Privacy policy

Who we are

SleepUncovered is an independent editorial site. For the purposes of UK GDPR, we are the data controller for any personal data submitted via this site.

Contact: hello@sleepuncovered.com

What we collect

Newsletter signups

If you submit your email address through the newsletter signup form, we store:

• Your email address
• The page you subscribed from (e.g. /supplements/melatonin)
• The timestamp of signup

We use this only to send the newsletter. We don't share, sell, or rent your email. Data is stored in a Supabase database hosted within the European Union.

Server logs

Our hosting provider (Vercel) keeps standard server logs including IP address, timestamp, and request path for operational and security purposes. These logs are retained for a limited period as part of standard hosting and are not used for tracking or profiling.

Cookie-less analytics

We use Plausible Analytics to count page views and see which articles people read. Plausible doesn't use cookies, doesn't track you across sites, and doesn't collect personal data. The data we see is aggregate page visits — no individual profiles, no re-identification.

What we do not collect

• We do not use Google Analytics or any cookie-based analytics.
• We do not use advertising or tracking cookies.
• We do not run social-media tracking pixels.
• We do not collect data from calculator inputs — calculators run entirely in your browser and nothing is sent to our servers.

Legal basis for processing

For newsletter signups, the legal basis is consent — you actively submitted your email knowing it would be used to send the newsletter. You can withdraw consent at any time by unsubscribing, and we'll delete the record on request.

For server logs, the legal basis is legitimate interest in operating and securing the site.

How long we keep data

• Newsletter signups — until you unsubscribe, or 24 months of zero engagement, whichever is sooner. Unsubscribed records are deleted within 30 days.
• Server logs — limited retention by the hosting provider (typically 30 days).

Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you.
• Correct inaccurate data.
• Request deletion of your data.
• Object to processing or restrict it.
• Data portability (receive your data in a usable format).
• Withdraw consent at any time.
• Complain to the Information Commissioner's Office (ICO) — ico.org.uk

To exercise any of these rights, email us at hello@sleepuncovered.com. We'll respond within 30 days.

Third parties

The only third parties with access to your data are the service providers we use to operate the site:

• Vercel — hosting (servers within the EU/UK)
• Supabase — newsletter database (EU region)
• Plausible Analytics — anonymous page-view counting (EU-based, cookie-less)

All three have standard data processing agreements in place.

International transfers

Where possible, data is stored within the European Union or the UK. If we ever need to transfer data outside these regions, we use the UK ICO's International Data Transfer Agreement or equivalent safeguards.

Changes to this policy

We'll update this page when our data practices change. Material changes will be flagged at the top of the page for at least 30 days. The “last reviewed” date always shows when the policy was last revised.