Privacy Notice

Last updated October 2025

We respect your privacy and are committed to protecting your personal information.

This Privacy Notice for Slip and its affiliates ("we," "us," or "our"), describes how and why we might access, collect, store, use, and/or share ("process") your personal information when you use our services ("Services"), including when you:

• Visit our online properties, including our websites and website applications or our social media pages/handles;
• Use Slip's products, services, content, features, technologies, and functionalities; and
• Engage with us in other related ways, including any sales, marketing, or events.

This Privacy Notice does not apply to third-party websites, mobile applications, or services that may link to the Services or be linked from the Services. Once you leave our website or are redirected to a third-party website or application, you are no longer governed by this Privacy Notice or our website’s Terms & Conditions. Please review the privacy policies on those websites and applications directly to understand their privacy practices.

1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

The personal information that we collect depends on the context of your interactions with us and the Services, the choices you make, and the products and features you use. The personal information we collect may include the following:

• Contact information, including name, delivery address, billing address, contact number and email address.
• Order information, including details of your purchase, payment details, credit or debit card information, and delivery data.
• Demographic information.
• Contact preferences and contact or authentication data;
• Any information you provide to us as part of communications with us, including via our customer services function and email.
• Content you may include in survey responses.
• Information you make available to us via a social media platform, including but not limited to your username, profile or handles.
• Any information or data you provide by commenting on content posted on our Services. Please note that these comments are also visible to other users of our Services.
• Content you provide such as photographs, videos, images, graphics, reviews, articles, statements or comments about us or our Services.
• Gift card recipient and friend referral details, such as name, email address, personal information you may include in a personalized message you provide.
• Information you submit to inquire about or apply for a job with us, including job title, employer name, employment status, professional interests, skills and competencies.
• Any other information you submit to us.

All personal information that you provide to us must be true, complete, and accurate, and you must notify us of any changes to such personal information.

Shopify

Our store is hosted on Shopify Inc. They provide us with the online e-commerce platform that allows us to sell our products and services to you. Shopify processes your data when you visit and make purchases on our store and may use customer data together with data from other Shopify merchants to provide enhanced services (for example, fraud prevention, performance and growth features, and advertising/retargeting services). Your information will be shared with Shopify and certain third parties (which may be located outside your country) in order to provide these services, including those that incorporate data from their interactions with other merchants and with Shopify. Your data is stored through Shopify’s data storage, databases and the general Shopify application. They store your data on a secure server behind a firewall.

Card details submitted through Shopify’s checkout are encrypted and tokenized in accordance with the Payment Card Industry Data Security Standard (PCI-DSS). Shopify is a PCI-DSS certified provider. We do not receive or store your full credit card number or CVV code. Limited payment information (for example, the last four digits of your card and expiry date) may be retained securely by Shopify for refunds, chargebacks, fraud prevention, and compliance.

Where required (e.g., in the EEA/UK/Switzerland), we rely on your selections via Manage Cookie Preferences to enable non-essential cookies and similar technologies that power these services, and you may withdraw consent at any time via Manage Cookie Preferences. In US states with “sale,” “sharing,” or “targeted advertising” rights, you can opt out at any time via our Do Not Sell or Share My Personal Information page.

For more insight, you may also want to read Shopify's Terms of Service or Shopify's Privacy Policy. You can also visit the Shopify Privacy Portal to learn more about your rights, including the right to object to Shopify’s processing for enhanced services.

Payment Data

We collect only the information necessary to process your payment if you choose to make a purchase (for example, payment method details). Your payment information is processed directly by our trusted payment service providers in accordance with their own privacy policies linked below. We do not receive or store your full payment card numbers or CVV codes. Our current providers include:

• Apple Pay
• Shop Pay
• Stripe
• PayPal
• Afterpay

These providers process your payment data directly in accordance with their own privacy policies. We recommend that you read their privacy policies so you can understand the manner in which your personal information will be handled by these providers.

Information automatically collected

We automatically collect certain information when you visit, use, or navigate the Services. This information does not reveal your specific identity (like your name or contact information) but may include device and usage information, such as your IP address, browser and device characteristics, operating system, language preferences, referring URLs, device name, country, location, information about how and when you use our Services, and other technical information. Like many businesses, we also collect information through cookies and similar technologies. You can find out more about this in our Cookie Notice and you can withdraw consent at any time via Manage Cookie Preferences.

The information we collect includes:

• Log and Usage Data. Log and usage data is service-related, diagnostic, usage, and performance information our servers automatically collect when you access or use our Services and which we record in log files. Depending on how you interact with us, this log data may include your IP address, device information, browser type, settings and information about your activity in the Services (such as the date/time stamps associated with your usage, pages and files viewed, searches, and other actions you take such as which features you use), device event information (such as system activity, error reports (sometimes called “crash dumps”), and hardware settings).
• Device Data. We collect device data such as information about your computer, phone, tablet, or other device you use to access the Services. Depending on the device used, this device data may include information such as your IP address (or proxy server), device and application identification numbers, location, browser type, hardware model, Internet service provider and/or mobile carrier, operating system, and system configuration information.
• Location Data. We collect location data such as information about your device’s location, which can be either precise or imprecise. How much information we collect depends on the type and settings of the device you use to access the Services. For example, we may use GPS and other technologies to collect geolocation data that tells us your current location (based on your IP address). You can opt out of allowing us to collect this information either by refusing access to the information or by disabling your Location setting on your device. However, if you choose to opt out, you may not be able to use certain aspects of the Services.
• Cookies and Tracking Technologies: Like many businesses, we use cookies, pixels, SDKs, and similar technologies to collect information about your browsing activity, advertising identifiers, and interactions with our website, app, and emails. These technologies may also allow our partners to collect information about your activities across different sites and services, in order to provide you with targeted advertising. See our Cookie Notice for details on how these technologies work and you can manage your preferences via Manage Cookie Preferences.
• Transaction & Business Records: Details of your purchases, returns, and customer service interactions, including automatically generated order identifiers and support ticket logs.
• Marketing & Engagement Data: Information about how you interact with our marketing communications (e.g., whether you open, click, or unsubscribe from our emails or SMS).
• Preference & Behavioral Data: Shopping habits, items viewed, abandoned cart data, and inferred interests used to personalize your experience.
• Fraud & Security Data: Signals collected to detect and prevent fraudulent or suspicious activity, such as failed login attempts.

Google API

Our use of information received from Google APIs will adhere to Google API Services User Data Policy, including the Limited Use requirements.

Google Analytics

We may share your information with Google Analytics to track and analyze the use of the Services. The Google Analytics Advertising Features that we may use include: Remarketing with Google Analytics, Google Display Network Impression Reporting and Google Analytics Demographics and Interests Reporting.

To opt out of being tracked by Google Analytics across the Services, visit https://tools.google.com/dlpage/gaoptout. You can opt out of Google Analytics Advertising Features through Ads Settings and Ad Settings for mobile apps. Other opt out means include http://optout.networkadvertising.org/ and http://www.networkadvertising.org/mobile-choice. For more information on the privacy practices of Google, please visit the Google Privacy & Terms page.

You can find out more about this in our Cookie Notice and you can withdraw consent at any time via Manage Cookie Preferences.

Instant Audiences

When enabled, we use Instant Audiences to collect device identifiers, cookie IDs, IP address, and browsing/interaction data (e.g., pages viewed, add-to-cart, abandoned checkout) for advertising and measurement. You can find out more about this in our Cookie Notice and you can withdraw consent at any time via Manage Cookie Preferences.

Information collected from other sources

In order to enhance our ability to provide relevant marketing, offers, and services to you and update our records, we may obtain information about you from other sources, such as public databases, joint marketing partners, affiliate programs, data providers, and from other third parties. This information includes mailing addresses, job titles, email addresses, phone numbers, intent data (or user behavior data), Internet Protocol (IP) addresses, social media profiles, social media URLs, and custom profiles, for purposes of targeted advertising and event promotion.

If you decide to invite others to the Services, we will collect your and the other person’s names, email addresses, and/or phone numbers to send an email or text message and follow up with the other person. You agree that you will obtain the other person’s consent before giving us his or her contact information. You also agree that you will not send us the contact information of a minor. We will inform any other person you invite that you gave us his or her information in the invitation email. We use these details only to send the invitation and to manage related compliance, unless the invitee chooses to engage further with us.

2. HOW DO WE PROCESS YOUR INFORMATION?

We process your personal information for a variety of reasons, depending on how you interact with our Services, including:

• Account management: To facilitate account creation, authentication, and otherwise manage your user account.
• Service delivery: To provide you with our products and services, including fulfilling and managing orders, payments, returns, and exchanges.
• Customer support: To respond to your inquiries, resolve issues, and provide support.
• Administrative communications: To send you important information about our products and services, changes to our terms and policies, or other transactional notices.
• General business operations: To conduct internal operations such as accounting, recordkeeping, auditing, and other administrative functions.
• Legal compliance: To comply with applicable laws, lawful requests, and legal processes such as subpoenas, court orders, and regulatory requirements.
• User communications: To enable communications between users, where you choose to use such features.
• Feedback: To request feedback and contact you about your use of our Services.
• Reviews and user-generated content: To collect and publish customer reviews, ratings, testimonials, or other content that you choose to provide about our products or services, which may be displayed publicly on our website, in our marketing, or through third-party review platforms.
• Personalization: To recommend products, tailor your experience, and customize content to your preferences.
• Marketing and promotions: To send you marketing and promotional communications, if this is in line with your preferences. You can opt out at any time as set out below or by contacting us on the details below.
• Advertising: To create and deliver promotional and advertising content, including personalized ads on our Services and third-party platforms, and to measure the effectiveness of campaigns.
• Security and fraud prevention: To protect our Services and business operations, including detecting and preventing fraud, abuse, or illegal activity.
• Analytics and improvement: To understand how our Services are used, identify usage trends, improve functionality, and develop new products and services.

If you fail to provide information when requested, we may not be able to provide you with the benefit of our Services or perform our contract with you. We will make it clear when providing information is mandatory and the possible consequences of not providing it (for example, we cannot fulfil an order without a delivery address).

3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR INFORMATION?

If you are located in the EU or UK, this section applies to you.

The General Data Protection Regulation (GDPR) and UK GDPR require us to explain the valid legal bases we rely on in order to process your personal information. As such, we may rely on the following legal bases to process your personal information:

• Consent. We may process your information if you have given us permission (i.e., consent) to use your personal information for a specific purpose.  An example includes sending you marketing emails about new products or promotions with your consent. You can withdraw your consent at any time as set out below or by contacting us on the details below. In relation to cookies, you can find out more in our Cookie Notice and you can withdraw consent at any time via Manage Cookie Preferences.
• Performance of a Contract. We may process your personal information when we believe it is necessary to fulfill our contractual obligations to you, including providing our Services or at your request prior to entering into a contract with you. For example, we may process your personal information for some of the purposes described in order to:
  • Collect your name, address and contact details when you place an order; 
  • Send you order updates and delivery information;
  • Sharing your data with our delivery partners to fulfil your orders;
  • Processing your payment information;
  • Responding to your customer service enquiries; and
  • Enabling you to partake in a prize draw or competition.
• Legitimate Interests. We may process your information when we believe it is reasonably necessary to achieve our legitimate business interests and those interests do not outweigh your interests and fundamental rights and freedoms. For example, we may process your personal information for some of the purposes described in order to:
  • Send users information about special offers and discounts on our products and services or otherwise respond to your requests;
  • Develop and display personalized and relevant advertising content for our users and measure the effectiveness of the advertising we provide to you;
  • Analyze how our Services are used so we can improve them to engage and retain users, including analyzing website traffic to improve our website and user experience ;
  • Support our marketing activities;
  • Analyzing sales data to identify trends and develop new products;
  • Using your purchase history to recommend products you may like;
  • Conducting customer surveys to gather feedback on existing products and using anonymized location data to understand regional demand for specific products;
  • Monitoring social media for mentions of our brand to assess public perception and identify areas for improvement;
  • Diagnose problems and/or prevent fraudulent activities; and
  • Understand how our users use our products and services so we can improve user experience
• Legal Obligations. We may process your information where we believe it is necessary for compliance with our legal obligations, such as to cooperate with a law enforcement body or regulatory agency, exercise or defend our legal rights, or disclose your information as evidence in litigation in which we are involved.

If you are located in Canada, this section applies to you.

We may process your information if you have given us specific permission (i.e., express consent) to use your personal information for a specific purpose, or in situations where your permission can be inferred (i.e., implied consent). You can withdraw your consent at any time as outlined below or by contacting us on the details set out below.

In some exceptional cases, we may be legally permitted under applicable law to process your information without your consent, including, for example, for:

• If collection is clearly in the interests of an individual and consent cannot be obtained in a timely way
• For investigations and fraud detection and prevention
• For business transactions provided certain conditions are met
• If it is contained in a witness statement and the collection is necessary to assess, process, or settle an insurance claim
• For identifying injured, ill, or deceased persons and communicating with next of kin
• If we have reasonable grounds to believe an individual has been, is, or may be victim of financial abuse
• If it is reasonable to expect collection and use with consent would compromise the availability or the accuracy of the information and the collection is reasonable for purposes related to investigating a breach of an agreement or a contravention of the laws of Canada or a province
• If disclosure is required to comply with a subpoena, warrant, court order, or rules of the court relating to the production of records
• If it was produced by an individual in the course of their employment, business, or profession and the collection is consistent with the purposes for which the information was produced
• If the collection is solely for journalistic, artistic, or literary purposes
• If the information is publicly available and is specified by the regulations
• We may disclose de-identified information for approved research or statistics projects, subject to ethics oversight and confidentiality commitments

4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

We share personal information with the categories of recipients below to operate our business and provide the Services. These providers are only permitted to process your information on our behalf, must protect it appropriately, and are not allowed to use it for their own purposes.

Vendors, Consultants, and Other Third-Party Service Providers

We may share your data with our affiliates, third-party vendors, service providers, contractors, or agents (“third parties”) who perform services for us or on our behalf and require access to such information to do that work.  We share your personal information with these third parties, where required, to ensure we are providing the best products and services to you. As set out above, we may do this to perform a contract with you, based on your consent, or to pursue our legitimate interests in a way that might reasonably be expected and which does not materially impact your rights, freedom or interests. Categories of recipients include:

• Service providers and vendors: Entities that perform services on our behalf and are required to use your information only as instructed. These include:
  • Customer service and customer relationship management providers (e.g., helpdesk, ticketing, and live chat platforms).
  • Payment processors.
  • Order fulfillment and logistics providers.
  • Information technology, cloud hosting, and data storage providers.
  • Auditing, accounting, finance, and tax providers.
  • Professional advisers (legal, compliance, consulting, and related services).
  • Security and fraud prevention providers, including incident response vendors.
  • Analytics and performance monitoring providers.
  • AI platforms.
  • Sales and marketing service providers (including email/SMS distribution, content, affiliate programs, and list management).
  • Online advertising partners and ad networks.
  • Affiliate marketing programs.
  • Retargeting platforms.
  • Service providers who help us send review requests, including customer feedback platforms.
  • Communication and collaboration tools.
  • User account registration and authentication providers.
  • Social networks and platform integrations.
  • Testing tools.
  • Product engineering and design tools.
• Social media platforms: If you engage with us through social media (for example, by “liking” or commenting on our content), the platform may collect information about you and your interaction. Content you share via our Services (e.g. reviews, comments) may also be visible to other users and your connections on those platforms.
• Business partners: We may share your information with partners to offer co-branded products, joint promotions, or other collaborative services.
• Affiliates: We may share your information with our affiliates and subsidiaries, subject to this Privacy Notice.
• Business transfers: We may change our ownership or corporate organization while providing the Services. We may transfer to another entity or its affiliates or service providers some or all information about you in connection with, or during negotiations of, any merger, acquisition, sale of assets or any line of business, change in ownership control, or financing transaction. We cannot promise that an acquiring party or the merged entity will have the same privacy practices or treat your information as described in this notice.
• Government entities and law enforcement: We may disclose information where we believe in good faith that we are lawfully authorized or required to do so (e.g. in response to valid subpoenas, warrants, court orders, or regulatory requests), or where disclosure is necessary to protect our rights, property, safety, or that of others.
• Other users: If you choose to share personal information in public areas of our Services (such as comments or posts), it may be visible to all users and may be made publicly available outside our Services. We may also share information with anyone else to whom you authorize us to disclose it. We may disclose de-identified or aggregated information that cannot reasonably be used to identify you. We will not attempt to re-identify such information, and we require all recipients to contractually agree not to attempt to re-identify it or to permit others to do so.

Instant Audiences

When enabled, we use Instant to help us understand how our customers use our site, and use this information to retarget for marketing purposes. We share certain personal data (e.g. contact information, device identifiers, browsing behavior) with Instant Audiences to help us deliver targeted advertising and measure effectiveness. Instant may combine this information with pseudonymized data from other merchants to generate insights and optimize marketing. You can read more about how Instant uses your Personal Information here: https://www.instant.one/privacy-policy. You can opt out by contacting help@instant.one or us via the contact details provided below.

For US residents, some use of cookies and trackers may be considered a “sale” or “sharing” of personal information; you can opt out through our Do Not Sell or Share My Personal Information page. For more detail on the types of cookies we use and how to control them, please see our Cookie Notice and manage cookies at any time via Manage Cookie Preferences.

5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

We and our service providers use cookies, pixels, and similar tracking technologies to operate our Services, keep them secure, save your preferences, and understand how they are used. 

We also permit certain third parties to use these technologies for analytics and advertising purposes, including to deliver personalized ads, measure campaign effectiveness, and send reminders (such as abandoned cart emails).

Where required by law, we rely on your consent for non-essential cookies, which you can manage at any time via Manage Cookie Preferences or via your browser settings. In the UK/EEA, we set non-essential cookies only with your consent. Analytics/advertising cookies are always optional. You may withdraw consent at any time.

For US residents, some use of cookies and trackers may be considered a “sale” or “sharing” of personal information; you can opt out through our Do Not Sell or Share My Personal Information page.

For more detail on the types of cookies we use and how to control them, please see our Cookie Notice and manage cookies at any time via Manage Cookie Preferences.

6. IS YOUR INFORMATION TRANSFERRED INTERNATIONALLY?

We do not host or maintain our own servers. Instead, we use trusted third-party cloud and technology service providers (including Google, Dropbox and Microsoft) to store and process personal information on our behalf. These providers maintain infrastructure in multiple jurisdictions, including the United States, Australia, Canada, European Union and United Kingdom. As a result, your personal information may be transferred to, stored in, and processed in countries outside the one in which you live.

Safeguards for international transfers
Whenever we transfer your personal information internationally, we ensure that an appropriate level of protection is applied by implementing one or more of the following safeguards:

• Adequacy decisions: We only transfer personal information to countries recognised by the European Commission, UK Government, or other competent authority as providing an adequate level of data protection.

• Standard contractual clauses (SCCs): For transfers from the European Economic Area (EEA), we use the European Commission’s SCCs.

• UK Addendum/International Data Transfer Agreement (IDTA): For transfers from the UK, we rely on approved UK transfer tools.

• Swiss adaptations of SCCs: For transfers from Switzerland, we rely on SCCs adapted for Swiss law.

• Transfer risk assessments: Where appropriate, we conduct assessments to evaluate whether additional safeguards are required.

• Data Privacy Framework: Where available, we may rely on the EU-US Data Privacy Framework and the UK Extension for transfers to certified US organisations.

Third-party providers
Our third-party service providers may also transfer and process your information in other jurisdictions when providing services to us as detailed in this Privacy Notice. If you choose to proceed with a transaction that involves a third-party service provider located outside your country, your personal information may become subject to the laws of the jurisdiction(s) in which that provider or its facilities are located.

7. HOW LONG DO WE KEEP YOUR INFORMATION?

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Notice, or as otherwise required or permitted by law (for example, to meet tax, accounting, compliance, or record-keeping obligations).

When deciding how long to keep personal information, we consider factors such as:

• the nature and sensitivity of the information;
• the purpose for which it was collected and whether that purpose continues to apply;
• legal, regulatory, and contractual requirements;
• operational and security needs, including fraud prevention and dispute resolution; and
• the likelihood of needing the information for potential claims or investigations.

In general, we keep customer account, order, and communications records for as long as you maintain an account with us and for a reasonable period afterwards to comply with our obligations and to resolve any outstanding matters. Marketing preference information is retained until you withdraw your consent or opt out of receiving marketing communications.

Once the relevant retention period expires, or the information is no longer needed for the purposes described above, we will either delete it, de-identify it, or securely store it in an archived form if required for legal, regulatory, or legitimate business reasons.

If you would like further information about our retention practices for a specific category of personal information, you can contact us using the contact details set out below.

8. HOW DO WE KEEP YOUR INFORMATION SAFE?

We have implemented appropriate and reasonable technical security measures designed to protect the security of any personal information we process. However, despite our safeguards and efforts to secure your information, no electronic transmission over the internet or information storage technology can be guaranteed to be 100% secure, so we cannot promise or guarantee that hackers, cybercriminals, or other unauthorized third parties will not be able to defeat our security and improperly collect, access, steal, or modify your information. Although we will do our best to protect your personal information, transmission of personal information to and from our Services is at your own risk. You should only access the Services within a secure environment. In the event of a data breach impacting your personal information, we will notify you and regulators in accordance with applicable laws, and take steps to mitigate harm.

9. DO WE COLLECT INFORMATION FROM MINORS?

We do not knowingly collect, solicit data from, or market to children under 16 years of age or the equivalent age as specified by law in your jurisdiction, nor do we knowingly sell such personal information. By using the Services, you represent that you are at least 16 or the equivalent age as specified by law in your jurisdiction or that you are the parent or guardian of such a minor and consent to such minor dependent’s use of the Services. If we learn that personal information from users less than 16 years of age or the equivalent age as specified by law in your jurisdiction has been collected, we will deactivate the account and take reasonable measures to promptly delete such data from our records. If you become aware of any data we may have collected from children under age 16 or the equivalent age as specified by law in your jurisdiction, please contact us on the details below.

10. WHAT ARE YOUR PRIVACY RIGHTS?

In some regions (like the EEA, UK, Switzerland, and Canada), you have certain rights under applicable data protection laws. These may include the right:

• If we collected your personal data using consent, to revoke that consent at any time.
• To request access and obtain a copy of your personal information.
• To request rectification of inaccurate or incomplete personal information.
• To request erasure of your personal information when it is no longer necessary for the purposes for which it was collected, when you withdraw consent and no other legal basis for processing exists, or when your fundamental rights override our legitimate interests.
• To request restriction of processing if there is a dispute about the accuracy of your data, if the processing is unlawful, if the processing is no longer necessary but is needed by you for legal claims, or if your objection is pending evaluation.
• If applicable, to request data portability.
• To object to the processing of your personal information, including where we rely on legitimate interests or for direct marketing (including profiling). We will no longer process your data unless we have compelling legitimate grounds that override your rights and freedoms, or where processing is necessary for legal claims.
• To obtain information about and, where applicable, a copy of the safeguards we use when transferring your personal data internationally.
• Not to be subject to automated decision-making that produces legal or similarly significant effects. Where such decisions are made, we will explain the factors involved and offer a simple way to request human review.

We will consider and act upon any request in accordance with applicable data protection laws. We respond to all requests within the time limits set by applicable laws and may request identity verification before acting.

If you are located in the EEA or UK and you believe we are unlawfully processing your personal information, you also have the right to complain to your Member State data protection authority or UK data protection authority.

If you are located in Switzerland, you may contact the Federal Data Protection and Information Commissioner.

If you live outside these regions, you may still have local rights under national consumer- or privacy-protection laws, which we will honour where applicable.

Withdrawing your consent: If we are relying on your consent to process your personal information, which may be express and/or implied consent depending on the applicable law, you have the right to withdraw your consent at any time. You can withdraw your consent at any time by contacting us by using the contact details provided below or updating your preferences by logging into your account on our website. However, please note that this will not affect the lawfulness of the processing before its withdrawal nor, when applicable law allows, will it affect the processing of your personal information conducted in reliance on lawful processing grounds other than consent.

Opting out of marketing and promotional communications: You can unsubscribe from our marketing and promotional communications at any time by:

1.       clicking on the unsubscribe link in the emails that we send;

2.       replying  STOP, END, CANCEL, UNSUBSCRIBE, QUIT, REVOKE or OPT OUT to the SMS messages that we send;

3.       Complete the Opt Out of Postal Marketing form found HERE;

4.       Contacting us using the details provided below.

You will then be removed from the marketing lists. However, we may still communicate with you, for example, to send you service-related messages that are necessary for the administration and use of your account, to respond to service requests, or for other non-marketing transactional purposes. For clarity, withdrawing marketing consent does not affect necessary operational or transactional communications (e.g., order or warranty notices).

Attentive

We may use a third party, Attentive, to manage our SMS marketing campaigns. You can access additional terms and conditions (including further details about how you can opt out of receiving marketing SMS messages) relating to our SMS marketing at the following links:

·         Australia: https://attnl.tv/t/1Er

·         United Kingdom: https://attnl.tv/t/a0-.

·         United States of America: https://attnl.tv/t/H0n

·         Canada: https://attnl.tv/t/wMv

Direct Marketing to Existing Customers

Please note that, if you are an existing customer of Slip (for example, you have purchased products from us in the past, or have discussed potentially purchasing products from us), we may use your personal information to send you direct marketing communications about similar products or services. Where this is permitted by law, we may do this without requiring your express consent. You will always be provided with a clear opportunity to opt out of receiving such communications at the time we collect your information, and in every message we send. You can also opt out at any time by following the unsubscribe instructions in our communications or by contacting us on our details set out below.

Account Information

If you would at any time like to review or change the information in your account or terminate your account, you can:

• Log in to your account settings and update your user account.
• Contact us on our details set out below.

Upon your request to terminate your account, we will deactivate or delete your account and information from our active databases. However, we may retain some information in our files to prevent fraud, troubleshoot problems, assist with any investigations, enforce our legal terms and/or comply with applicable legal requirements.

11. CONTROLS FOR DO-NOT-TRACK FEATURES

Some web browsers include a “Do Not Track” (DNT) setting. At this time, no uniform industry or legal standard has been established for recognising or responding to DNT signals, so we do not respond to them.

We do, however, recognise Global Privacy Control (GPC) signals. When received, we treat GPC as a request to opt out of “sale”/“sharing” and targeted advertising for the relevant browser or device session. To learn more about enabling GPC, visit https://globalprivacycontrol.org. We apply the same opt out preference across all participating jurisdictions (e.g., CCPA/CPRA, CPA, VCDPA) where technically feasible.

12. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

If you are a resident of a U.S. state with a comprehensive privacy law (including California, Colorado, Connecticut, Delaware, Florida, Indiana, Iowa, Kentucky, Maryland, Minnesota, Montana, Nebraska, New Hampshire, New Jersey, Oregon, Rhode Island, Tennessee, Texas, Utah, or Virginia), you may have the right to request access to and receive details about the personal information we maintain about you and how we have processed it, correct inaccuracies, get a copy of, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. More information is provided below.

Categories of Personal Information We Collect

The table below shows the categories of personal information we may have collected in the past twelve (12) months. The table includes illustrative examples of each category and does not reflect the personal information we collect from you. For a comprehensive inventory of all personal information we process, please refer to Section 1.

We may also collect other personal information outside of these categories through instances where you interact with us in person, online, or by phone or mail in the context of:

• Receiving help through our customer support channels;
• Participation in customer surveys or contests; and
• Facilitation in the delivery of our Services and to respond to your inquiries.

We retain personal information only for as long as necessary to fulfill the business or commercial purposes for which it was collected, unless a longer retention period is required or permitted by law. When deciding how long to keep information, we take into account:

1. The purpose of collection – how long the information is needed to provide our Services, operate our business, or meet the expectations of our customers.
2. Legal and regulatory requirements – including tax, accounting, employment, and consumer protection laws.
3. Contractual obligations – such as commitments to our partners, service providers, or regulators.
4. Operational and security needs – including fraud prevention, dispute resolution, business continuity, and record-keeping practices.
5. Actual or anticipated disputes, claims or investigations – where we may need to preserve information in connection with litigation, regulatory inquiries, or enforcement of our agreements or defend our legal interests.

Once information is no longer needed for these purposes, we will delete it or de-identify it in accordance with applicable law.

Sources of Personal Information

Learn more about the sources of personal information we collect in Section 1.

How We Use and Share Personal Information

Learn more about how we use your personal information in Section 2.

We collect and share your personal information through:

• Targeting cookies/Marketing cookies
• Social media cookies
• Beacons/Pixels/Tags

We may disclose your personal information to our service providers. Learn more about how we disclose personal information in Section 4.

We may use your personal information for our own business or commercial purposes, such as payment processing, order fulfillment, customer service, IT support, and analytics.

We may have disclosed the following categories of personal information to third parties for a business or commercial purpose in the preceding twelve (12) months:

• Category A. Identifiers
• Category B. Personal information as defined in the California Customer Records law
• Category C. Characteristics of protected classifications under state or federal law
• Category D. Commercial information
• Category F. Internet or other electronic network activity information
• Category G. Geolocation data
• Category H. Audio, electronic, sensory or similar information
• Category I. Professional or employment-related information.
• Category J. Employment information.
• Category K. Inferences drawn from collected personal information

The categories of third parties to whom we disclosed personal information for a business or commercial purpose can be found under Section 4.

We have sold or shared the following categories of personal information to third parties in the preceding twelve (12) months:

• Category A. Identifiers
• Category F. Internet or other electronic network activity information
• Category G. Geolocation data
• Category K. Inferences drawn from collected personal information

The categories of third parties to whom we sold or shared personal information are:

• Ad Networks
• Affiliate Marketing Programs
• AI Platforms
• Data Analytics Services
• Retargeting Platforms
• Review Platforms
• Social Networks
• User Account Registration & Authentication Services

Your Rights

You have rights under certain US state data protection laws. However, these rights are not absolute, and in certain cases, we may decline your request as permitted by law. Depending on your state of residence, you may have some or all of the following rights under applicable law:

• Right to know whether or not we are processing your personal data
• Right to access your personal data
• Right to correct inaccuracies in your personal data
• Right to request the deletion of your personal data
• Right to obtain a copy of the personal data you previously shared with us
• Right to non-discrimination for exercising your rights
• Right to opt out of the processing of your personal data if it is used for targeted advertising (or sharing as defined under California’s privacy law), the sale of personal data, or profiling in furtherance of decisions that produce legal or similarly significant effects (“profiling”).

Depending upon the state where you live, you may also have the following rights:

Right to access the categories of personal data being processed (as permitted by applicable law, including the privacy law in Minnesota)

• Right to obtain a list of the categories of third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in California, Delaware, and Maryland)
• Right to obtain a list of specific third parties to which we have disclosed personal data (as permitted by applicable law, including the privacy law in Minnesota and Oregon)
• Right to review, understand, question, and correct how personal data has been profiled (as permitted by applicable law, including the privacy law in Minnesota)
• Right to limit use and disclosure of sensitive personal data (as permitted by applicable law, including the privacy law in California)
• Right to opt out of the collection of sensitive data and personal data collected through the operation of a voice or facial recognition feature (as permitted by applicable law, including the privacy law in Florida)

How to Exercise Your Rights

To exercise these rights, you can contact us on the contact details at the bottom of this document. You can opt out from the selling of your personal information, targeted advertising, or profiling by disabling cookies in Manage Cookie Preferences.

Under certain US state data protection laws, you can designate an authorized agent to make a request on your behalf. We may deny a request from an authorized agent that does not submit proof that they have been validly authorized to act on your behalf in accordance with applicable laws. If you submit a request through an authorized agent, we may require proof of authorization and may still require you to verify your identity directly with us, as permitted by law.

Request Verification

Upon receiving your request, we will need to verify your identity to determine you are the same person about whom we have the information in our system. We will only use personal information provided in your request to verify your identity or authority to make the request. However, if we cannot verify your identity from the information already maintained by us, we may request that you provide additional information for the purposes of verifying your identity and for security or fraud-prevention purposes.

If you submit a request through an authorized agent, we may require proof of authorization and may still require you to verify your identity directly with us, as permitted by law.

Appeals

Under certain US state data protection laws, if we decline to take action regarding your request, you may appeal our decision by contacting us on the details set out below. We will inform you in writing of any action taken or not taken in response to the appeal, including a written explanation of the reasons for the decisions. If your appeal is denied, you may submit a complaint to your state attorney general.

Financial Incentives

The value of the incentive is reasonably related to the value of your data, calculated from the estimated revenue generated from marketing to enrolled users minus program costs, or the discount offered. Participation is voluntary and you may withdraw at any time.

“Financial incentive” means a program, benefit, or other offering, including payments to consumers as compensation, for the disclosure, deletion, sale, or sharing of personal information.

The law permits financial incentives or a price or service difference if it is reasonably related to the value of the customer’s data. A business must be able to explain how the financial incentive or price or service difference is reasonably related to the value of the customer’s data. The explanation must include:

• a good-faith estimate of the value of the consumer’s data that forms the basis for offering the financial incentive or price or service difference; and
• a description of the method the business used to calculate the value of the consumer’s data

We may decide to offer a “bona fide loyalty program” under Colorado law, or a “financial incentive” under California law (e.g., price or service difference) in exchange for the retention, sale, or sharing of a consumer’s personal information.

If we decide to offer a financial incentive, we will notify you of such financial incentive and explain the price difference, as well as material terms of the financial incentive or price of service difference, including the categories of personal information that are implicated by the financial incentive or price or service difference.

Under California law, the value of your personal information to us is related to the value of the free or discounted products or services, or other benefits that you obtain or that are provided as part of the applicable program, less the expense related to offering those products, services, and benefits to program participants.

If you choose to participate in the financial incentive you can withdraw from the financial incentive at any time by contacting us on the contact details below.

California “Shine the Light” Law

Nevada Residents: You have the right to opt out of the sale of certain personal information to third parties. If you are a Nevada resident and wish to exercise this right, please contact us at legal@slip.com.

California Civil Code Section 1798.83, also known as the “Shine the Light” law, permits our users who are California residents to request and obtain from us, once a year and free of charge, information about categories of personal information (if any) we disclosed to third parties for direct marketing purposes and the names and addresses of all third parties with which we shared personal information in the immediately preceding calendar year. If you are a California resident and would like to make such a request, please submit your request in writing to us by using the contact details provided in Section 17.

13. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

Australia and New Zealand

We collect and process your personal information under the obligations and conditions set by Australia’s Privacy Act 1988 and New Zealand’s Privacy Act 2020 (Privacy Act).

This Privacy Notice satisfies the notice requirements defined in both Privacy Acts, in particular: what personal information we collect from you, from which sources, for which purposes, and other recipients of your personal information.

If you do not wish to provide the personal information necessary to fulfill their applicable purpose, it may affect our ability to provide our services, in particular:

• offer you the products or services that you want
• respond to or help with your requests
• manage your account with us
• confirm your identity and protect your account

At any time, you have the right to request access to or correction of your personal information. You can make such a request by contacting us on the details set out below. 

If you believe we are unlawfully processing your personal information, you have the right to submit a complaint about a breach of the Australian Privacy Principles to the Office of the Australian Information Commissioner and a breach of New Zealand’s Privacy Principles to the Office of New Zealand Privacy Commissioner.

14. JOB APPLICANTS

When you apply for a job with us, we may collect information from you, including information:

• you provide in connection with your application;
• in your curriculum vitae, cover letter, or application form;
• about your qualifications and employment history, including company size;
• about you that is available publicly, including about your interests, activities, and employment history;
• you authorize us to collect via third parties, including background checks, information obtained from former employers or references;
• regarding contact information including email address and telephone number.

In certain circumstances, you may submit your application for employment through a third-party service that displays our job posting or is performing recruitment services. We do not control the privacy practices of these third-party services. Please review their privacy policies carefully prior to submitting your application materials.

15. MAINLAND CHINA

We process “personal data,” as that term is defined in The Personal Information Protection Law of the People’s Republic of China (‘PIPL’). Slip and its analytics and advertising partners may process geolocation when a mobile browser or device collects that information automatically. You may disable collection of geolocation using your device or browser settings.  Your rights under the PIPL include:

• Consent: If we collected your personal data using consent, you have a right to revoke that consent.
• Access and Portability: Request access to personal data we hold about you or request transmission of your data to a third party.
• Correction: Request that we rectify inaccurate or incomplete personal data we store about you.
• Erasure: Request that we erase personal data when such data is no longer necessary for the purpose for which it was collected, when you withdraw consent, when we cease the provision of products or services, or the retention period has expired, and when we handled personal information in violation of laws, administrative regulations, or agreements.
• Restriction of processing: Request that we restrict our processing of personal data if there is a dispute about the accuracy of the data; if the processing is unlawful; if the processing is no longer necessary for the purposes for which it was collected but is needed by you for the establishment, exercise or defense of legal claims; or if your request to object to processing is pending evaluation.
• Objection to processing: Object to processing of your personal data based on our direct marketing (including profiling) or our automated decision making (where you may request us to explain the matter). We will no longer process the data unless there are compelling legitimate grounds for our processing that override your interests, rights, and freedoms, or for the purpose of asserting, exercising, or defending legal claims.
• Explanation: Request explanations regarding personal information handling rules. Please contact us to exercise these rights.

16. DO WE MAKE UPDATES TO THIS NOTICE?

We may update this Privacy Notice from time to time. We encourage you to review this Privacy Notice frequently to be informed of how we are protecting your information.

17. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have any questions, concerns, or complaints about our handling of personal information or this Privacy Notice, you may contact our Data Protection Officer (DPO), who acts as our global privacy contact point:

By email: legal@slip.com

By phone:

• Australia: +61 (07) 3102 4485
• USA (toll-free): 1800 513 9247
• UK/EEA: +44 20 8144 7784

By post (Global HQ):
Slip – Data Protection Officer
PO Box 1590
New Farm QLD 4005
Australia

By post (U.S. inquiries):
Slip Silk Pillowcase LLC – Data Protection Officer
315 Madison Avenue, 3rd Floor
New York, NY 10017
United States

EEA Residents
If you are a resident of the European Economic Area (EEA), we act as the data controller of your personal information. In accordance with Article 27 of the GDPR, we have appointed Slip Silk Pillowcase B.V. as our representative in the EEA. You can contact them regarding our processing of your information at:

• Email: legal@slip.com
• Web: slipsilkpillowcase.eu/pages/contact
• Phone: +44 20 8144 7784
• Post: Slip Silk Pillowcase B.V., Barbara Strozzilaan 201, 1083 HN Amsterdam, Netherlands

UK Residents
If you are a resident of the United Kingdom, we act as the data controller of your personal information. In accordance with Article 27 of the UK GDPR, we have appointed Slip Silk Pillowcase Limited as our representative in the UK. You can contact them regarding our processing of your information at:

• Email: legal@slip.com
• Web: slipsilkpillowcase.co.uk/pages/contact
• Phone: +44 20 8144 7784
• Post: Slip Silk Pillowcase Limited, Suite 1, 7th Floor, 50 Broadway, London SW1H 0BL, England

18. HOW CAN YOU REVIEW, UPDATE, OR DELETE THE DATA WE COLLECT FROM YOU?

Based on the applicable laws of your country or state of residence in the US, you may have the right to request access to the personal information we collect from you, details about how we have processed it, correct inaccuracies, or delete your personal information. You may also have the right to withdraw your consent to our processing of your personal information. These rights may be limited in some circumstances by applicable law. To request to review, update, or delete your personal information, please contact us on the details above.  In US states with “sale,” “sharing,” or “targeted advertising” rights, you can opt out at any time via our Do Not Sell or Share My Personal Information page. We will maintain a record of erasure and opt out requests as required by law.