before buying.
Who we are
This website is run by SleeplessNights222. You can contact us through the contact page.
We are the data controller for personal data collected through this website. This policy explains what we collect, why, and your rights under UK GDPR and the Data Protection Act 2018.
What we collect
When you join the email list
Your email address, the page you signed up from, and the date and time you gave consent. We use it to send you the Sleepless Watchlist and occasional emails about new products. Our lawful basis is your consent, which you can withdraw at any time using the unsubscribe link in every email.
When you buy
Purchases are processed by Payhip. Payhip collects your name, email address and payment details to take payment and deliver your download, and shares order details (such as your name, email and what you bought) with us so we can support your order. We never receive your full card details. Payhip acts under its own privacy policy. Our lawful basis is performance of a contract, and legal obligations for tax records.
When you contact us
Whatever you choose to send us, used only to reply to you.
Cookies and analytics
This website does not set advertising or analytics cookies unless you accept them in the cookie banner. If you accept, we may use Google Analytics, the TikTok Pixel and the Meta Pixel to understand how visitors use the site and which products they look at. If you reject, none of these load.
We store your choice in your browser's local storage so we don't ask on every page. Payhip sets its own cookies on its checkout pages.
Who we share data with
- Payhip — checkout, payment and file delivery.
- Our email platform — to store your email address and send you emails.
- Analytics providers listed above — only if you accept cookies.
- Our hosting provider (Vercel) — which processes technical request data to serve the website.
Some of these providers are based outside the UK. Where data is transferred internationally, it is protected by appropriate safeguards such as UK adequacy regulations or standard contractual clauses.
We never sell your personal data.
How long we keep it
Email list data is kept until you unsubscribe. Order records are kept for as long as required for tax and accounting purposes (normally six years in the UK).
Your rights
You can ask to access, correct or delete your personal data, object to or restrict how we use it, ask for a copy in a portable format, and withdraw consent at any time. To make a request, contact us. You also have the right to complain to the Information Commissioner's Office (ico.org.uk).
Changes
We'll update this page if anything changes, and change the date at the top.