Privacy Policy
Details on data minimization, CCPA/GDPR rights, retention windows, and cryptographic security controls.
1. Scope & Data Controller
This Privacy Policy explains how Tested Mattress Media LLC (“Tested Mattress”, “we”, “our”) collects, processes, stores, and protects personal information when you visit testedmattress.com, use our interactive tools, subscribe to our newsletter, or contact our team.
2. Categories of Information We Collect
- Newsletter Subscription Data: Your email address when voluntarily submitted via our subscription form.
- Contact & Inquiry Records: Your name, email address, inquiry category, and message text submitted via the Contact Us form.
- Anonymous Technical & Security Telemetry: One-way salted IP hashes (for anti-spam and affiliate click deduplication), browser user-agent strings, referrer URLs, and essential CSRF session cookies.
- Interactive Tool Inputs: Selections made in our Sleep Quiz run locally in your browser session and are not tied to personal identities.
3. Legal Bases & Retention Schedule
For visitors protected by the GDPR/UK GDPR, we rely on Consent (newsletter signups) and Legitimate Interests (responding to user requests, preventing CSRF/bot abuse, and maintaining site reliability).
| Data Category | Purpose | Retention Window |
|---|---|---|
| Newsletter Emails | Lab updates & deal alerts | Until unsubscribe or deletion request |
| Contact Messages | Editorial support & corrections | Up to 24 months for audit trail |
| Hashed Click Logs | Abuse prevention & aggregate metrics | 12 months (non-identifiable hash) |
4. Your Privacy Rights (CCPA/CPRA & GDPR)
We never sell, rent, or broker your personal information to third parties. Regardless of location, and specifically under CCPA/CPRA (California) and GDPR (EEA/UK), you have the right to:
- Request access to a portable copy of any personal data we hold about you.
- Request correction of inaccurate contact records or complete erasure (“Right to be Forgotten”).
- Withdraw newsletter consent at any time without affecting prior lawful processing.
- Exercise non-discrimination rights for asserting privacy controls.
5. Security Safeguards, Children’s Privacy & Contact
We enforce TLS encryption in transit, cryptographic CSRF tokens, strict HTTP security headers, and one-way IP hashing. Our website is intended for adults aged 18+ and we do not knowingly collect data from children under 13 (or 16 in applicable EU jurisdictions) under COPPA.
To submit a privacy request, email our Privacy Officer at [email protected] or write to Tested Mattress Media LLC, 100 Sleep Lab Way, Suite 400, Austin, TX 78701.