1. Information we collect
Information you provide. This may include your name, email address, phone number, shipping and billing address, account and subscription preferences, order details, reviews, survey responses, and the content of messages you send us.
Payment information. Payments are handled by Shopify and the payment providers offered at checkout. Winks does not receive or store your full payment-card number.
Information collected automatically. When you use the site, we and our service providers may collect your IP address, browser and device type, general location derived from your IP address, pages viewed, links clicked, referring pages, cart and purchase activity, and information collected through cookies, pixels, and similar technologies.
Information from other sources. We may receive information from Shopify, our subscription and customer-support providers, fulfillment partners, and advertising and analytics partners.
We do not ask for medical records or a diagnosis. Please do not include sensitive health information in an order note or support message unless it is necessary for us to help you.
3. Cookies, analytics, and advertising
We use essential technologies to keep the site, cart, checkout, and account features working. We also use analytics and advertising technologies to understand site use, measure campaigns, and show relevant ads.
These tools include Google Analytics and Google Ads and the Meta Pixel and Meta Conversions API. Depending on the tool and your choices, these partners may receive device and browser information, IP address, pages viewed, cart and purchase events, order value, and identifiers used for matching and measurement. Meta may receive hashed versions of contact details used for matching. Google and Meta handle information under their own privacy policies.
Disclosing identifiers, browsing activity, or purchase events for interest-based advertising may be considered selling, sharing, or targeted advertising under some state laws. Use Your Privacy Choices to opt out. We also process recognized opt-out preference signals, including Global Privacy Control, as required by applicable law. Browser settings can block or delete cookies, but blocking essential cookies may affect checkout and other site functions.
You can also manage advertising preferences through Google Ads Settings, Meta Ad Preferences, and industry tools such as AdChoices.
4. How we disclose information
We may disclose personal information to:
- Service providers that support commerce, subscriptions, payments, email and text messaging, customer service, fraud prevention, fulfillment, shipping, hosting, analytics, and site operations.
- Advertising and analytics partners, including Meta and Google, as described above.
- Professional advisers and authorities when reasonably necessary to obtain advice, comply with law, protect rights and safety, or prevent fraud and abuse.
- A successor or transaction participant in connection with a merger, financing, reorganization, sale, or transfer of all or part of our business.
We do not sell personal information for money. Some advertising disclosures may nevertheless be defined as a "sale" or "sharing" under state privacy laws, and you can opt out of them.
5. Text messaging
If you opt in to text messages, we collect your phone number, consent record, and information about message delivery and engagement. We use that information to provide the messages you requested and to operate the program.
Mobile opt-in data and consent are not sold or shared with third parties for their own marketing. We may disclose them to providers and carriers that help us deliver and support the messaging service. Consent to marketing texts is not a condition of purchase. Reply STOP to unsubscribe or HELP for help. See our SMS Terms for details.
6. Retention and security
We retain personal information for as long as reasonably necessary for the purposes described here, including to provide services, maintain business and tax records, resolve disputes, enforce agreements, and meet legal obligations. Retention periods vary by the type of information and why we hold it.
We use reasonable administrative, technical, and organizational safeguards designed to protect personal information. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.
7. Your privacy rights
Depending on where you live, you may have the right to request access to, correction of, deletion of, or a portable copy of personal information; to learn about categories of information collected, sources, purposes, and recipients; to opt out of sale, sharing, or targeted advertising; to limit certain uses of sensitive information; and to appeal a decision about a request.
To opt out of sale, sharing, or targeted advertising, visit Your Privacy Choices. For another privacy request, email sleepy@getwinks.com or use our Contact page. Tell us the right you want to exercise and the email address associated with your account or order. We may need to verify your identity. An authorized agent may submit a request where permitted by law, but we may ask for proof of authority and identity.
We will not discriminate against you for exercising a privacy right. If we deny a request, you may appeal by replying to our decision or contacting us again with the subject line "Privacy Appeal."
8. Consumer health information
Winks sells a sleep supplement, so product purchases and site activity may reveal an interest in sleep or wellness. We use order information to fulfill purchases, manage subscriptions, provide support, prevent fraud, and maintain required records. Advertising and analytics disclosures involving site or purchase activity are described in Sections 3 and 4.
We do not use sensitive health details from customer-support messages for targeted advertising. Where applicable law treats information we process as consumer health data, you may request access, deletion, or withdrawal of consent by emailing sleepy@getwinks.com. We do not sell consumer health data for money.
9. Children
The site and Winks products are intended for adults. We do not knowingly collect personal information from children under 13. If you believe a child has provided personal information to us, contact us and we will take appropriate steps to delete it.
10. International visitors
Winks is based in the United States. If you visit from another country, personal information may be processed in the United States and other countries where our service providers operate. Those countries may have different data-protection laws than your country.
11. Changes to this policy
We may update this policy as our practices, services, or legal obligations change. We will post the revised policy here and update the effective date. If required by law, we will provide additional notice.