GDPR Privacy Policy
Last updated: March 17, 2025
This Privacy Policy describes how sleepinghedgehog ("we", "us", or "our") collects, uses, stores, and protects personal data in accordance with the General Data Protection Regulation (GDPR). By using our platform at sleepinghedgehog, you acknowledge the practices described in this document.
1. Data Controller
Sleepinghedgehog acts as the data controller for personal data collected through this platform. Our registered address is Petio road, Donore Ave, Dublin 8, Ireland. For all data-related enquiries, you may contact us at info@sleepinghedgehog.com or by phone at +35340291764.
2. Lawful Basis for Processing
We process personal data only where a lawful basis exists under Article 6 of the GDPR. The applicable bases include:
Contractual necessity: Processing required to deliver the services you have requested, including account creation, session scheduling, and course access.
Legitimate interests: Processing carried out to maintain platform security, prevent fraud, and improve service quality, where such interests are not overridden by your rights.
Consent: Where you have freely given, specific, informed, and unambiguous consent, such as for marketing communications or optional analytics.
Legal obligation: Processing necessary to comply with applicable legal requirements.
3. Personal Data We Collect
3.1 Data You Provide Directly
We collect data you submit when registering an account, enrolling in courses, communicating with instructors, or contacting our support team. This includes your name, email address, payment information, and any content you submit through the platform.
3.2 Data Collected Automatically
When you access our platform, we automatically collect technical data including IP address, browser type, device identifiers, operating system, pages visited, session duration, and referring URLs. This data is collected through cookies and similar tracking technologies.
3.3 Data From Third Parties
We may receive data about you from third-party authentication providers if you choose to sign in using a linked account, or from payment processors in connection with transaction verification.
4. How We Use Your Data
We use collected personal data for the following purposes:
Service delivery: Creating and managing your account, providing access to learning content, facilitating live sessions, and processing payments.
Personalisation: Adapting learning paths, content recommendations, and instructor matching based on your preferences and progress.
Communication: Sending transactional messages, service updates, and, where consent has been obtained, promotional content.
Security and integrity: Detecting and preventing unauthorised access, abuse, and fraudulent activity.
Analytics and improvement: Understanding how the platform is used in order to improve performance, content, and user experience.
Legal compliance: Meeting obligations imposed by applicable law, including record-keeping and responding to lawful requests.
5. Cookies and Tracking Technologies
5.1 Types of Cookies Used
Essential cookies: Required for core platform functionality, including authentication and session management. These cannot be disabled without affecting service availability.
Functional cookies: Used to remember your preferences and settings to provide a more consistent experience.
Analytical cookies: Used to collect aggregated information about how visitors interact with the platform, helping us identify areas for improvement.
Marketing cookies: Used, where consent is obtained, to deliver relevant content and measure the effectiveness of communications.
5.2 Managing Cookies
You may manage or withdraw consent for non-essential cookies at any time through your browser settings or our cookie preference centre. Disabling certain cookies may affect the functionality of the platform.
6. Data Sharing and Disclosure
We do not sell your personal data. We may share your data with the following categories of recipients:
Service providers: Third-party vendors who assist in operating our platform, including hosting providers, payment processors, email delivery services, and analytics platforms. These parties are bound by data processing agreements and may only process data on our documented instructions.
Instructors: Where you enrol in a session, limited profile information may be shared with the relevant instructor to facilitate the learning relationship.
Legal authorities: Where required by law, court order, or regulatory obligation, we may disclose personal data to competent authorities.
Business transfers: In the event of a merger, acquisition, or sale of assets, personal data may be transferred as part of that transaction, subject to equivalent privacy protections.
7. International Data Transfers
As an international platform serving learners across multiple continents, your data may be transferred to and processed in countries outside your country of residence. Where such transfers occur, we ensure that appropriate safeguards are in place, such as Standard Contractual Clauses approved by competent data protection authorities, or transfers to recipients in countries recognised as providing an adequate level of data protection.
8. Data Retention
We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, or as required by applicable law. Account data is retained for the duration of your active relationship with us. Following account closure, data may be retained for a limited period to comply with legal obligations, resolve disputes, and enforce our agreements. Anonymised or aggregated data may be retained indefinitely as it no longer constitutes personal data.
9. Your Rights Under GDPR
Subject to applicable law and certain conditions, you have the following rights regarding your personal data:
Right of access: You may request a copy of the personal data we hold about you.
Right to rectification: You may request correction of inaccurate or incomplete personal data.
Right to erasure: You may request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you withdraw consent and no other lawful basis applies.
Right to restriction: You may request that we limit the processing of your data in certain circumstances.
Right to data portability: Where processing is based on consent or contractual necessity and carried out by automated means, you may request a copy of your data in a structured, commonly used, machine-readable format.
Right to object: You may object to processing based on legitimate interests or for direct marketing purposes.
Right to withdraw consent: Where processing is based on your consent, you may withdraw it at any time without affecting the lawfulness of processing carried out prior to withdrawal.
Right to lodge a complaint: You have the right to lodge a complaint with a competent data protection supervisory authority if you believe your rights have been infringed.
To exercise any of these rights, please contact us at info@sleepinghedgehog.com. We will respond within the timeframe required by applicable law, generally within 30 days of receipt of your request.
10. Data Security
We implement appropriate technical and organisational measures to protect personal data against unauthorised access, accidental loss, destruction, or disclosure. These measures include encrypted data transmission, access controls, regular security assessments, and staff training. While we take all reasonable steps to protect your data, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.
11. Children's Privacy
Our platform is not directed at children under the age of 16. We do not knowingly collect personal data from individuals under this age without verifiable parental or guardian consent. If we become aware that personal data has been collected from a child without appropriate consent, we will take prompt steps to delete such data.
12. Automated Decision-Making and Profiling
We may use automated processes to personalise your learning experience, including content recommendations and adaptive learning path suggestions. These processes do not produce legal or similarly significant effects. Where any automated decision-making with significant consequences is employed, we will provide you with the right to request human review and to contest the outcome.
13. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or applicable law. When we make material changes, we will notify you by updating the date at the top of this page and, where appropriate, through direct communication. Your continued use of the platform following the effective date of any update constitutes your acknowledgement of the revised policy.
14. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data processing practices, please contact us:
Sleepinghedgehog
Petio road, Donore Ave, Dublin 8, Ireland
Email: info@sleepinghedgehog.com
Phone: +35340291764
Website: Sleepinghedgehog