CPRA Privacy Notice

California Privacy Rights Act Notice to California Residents

Last Updated: August 11, 2023

The California Privacy Rights Act (“CPRA”) grants residents of the State of California (“consumers”) and households located in California certain rights regarding their Personal Information. This Notice (the “CPRA Notice”) applies to the Personal Information of consumers and/or households that is collected and/or processed (online and/or off-line) by or on behalf of Brooklyn Bedding, LLC, its affiliates and subsidiaries (collectively, “we,” “us,” or “our”) and supplements our Privacy Policy. All capitalized terms herein have the meanings given in the CPRA or the Privacy Policy. We address Personal Information associated with our employees and job applicants separately. In the event of any conflict between this CPRA Notice and terms in the Privacy Policy, the provision that is more protective of your Personal Information shall control to the extent of such conflict.

If you have any questions about this CPRA Notice or whether any of the following rights apply to you, please contact us at support@brooklynbedding.com. If you are located outside of the State of California, this CPRA Notice does not apply to you and you should refer to our Privacy Policy. 

The Personal Information We Collect, Why We Collect it, and How Long We Keep it

We may collect the categories of Personal Information (including sensitive information) listed in the tables below for the specific business purposes listed next to them. 

We determine the retention periods of each category of Personal Information based on the following criteria:

• The purposes for which we processes the Personal Information (we need to retain the data as long as necessary to complete such purposes); and 
• Tax, legal and regulatory obligations and requirements (laws or regulation may set, or recommend, a minimum period for retention of your Personal Information).

Personal Information Category	Business Purpose
Identifiers, such as your full name, mailing address, telephone numbers, email address, online identifier, IP address	Provide the Websites, Services and Products, respond to inquiries, solicit your feedback and inform you about our Products and Services  Provide newsletters and send email alerts (including marketing emails) Administer and maintain our operations, including for safety purposes Comply with applicable laws and regulations Respond to law enforcement requests and as required by applicable law or court order For order processing and fulfillment  For analytics purposes  To investigate and to manage enquiries, disputes and legal proceedings  To evaluate or consummate a merger, acquisition, financing, reorganization, bankruptcy, receivership, sale of company assets, or similar corporate event, in which your Personal Information will be part of the transferred assets
Geolocation data	Same as above
Commercial information, including records of Products or Services purchased, obtained, or considered, or other purchasing or consuming histories or tendencies	Same as above
Information you share during communications and interactions with us, such as the content of email messages, chat sessions and their transcripts, text messages, and phone calls.	Same as above
Internet or other electronic network activity information, including, but not limited to, browsing history, search history,, and information regarding a consumer’s interaction with an internet website application, or advertisement	Same as above
Inferences drawn from any of the above-mentioned information to create a profile about a consumer reflecting the consumer’s preferences and characteristics	Same as above
Product specific information, including height, weight, body shape match, age bracket, gender, sleeping preferences and sleeping pains/allergies.	Same as above

How We Obtain Your Personal Information 

We receive your Personal Information directly from you, as well as from the following categories of sources:

• Directly from you;
• Internet or other electronic network activity;
• Advertising networks; 
• Third-party service providers; and
• Third-party analytics services.

What Kind of Personal Information We Disclose to Others

We may disclose the following categories of Personal Information to the following categories of service providers and/or contractors for a business purpose. 

Personal Information Category	Category of Service Provider/Contractor
Identifiers Geolocation data Commercial information Internet or other electronic network activity information Inferences Product specific information	Third-party contractors and service providers that provide services to us in the operation of our business and assistance with the Websites, Services and the Products (e.g., technical support providers, IT and cloud hosting companies, payment processing and financing providers, transactions reporting providers, customer relationship management, email marketing providers, advertising service providers, analytics providers, shipping and distribution, name and address verification providers, marketing and order fulfillment, email distribution, market research, fraud detection and prevention, promotions management, and providers of administrative services)
All categories of Personal Information mentioned above	Our parent companies, subsidiaries, affiliates and/or other companies under common control with us.

Your Rights and Choices

The CPRA provides consumers and households with specific rights regarding their Personal Information. We will usually be the business processing your Personal Information. If we are acting as a service provider or contractor on behalf of another business, please contact the business that collected your Personal Information in the first instance to address your rights with respect to such data. 

Right to Know About Your Personal Information 

You have the right to request that we disclose the following kinds of information to you about our collection, disclosure, sale, sharing, and use of your Personal Information: 

• Categories of Personal Information, sources, business or commercial purposes, and to whom the information was disclosed. Please see Sections 1-3 of this CPRA Notice for this information. 

Specific Pieces of Personal Information: If you would like to know and access the specific pieces of Personal Information that we have collected about you, please contact us as described in Section VIII below. You may exercise this right up to two times in any 12-month period. 

• Categories of Personal Information Sold: We do not sell any Personal Information obtained about you, nor have we done so in the past.
• Categories of Personal Information Shared: The categories of Personal Information shared for the purpose of cross-context behavioral advertising in the last twelve months are: Identifiers, and internet or other electronic network activity information.

Right to Request Deletion

You have the right to request deletion of your Personal Information. We will honor such request but might not be able to fulfill your request if we (or our service providers) are required to retain your Personal Information. Examples of such exceptions are:

• Completing a transaction or performing a contract we have with you; 
• Detecting and addressing data security incidents, and repairing or upkeeping of our IT systems;
• Protecting against fraud or other illegal activity; 
• Complying with applicable law or a legal obligation, or to exercise rights under the law (e.g., the right to free speech); or
• Using your Personal Information internally to improve our Websites, Services and Products.

Right to Request Correction

You have the right to request that we correct inaccurate Personal Information that we maintain about you. We will honor such request but might not be able to fulfill your request if it is impossible to do so or would involve disproportionate effort, or if we have a good-faith, reasonable, and documented belief that a request to correct is fraudulent or abusive.

Right to Opt-Out of the Sale and/or Sharing of Personal Information. 

You have the right to opt-out of the sale and/or sharing of your Personal Information. Please exercise your rights as set forth in Section V below.

Right to Limit the Use and Disclosure of Sensitive Personal Information

You have the right to limit certain ways in which a business uses and discloses sensitive Personal Information. Please note, however, that we only collect the information mentioned in this CPRA Notice, and do not use or disclose it for any purposes that are covered by this right (nor have we done so in the past).

Right to Designate an Authorized Agent

You have the right to submit a request through the use of an authorized agent If you choose to do so, we may require that you (i) provide the authorized agent written permission to act on your behalf, and (ii) verify their identity directly with us. We may deny a request from an authorized agent that does not submit proof of authorization.

Right to Non-Discrimination

We will not discriminate against you for exercising any of your CPRA rights. We will not (i) deny you Products or Services, (ii) charge you different prices or rates for Products or Services, including through granting discounts or other benefits, or imposing penalties, (iii) provide you a different level or quality of Products or Services, and (iv) suggest that you may receive a different price or rate for Products or Services or a different level or quality of Products or Services. 

Exercising Your Privacy Rights

1. a) Rights to Know, to Request Deletion, and to Request Correction of Personal Information

To exercise these rights, please submit a verifiable consumer request to us entitled “California Privacy Request,” by using the following methods:

• Email us at: support@brooklynbedding.com

What we need to know to fulfill your request

The verifiable consumer request must: (i) provide sufficient information that allows us to reasonably verify you are the person about whom we collected Personal Information or an authorized representative; and (ii) describe your request with sufficient detail that allows us to properly understand, evaluate, and respond to it. We cannot respond to your request or provide you with Personal Information if we cannot verify your identity or authority to make the request and confirm the Personal Information related to you. Making a verifiable consumer request does not require you to create an account with us. 

How you will hear back from us

We will confirm receipt of a verifiable consumer request within then (10) business days of its receipt. We will endeavor to respond to a verifiable consumer request within forty-five (45) calendar days of its receipt. If we require more time, we will notify you of the extension and provide an explanation of the reason for the extension in writing, and we will provide you with a response no later than ninety (90) calendar days of receipt of the request. If you have an account with us, we will deliver our written response to that account. If you do not have an account with us, we will deliver our written response by mail or electronically, at your option. The response we provide will also explain the reasons we cannot comply with a request, if applicable. For data portability requests, we will select a format to provide your Personal Information that is readily useable and should allow you to transmit the information from one entity to another entity without hindrance. 

We may charge a reasonable fee to process or respond to your verifiable consumer requests if they are excessive, repetitive, or manifestly unfounded. If we determine that the request warrants a fee, we will inform you of the reasons for this decision and provide you with a cost estimate before completing your request.

1. b) Right to Opt-Out of the Sale and/or Sharing of Personal Information

If you are 16 years of age or older, you have the right, at any time, to direct us to not sell/share your Personal Information (the “right to opt-out”). We do not knowingly sell/share the Personal Information of children under the age of 16, unless we receive affirmative authorization (the “right to opt-in”) from either (i) the consumer who is between 13 and 16 years of age, or (ii) the parent or guardian of a consumer less than 13 years of age. Consumers who opt-in to Personal Information sales/sharing may opt-out of future sales/sharing at any time. To exercise the right to opt-out, you (or your authorized representative) may submit a request to us emailing us at:

support@brooklynbedding.com

Once you make an opt-out request, we will not ask you to reauthorize Personal Information sales/sharing for at least twelve (12) months. However, you may change your mind and opt back in to Personal Information sales/sharing at any time by contacting us at support@brooklynbedding.com.

You do not need to create an account with us to exercise your opt-out rights. We will only use Personal Information provided in an opt-out request to review and comply with the request.

Other California Privacy Rights

Pursuant to Section 1798.83 of the California Civil Code, residents of California have the right to obtain certain information about the types of Personal Information that companies with whom they have an established business relationship (and that are not otherwise exempt) have shared with third parties for direct marketing purposes during the preceding calendar year, including the names and addresses of those third parties, and examples of the types of services or products marketed by those third parties. In order to submit such a request, please contact us at support@brooklynbedding.com. 

Changes to this CPRA Notice

This CPRA Notice is effective as of the date of the Last Update stated at the top of this CPRA Notice. We may change this CPRA Notice from time to time with or without notice to you. By visiting or accessing the Websites or the Services, or otherwise engaging or interacting with us after we make any such changes to this CPRA Notice, you are deemed to have accepted such changes. Please be aware that, to the extent permitted by applicable law, and without prejudice to the foregoing, our use of your Personal Information is governed by the CPRA Notice in current effect. Please refer back to this CPRA Notice on a regular basis. 

How to Contact Us

If you have any questions or comments about this CPRA Notice, the ways in which we collect and use your information, or your choices and rights regarding such use, please do not hesitate to contact us at: 

• Email: support@brooklynbedding.com
• Chat: Live chat available on our website
• Mail: 5301 W Bethany Home Rd. Glendale, AZ 85301