Casper Sleep Website Privacy and Cookies Policy

Effective Date of Current Policy: 24 May 2018

Last Updated Date of Current Policy: 12 February 2019

This is the Privacy and Cookies Policy for https://casper.com/uk/en/ (the "Site"), device applications (the "Apps"), products, services and other offerings owned and operated by Casper (collectively with the Site and the App (our "Products"). https://casper.com/uk/en/ is operated by Casper Sleep Inc. , with principal place of business at 175 Greenwich St., Floor 39, New York, NY 10007.

The term “Casper,” “we,” “us” and "our" includes Casper Sleep Inc ,Casper Sleep (UK) Limited with registered address 5 New Street Square, London EC4A 3TW, United Kingdom and registered company number 10049954 and is registered with the Information Commissioner's Office and Casper Sleep GmbH, Dircksenstraße 47, 10178 Berlin, Germany.

Our Privacy and Cookies Policy explains how Casper may:

• collect,
• use, and
• disclose

Personal Information about you. In this Privacy and Cookies Policy “Personal Information” means information that alone or when in combination with other information may be used to identify or deliver our content to you, such as: name, address, email address, IP address (the unique address which identifies your device on the internet) or phone number. We do not consider Personal Information to include information that has been anonymized in such a way that you can no longer be identified.

Changes to our Privacy and Cookies Policy and practices

Posting of Revised Privacy and Cookies Policy.  We will post any adjustments to the Privacy and Cookies Policy on this web page, and the revised version will be effective when it is posted. If you are concerned about how your information is used, bookmark this page and read this Privacy and Cookies Policy periodically. You can see when the latest version of our Privacy and Cookies Policy was posted at the top of the page.

New uses of Personal Information.  If our practices change regarding previously collected Personal Information in a way that would affect the original purpose for which we collected your Personal Information, we will provide notice where required by law.

Our Products collect your information

We collect Personal Information from you such as:

• Name
• Email address
• Delivery address
• Billing address
• Phone
• purchase information
• IP address
• Log in credentials
• Gender
• Age
• Browser information
• Location data
• Survey Information (which is provided voluntarily)

We collect Personal Information when you choose to provide it to us including when you:

• use the Site or the Apps;
• register with us on the Site or the Apps;
• order products from us;
• participate in our Referral Programme;
• interact with us on our social media pages; and
• communicate with us.

We also collect Personal Information, by using cookies, pixels, server logs, and other similar technology as you use the Site and the Apps. Where we use third party cookie providers, such providers may also receive this Personal Information. When you visit the Site or the Apps, we may automatically collect additional information about you, such as the type of internet browser you use, the website which you have come to the Site from which is automatically recognised by our web server. This helps us in providing an effective service for our Products and to collect broad demographic information for aggregate use and is used to help deliver our content to you online and also help others to tailor content you might see online. Please see the cookies section below.

How Casper uses your information

Personal Information collection. When you purchase a Mattress or other products from us, you are given the option to register with us. If you do not register, you may checkout as a guest. In any event, when you purchase a Mattress or other products from us, you will need to provide us with Personal Information, such as your name, email address, and address in order for us to process your order and payment and deliver your purchase in accordance with our obligations set out in our Terms of Supply. Without this information we won't be able to process your order. When you are completing your order, the information you are required to give in order for us to fulfil your order will marked as required with a *. You may also create an account with us, without making a purchase. If you choose to do this, you will be providing information directly to us; it will be subject to the Site's or the App's (as appropriate) terms of use and this privacy policy. We need to collect this information in order to allow you to create an account, in accordance with the terms of use and this privacy policy.

Using the Site and App. We collect information about how you use the Site and the App and engage with communications we send you. It is in our legitimate business interests to collect information about how you use our Site and our Apps in order for us to ensure the SIte and Apps provide the relevant services to visitors and so we can track how our business is doing. We are always careful to balance our interests with your privacy rights and if you have any further questions on this, please do let us know. We'll also collect any information you post to the Site or the App (as appropriate). For example, when you post a review, the Site and Apps will collect the information you provide in such submissions, including any Personal Information. If you choose to submit content to any public area of the Site, such content will be considered “public” and we do not have control on how others may use this information. It's also in our legitimate business interests to collect reviews from our customers (if they wish to provide such information) so that we can understand feedback on our products and services to improve these overtime and so that other customers can also see understand feedback on our product. We always consider our interests alongside your privacy rights and we make sure your privacy rights are respected.

Internal and service-related usage. We use information, including Personal Information, for internal and service-related purposes only and may provide it to third parties to allow us to facilitate our Products. We may use and retain (as set out below) any data we collect to provide and improve our services. We may also use such data pursuant to the cookies section set out below, to help us deliver targeted advertising to consumers, to analyze interactions with and performance of our Products, measure the effectiveness of advertising on behalf of our advertising partners, and to identify the audience most likely to respond to an advertisement. If we work with third parties in order to deliver adverts and /or analyse how customers interact with our Site or App, some of the data collected through our Site or App and through these adverts may be shared with those third parties. We may also share this data with our affiliate companies. Similarly, we may also enhance the data we collect from our Proucts with data collected through the third parties with which we work. We believe that the use of such information is helpful to providing users with better and more personal services on our site and throughout the online experience, and further, we feel it is in our legitimate business interests to collect and process this information. Of course, your privacy rights are important to us and for some of these features, you have a right to opt-out, please see our cookies policy below for further information on this.

Some of our products collect information when you use them.

When you use our Glow light device (the “Glow”) and accompanying application, we receive information about how you use Glow, like when you turn it on, off, or change the brightness setting; your device type; and information about the light levels in the room you’re in to provide the right light settings (collectively, “Glow Usage Data”). We use this information to understand how our users interact with the Glow product and application so we can make them better.

Service Communications with us. We may also collect Personal Information from you when you choose to communicate with us. For example, you may choose to send us Personal Information in an email to us, by calling our customer service department, when signing up for an account or other service. We may send emails to the email address you provide to us to verify your account and for informational and operational purposes, such as account management, customer service, or system maintenance. By providing your email address to us either through account sign up or emailing us directly, you understand that we may respond to you via email. Depending on the reasons why you communicated with us, we may respond to a specific service request under our Terms of Supply or Terms of Use (or to progress a sale) and so we need to respond to comply with our obligations. Alternatively, it may be in our legitimate interests to respond to your email to ensure we are responsive in meeting your requests. If you contact us, we may keep a record of that correspondence as set out below.

Marketing Communications with us. Where we have your consent to do so, including where you elect to sign up for promotional updates by giving your email address to us or where you have selected a box indicating you wish to receive these, we may use email to tell you about our other products and services developed or provided by us and information which we think may be of interest to you. We will not give your email address to another party to promote their products or services by sending marketing emails directly to you without your consent.

Marketing opt-out. If you chose to receive emails from us at the time we collect your information or otherwise offer you a chance to opt-in but later decide you'd like to change your preferences you can use the unsubscribe link found at the bottom of the email to opt out of receiving future emails or contact us at any time with such request (please see our contact information below). We will process your request within a reasonable time after receipt. To be clear, where you have purchased a product from us, created an account with us or if you contact us about your purchase, we will communicate with you in relation to this in order or account to address your comments and queries even if you have opted out of marketing emails.

Surveys. From time to time, we may contact you to participate in online surveys. If you do decide to participate, you may be asked to provide certain information which may include Personal Information. Specifically, you may be asked to provide contact information as well as information about your height, weight, gender, date of birth, the number of children you have, whether you sleep alone or with a partner, and other information we may request in connection with our surveys. All information collected from your participation in our surveys is provided by you voluntarily with your consent. We may use such information to improve our Products and/or services and in any manner consistent with the policies provided herein, to pursue our legitimate business interests of understanding our customers and their feedback on our products more. We continue to respect your privacy rights where we pursue our legitimate business interests too.

Payment processing

Credit or Debit Card Payments. When you make payments through the Site using a credit or debit card, you will need to provide Personal Information to our third-party service providers, such as your credit card number. Credit and debit card payments made on the Site are made through our payment gateway provider, Adyen. You will be providing credit or debit card information directly to Adyen. Information which you supply to Adyen is not within our control and is subject to Adyen’s own privacy policy which is available here.

We do not store credit card numbers.

Paypal (Braintree). You can also make a payment through Paypal's payment gateway, Braintree. Paypal will receive your email address, shipping address and details of the items you purchased from us. Information which is supplied to Braintree is not within our control and is subject to Paypal's privacy policy which can be found here

Klarna. In cooperation with Klarna Bank AB (publ), Sveavägen 46, 111 34 Stockholm, Sweden, we offer you the following payment options. Payment is to be made to Klarna:

• Pay later.
• Financing.

Further information and Klarnas user terms you can find here. General information on Klarna you can find here. Your personal data is handled in accordance with applicable data protection law and in accordance with the information in Klarnas privacy statement.

Cookies and other ways we collect data from your browser or device

Cookies, automatic data collection, and related technologies. Cookies, automatic data collection, and related technologies. Some of our Products collect and stores information that is generated automatically as you use it, including your preferences and usage statistics. This will include the information about the device you are using when you access the Site or Apps and where you access the Site or Apps from. If you browse the Site but don't make a purchase or register for an account with us, a later stage, should you wish to make a purchase, register an account with us or otherwise interact with us where we collect your Personal Information, we may be able to associate the visits you made to Site previously and with details of the products you have viewed or purchased from us before. We think this helps deliver a personal and streamlined interaction with our Site and promotes our legitimate business interests of providing a tailored content to visitors on our Site and otherwise whilst online whilst balancing their privacy rights. When you use the Glow, we collect Glow Usage Data. We use this information to understand how our users use the product and application so we can continue to improve them. You can switch off our ability to collect Glow Usage Data through the FAQs section of the Glow application.

When you visit the Site or the Apps, we and our third-party service providers who are delivering services on our behalf receive and record information on our (and third party) server logs from your browser and device, including your IP address, from cookies, pixels and similar technology. Cookies are small text files placed in visitors’ device to store information and sometimes track information about you. A number of cookies we use last only for the duration of your web session and expire when you exit the browser, other cookies may remember you when you return to the Site and will last for longer. Cookies and other similar tracking technologies help us understand how you use our site, and help us make sure you navigate across the Site easily and some cookies may also be used to help us understand how effective our marketing initiatives are. You can learn more about cookies by visiting www.allaboutcookies.org which includes additional useful information on cookies and how to block cookies using different types of browser. Most browsers allow you to block and delete certain cookies. However, if you do that, some aspects of the Site may not work properly.

A pixel is a piece of code embedded on the Site that collects information about users’ engagement on that web page. The use of a pixel allows us to record, for example, that a user has visited a particular web page or clicked on a particular advertisement. By using the Site, you are authorizing us to gather, parse, and retain data related to the provision of the Site.

Cookie Opt-Out. As noted above, you may stop or restrict the placement of cookies on your computer or remove them from your browser by adjusting your web browser preferences and by visiting www.allaboutcookies.org and www.youronlinechoices.com/uk/. Please note that cookie-based opt-outs are not effective on mobile applications. However, on many mobile devices, application users may opt out of certain mobile ads via their device settings.

As noted above, you may stop or restrict the placement of some cookies on your computer or remove them from your browser by adjusting your web browser preferences and by visiting www.allaboutcookies.org. If you visit www.youronlinechoices.com/uk/ you should be able to see the cookies which you have opted out from and information about how to opt-out further across a variety of third parties which we work with. Please note that cookie-based opt-outs are not effective on mobile applications. However, on many mobile devices, application users may opt out of certain mobile ads via their device privacy settings.

To be clear, whether you are using our opt-out or an online industry opt-out, these cookie-based opt-outs must be performed on each device and browser that you wish to have opted-out.

For example, if you have opted out on your computer browser, that opt-out will not be effective on your mobile device. You must separately opt out on each device.

We set out here where you can find further information about the specific companies we partner with to deliver cookies and some information on opting out

Creating custom audiences.

We also work with Google and Facebook to create custom audience which, similar to interest based cookies, deliver our adverts to you when you interact with the Facebook and Google networks. We work with these companies to deliver our content to existing and potential customers. We do this by sharing a masked unique ID, which is a cryptographic hash of your email so that your data is pseudonymised which means you cannot be identified from it unless additional information is added to this data (we do not share such additional data) with such companies. This ID or code is matched against your equivalent unique code similarly generated by our ad partners, Google and Facebook, to tailor advertising to you. If you have opted out of receiving our marketing communications, our advertising using these custom audience channels, will no longer be displayed on Google and Facebook networks. You may however still receive interest based cookies advertising our Products, which is based on market segments (and which you can update by visiting www.youronlinechoices.com/uk).

• Facebook Custom Audience. To understand more about Facebook Custom Audience, please see here and / or visit your Facebook ad and privacy settings.
• Google Customer Match. You can learn about Google's privacy practices here and understand specifically about how Google Ads work here

We will receive aggregated information back from Facebook such as percentages in relation to city, or platforms, or how many people then visited our site and / or made a purchase. You can opt-out of these custom audience channels at any time.

Casper may disclose your information

We may share your information:

• with our affiliates;
• with our third-party service providers;
• to comply with legal obligations;
• to protect and defend our rights and property; and
• with your permission.

We do not rent, sell, or share Personal Information about you with other companies for their direct email marketing purposes, unless we have your permission.

We use vendors and service providers. We may share any information we receive with vendors and service providers retained in connection with the provision of the Site and/or the Apps and in order to provide our Products to you. For example, website hosting services, sever providers, email service providers, cookies providers, payment processors, customer relationship management companies and other service providers from time to time.

Displaying to other users. The content you post to the Site may be displayed on the Site. Other users of the Site may be able to see some information about you, such as your name if you submit a review. We are not responsible for privacy practices of the other users who will view and use the posted information.

Advertisers and advertising networks. We work with third party companies to deliver and serve relevant adverts to you and others on our site and on your online experience. Sometimes these third parties will collect this information directly. We may also use aggregate information to help advertisers reach the kind of audience which our Products are relevant to. We may make use of the Personal Information we have collected from you to create target audiences to deliver content to you as described above.

Analytics and search engine providers that assist us in the improvement and optimisation of the Site and Apps and subject to the cookie section of this policy (this will not identify you as an individual).

Business partners who provide services to you and with whom we have entered into agreements in relation to the processing of your Personal Information.

As required by law and similar disclosures. We may access, preserve, and disclose your Personal Information, other account information, and content if we believe doing so is required or appropriate to: comply with law enforcement requests and legal process, such as a court order or subpoena; respond to your requests; or protect yours’, ours’ or others’ rights, property, or safety.

Merger, sale, or other asset transfers. If we are involved in a merger, acquisition, financing due diligence, reorganization, bankruptcy, receivership, sale of company assets, or transition of service to another provider, then your Personal Information may be sold or transferred as part of such a transaction as permitted by law and/or contract. The use of your Personal Information following any of the foregoing events should be governed by the provisions of this Privacy and Cookies Policy in effect at the time such Personal Information was collected.

We may also disclose your Personal Information in other circumstances but only with your permission.

The third parties we work with are located in:

• Germany
• UK
• USA
• Ireland.

Third party sites and social media platforms

The Site may contain links to other websites and other websites may reference our Products. These other domains and websites are not controlled by us. We encourage our users to read the privacy policies of each and every website and application that they interact with. We do not endorse, screen or approve, and are not responsible for the privacy practices or content of such other websites or applications. Visiting these other websites or applications is at your own risk and subject to their own privacy policies.

The Site and our Apps also contain links and interactive features with various social media platforms. If you already use these platforms, their cookies may be set on your device when using our Site or Apps. You should be aware that Personal Information which you voluntarily include and transmit online in a publicly accessible blog, chat room, social media platform or otherwise online, or that you share in an open forum may be viewed and used by others without any restrictions. We are unable to control such uses of your information when interacting with a social media platform, and you use such services in accordance with that third party's privacy policy and your privacy settings with them.

We may also run competitions from our pages or accounts with social media platforms. We will supply you with terms and conditions relevant to the sweepstake at the time.

If you otherwise interact with our social media accounts or pages, we will collect information from your own profiles, based on your privacy settings with such social media platform. Please review your privacy settings with these social media platforms to understand what would be shared and update if you would like to.

Casper Referral Program

We may from time to time run referral programmes or similar schemes. If you provide your information to us, and that of people known to you, their information will be processed in accordance with this policy and the Casper Referral Programme Terms.

Security of your information

We take steps to provide that your information is treated securely and in accordance with this Privacy and Cookies Policy. Unfortunately, the Internet cannot be guaranteed to be 100% secure, and we cannot ensure or warrant the security of any information you provide to us. Whilst we cannot ensure or guarantee that loss, misuse or alteration of information will never occur, we will take steps to prevent it.

Information you submit via the Site is made at your own risk. It is advisable to close your browser down when you have finished using it. We may communicate with you electronically regarding security, privacy, and administrative issues relating to your use of our Products. If we learn of a security system’s breach, we may attempt to notify you electronically by posting a notice on the Site or sending an e-mail to you.

Children's privacy

We do not knowingly collect, maintain, or use Personal Information from children under 13 years of age, and no part of the Site is directed to children under the age of 13. If you learn that your child has provided us with Personal Information without your consent, you may alert us at privacy@casper.com. If we learn that we have collected any Personal Information from children under 13, we will promptly take steps to delete such information and terminate the child’s account.

International data transfer

By using our Products, your Personal Information will be transferred to the United States.

Information you submit to our Site is sent to and stored on secure servers located in the European Union with back up servers located in the United States and our staff and providers will process your Personal Information in the United States following your use of the Site and / or in relation to Products you purchase from us.

As mentioned above, this Site is administered by Casper Sleep Inc. Your Personal Information will also be processed by Casper Sleep (UK) Limited and Casper Sleep GmbH and may also be processed by our other affiliates.

Casper Sleep Inc. participates in and has certified its compliance with the EU-U.S. Privacy Shield Framework and the Swiss-U.S. Privacy Shield Framework. Casper Sleep Inc. is committed to subjecting all Personal Information received from European Union (EU) member countries and Switzerland, respectively, in reliance on the Privacy Shield Frameworks, to the Framework’s applicable Principles. To learn more about the Privacy Shield Frameworks, and to view our certification, visit the U.S. Department of Commerce’s Privacy Shield List.

Under the Privacy Shield Framework, Casper Sleep Inc. is responsible for the processing of Personal Information it receives and subsequently transfers to a third party acting as an agent on its behalf, including third parties which help deliver services to us as described above. Casper Sleep Inc. complies with the Privacy Shield Principles for all onward transfers of Personal Information from the EU and Switzerland, including the onward transfer liability provisions.

With respect to Personal Information received or transferred pursuant to the Privacy Shield Frameworks, Casper Sleep Inc. is subject to the regulatory enforcement powers of the U.S. Federal Trade Commission. In certain situations, Casper Sleep Inc. may be required to disclose Personal Information in response to lawful requests by public authorities, including to meet national security or law enforcement requirements.

If you have an unresolved privacy or data use concern that we have not addressed satisfactorily, please contact our U.S.-based third party dispute resolution provider (free of charge) at https://feedback-form.truste.com/watchdog/request.

Under certain conditions, more fully described on the Privacy Shield website, you may invoke binding arbitration when other dispute resolution procedures have been exhausted.

We may also transfer the information you submit to the Site to third parties mentioned in the circumstances above (see Casper may disclose your information above) which may also be situated outside the European Economic Area (EEA) (also as set out above). The countries concerned may not have similar data protection laws to the EEA. Where we transfer your information, we will take steps to require that your privacy right continue to be protected. For further information on these transfers, please contact us.

How Casper keeps your information

We retain Personal Information for as long as you have an account with us in order to meet our contractual obligations to you and for six years after that to identify any issues and resolve any legal proceedings.

We keep information about how you use our Products for as long as is necessary for our legitimate business interests.

We may also retain aggregate information beyond this time for research purposes and to help us develop and improve our Products and services. You cannot be identified from aggregate information retained or used for these purposes.

We may also retain Personal Information relating to your order for where permitted or required by applicable law.

Your rights

You have the right under certain circumstances:

• to be provided with a copy of your Personal Information held by us;
• to request the rectification or erasure of your Personal Information held by us;
• to request that we restrict the processing of your Personal Information (while we verify or investigate your concerns with this information, for example);
• to object to the further processing of your Personal Information, including the right to object to marketing;
• to request that your provided Personal Information be moved to a third party.

Your right to withdraw consent:

• Where the processing of your Personal Information by us is based on consent, you have the right to withdraw that consent without detriment at any time by contacting us. You can also change your marketing preferences at any time as described above.

You can also exercise the rights listed above or if you have suggestions for improving this Privacy Policy, please send an e-mail to privacy@casper.com.

If your request or concern is not satisfactorily resolved by us, you may approach your local data protection authority, (see http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.html). The Information Commissioner is the supervisory authority in the UK and can provide further information about your rights and our obligations in relation to your Personal Information, as well as deal with any complaints that you have about our processing of your Personal Information.

Changes to this policy

Any changes we make to our privacy policy in future will be posted on this page and, in relation to substantive changes, will be notified to you by e-mail (where required).

Contact information

Please see information of our (data controller) entities which are responsible for our data processing:

Casper Sleep Inc. a controller which administers and hosts this Site and from which global and strategic decisions are made as the parent company of the Casper business
175 Greenwich St., Floor 39, New York, NY 10007
privacy@casper.com

Casper Sleep (UK) Limited is also a controller from which you buy products
5 New Street Square, London EC4A 3TW, United Kingdom
privacy@casper.com

Casper Sleep GmbH is also a controller in its capacity as our European HQ, and where our European employees are based in Dircksenstraße 47, 10178 Berlin, Germany
privacy@casper.com