Privacy Policy
Privacy Policy for DiDi Sleep
Last Updated: 08 November 2024
​
DiDi Sleep (“we,” “us,” or “our”) is committed to protecting your privacy. This Privacy Policy outlines how we collect, use, store, and protect personal data in compliance with the General Data Protection Regulation (GDPR) and other applicable data protection laws. By using our services, you agree to the practices described in this Privacy Policy.
​
1. Data Controller Information
​
-
Company Name: DiDi Sleep
-
Email: info@didisleep.com
We are responsible for ensuring your data is handled in compliance with GDPR and other applicable data protection regulations.
​
2. Personal Data We Collect
We may collect the following types of personal data:
-
Identity Data: Name, email address, phone number, and other contact information.
-
Child’s Information: Age, sleep patterns, routines, and other information relevant to providing personalized sleep coaching.
-
Payment Information: We may collect limited payment information (e.g., credit card details), but payments are processed through secure third-party services that comply with PCI-DSS standards.
-
Technical Data: IP address, browser type, and browsing information collected through cookies and similar technologies.
​
3. How We Collect Personal Data
We collect personal data through:
-
Direct interactions: When you book a consultation, complete an intake form, or contact us for support.
-
Automated technologies: When you interact with our website, we may use cookies or similar tracking technologies to collect certain technical information.
​
4. Purpose of Processing Personal Data
We use your data for the following purposes:
-
To Provide Services: Use information about your child’s sleep habits to create personalized sleep plans and support.
-
Customer Support: Address inquiries, provide updates, and handle follow-up conversations.
-
Payment Processing: Process payments for our services.
-
Communication: Send emails regarding your consultations, service updates, or other important information related to our services.
-
Marketing (Optional): With your consent, we may send newsletters or promotional content. You can opt-out at any time.
​
5. Legal Basis for Processing
Our processing of your personal data is based on one or more of the following legal grounds:
-
Consent: We process certain data with your consent, such as for marketing communications.
-
Contractual Necessity: Processing is necessary to perform the sleep coaching services you request.
-
Legal Obligations: Compliance with regulatory or legal obligations.
-
Legitimate Interests: For example, improving our services, safeguarding security, and business management, where these do not override your data protection rights.
​
6. Data Sharing and Third Parties
We may share your data with:
-
Service Providers: Trusted third-party providers who assist in delivering our services, such as payment processors, IT support, and analytics providers. All providers are GDPR-compliant and have appropriate data protection agreements with us.
-
Legal Authorities: If required by law, we may disclose data to legal or regulatory authorities.
We do not sell, rent, or trade your personal information with any third parties.
​
7. Data Retention
We retain personal data only as long as necessary to fulfill the purposes for which it was collected, comply with legal requirements, resolve disputes, or enforce our agreements. The duration of data retention depends on the type of data and legal obligations, but typically we keep data for a maximum of 2 years after the completion of our services.
​
8. Data Security
We implement technical and organizational security measures to protect your personal data from unauthorized access, loss, or misuse. These include:
-
Encryption: Sensitive data is encrypted.
-
Access Control: Only authorized personnel have access to your data.
-
Secure Storage: Data is stored in secure facilities and servers with appropriate protections in place.
Despite our efforts, no method of transmission over the internet or electronic storage is fully secure, and we cannot guarantee absolute security.
​
9. Your Data Protection Rights
Under the GDPR, you have certain rights concerning your personal data, including:
-
Right of Access: Request a copy of your personal data.
-
Right to Rectification: Correct inaccurate or incomplete data.
-
Right to Erasure (“Right to be Forgotten”): Request deletion of personal data under certain conditions.
-
Right to Restrict Processing: Request a restriction on data processing.
-
Right to Data Portability: Receive your data in a structured, commonly used format.
-
Right to Object: Object to data processing based on legitimate interests or for marketing purposes.
-
Right to Withdraw Consent: If consent is the basis for processing, you may withdraw it at any time.
To exercise these rights, please contact us at [Insert Contact Email]. We will respond within one month, as required by GDPR.
​
10. Cookies
Our website uses cookies to enhance user experience, track usage patterns, and serve targeted advertisements. You may choose to accept or refuse cookies through your browser settings. For more information on how we use cookies, please refer to our Cookie Policy.
​
11. Changes to This Privacy Policy
We may update this Privacy Policy periodically to reflect changes in our practices or legal requirements. Any changes will be posted on this page with an updated revision date. Continued use of our services after such updates constitutes acceptance of the revised Privacy Policy.
​
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us at:
-
Email: info@didisleep.com
​
For unresolved issues, you may have the right to lodge a complaint with a supervisory authority in your jurisdiction.
By using DiDi Sleep’s services, you acknowledge that you have read, understood, and agreed to this Privacy Policy.