Skip to main content
Free Shipping

Privacy Policy

Your PrivacyIs Our Priority

We believe in transparency. Here is exactly how we handle your data.

Shop Lullabar

Last updated: August 2026

The short version

The Quick Version

  • We only collect what is necessary to process your order and improve your experience.
  • We never sell your personal information to third parties.
  • You can request access, correction, or deletion of your data at any time.
  • All transactions are encrypted and processed securely through Shopify.
  • You choose whether to allow analytics and advertising cookies, and you can change your mind anytime.

Who we are

Data Controller

Slumbabe is the data controller responsible for the personal information described in this policy. You can reach us at:

Postal address: A. Hofmanweg 60, mailbox 8532, 2031 BL Haarlem, the Netherlands

Chamber of Commerce (KVK): 42111966

VAT number: NL005501838B91

Email: hello@slumbabe.com

We have not appointed a Data Protection Officer, as we are not required to. If you are in the EU and believe we have handled your data improperly, you may lodge a complaint with your national supervisory authority. In the Netherlands this is the Autoriteit Persoonsgegevens.

1. Information We Collect

When you visit our website or make a purchase, we collect certain information to fulfill your order and provide a better shopping experience:

Personal Information: Name, email address, shipping address, billing address, and phone number (when you place an order).

Payment Information: Payment details are processed securely by Shopify Payments and are never stored on our servers.

Device Information: IP address, browser type, operating system, and device identifiers for analytics and fraud prevention.

Usage Data: Pages visited, time spent on site, clicks, and other interactions to improve our website.

2. How We Use Your Information

We use the information we collect to:

  • Process and fulfill your orders
  • Send order confirmations and shipping updates
  • Respond to your customer service requests
  • Send marketing communications (only if you opt in)
  • Improve our website and product offerings
  • Measure and improve our advertising
  • Prevent fraud and maintain security
  • Comply with legal obligations

3. Information Sharing

We never sell your personal information. We may share your information only with:

  • Service Providers: Shopify (our e-commerce platform), shipping carriers, and payment processors who need the information to complete your order.
  • Order Tracking: We use Track123 to provide real-time shipment tracking. Order and delivery details, including your name, email, and shipping address, are shared with Track123 so it can match your order and show its progress.
  • Analytics Partners: Google Analytics 4 helps us understand how visitors use our website, such as which pages they view and how long they stay. It sets its own cookies and processes that data under its own privacy terms.
  • Session Recording: Microsoft Clarity records how visitors move through our site so we can find the parts that confuse people and fix them. It captures a playback of your visit: the pages you saw, where you scrolled, where you moved your cursor, and what you clicked. It does not record what you type. Anything you enter into a form, along with your account pages and order tracking results, is hidden before the recording leaves your browser and is never uploaded. Microsoft processes this data under its own privacy terms and may use it to improve its own products. It runs only after you allow analytics cookies.
  • Advertising Partners (on-site behavior): The Meta Pixel, from the company behind Facebook and Instagram, tracks pages you view and actions you take on our site so we can measure and improve our ads. Where we already know who you are, for example because you are signed in or gave us your email, the Pixel also sends those details to Meta in a hashed (scrambled) form so it can recognise you more reliably. It runs only after you allow marketing cookies.
  • Advertising Partners (from our own servers): Alongside the Meta Pixel in your browser, we send Meta a matching copy of those same actions directly from our servers. This copy can include your email address, name, or phone number when you have given them to us, always converted into a hashed (scrambled) form before it is sent, together with your IP address and a random ID we generate to recognise your device. Meta can still match hashed details against its own records, so we treat this as sharing personal information. It runs only after you allow marketing cookies, and it stops if you withdraw that permission.
  • Advertising Partners (order data): When you place an order, Shopify shares certain order details, such as your name, email, phone number, and shipping address, with Meta in a hashed (scrambled) form. Meta can still match this against its own records, so we treat it as sharing personal information even though your details are not sent in plain text. This happens through Shopify's checkout, separately from the Meta Pixel above, and helps us measure which ads lead to sales. It never includes your payment details.
  • Email Marketing: Klaviyo powers our newsletter and automated emails. When you sign up, we share your email address and related activity with Klaviyo so it can send the messages you requested. Every email has an unsubscribe link.
  • Legal Requirements: If required by law, subpoena, or other legal process.

4. Cookies and Tracking

We group cookies and similar technologies into three types:

  • Essential: Needed to run the site. They remember your cart, keep you logged in, and help protect against fraud. These are always on.
  • Analytics: Help us see how the site is used so we can improve it. We use Google Analytics 4 and Microsoft Clarity for this.
  • Advertising: Let us measure our ads and show relevant ones. We use the Meta Pixel for this.

Analytics and advertising cookies are optional. Where consent is required in your region, they load only after you accept them in our cookie banner. You can change your choice at any time, and you can also block cookies through your browser settings. Blocking essential cookies may break parts of the site.

Some order information is also shared with advertising partners directly by Shopify at checkout, separately from cookies. See "Information Sharing" above for what that includes.

5. Your Rights

Depending on your location, you may have the following rights regarding your personal information:

Access

Request a copy of your data

Correction

Fix inaccurate information

Deletion

Request we delete your data

Opt-out

Unsubscribe from marketing

To exercise any of these rights, please contact us at hello@slumbabe.com.

6. Data Security

We take the security of your data seriously:

  • All data is transmitted using SSL/TLS encryption
  • Payment information is processed by PCI-DSS compliant providers
  • We regularly review our security practices
  • Access to personal data is limited to authorized personnel only

7. Data Retention

We retain your personal information for as long as necessary to:

  • Provide you with our services
  • Comply with legal obligations (such as tax records)
  • Resolve disputes and enforce our agreements

Order data is typically retained for 7 years for tax and legal purposes. You can request deletion of your account data at any time.

8. International Transfers

Your information may be processed in countries other than your own. We ensure appropriate safeguards are in place, including:

  • Standard contractual clauses approved by regulatory authorities
  • Partnering with providers who maintain appropriate certifications
  • Ensuring data protection laws are respected regardless of location

9. Children's Privacy

Our website is not intended for children under 16 years of age. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us immediately.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

Questions about your privacy?

We are happy to answer any questions you have about how we handle your data.