BY USING OR ACCESSING THE PLATFORM, YOU ACKNOWLEDGE THAT YOU HAVE READ AND UNDERSTOOD THIS PRIVACY POLICY AND AGREE TO THE COLLECTION, USE, AND DISCLOSURE OF YOUR INFORMATION AS DESCRIBED HEREIN, TO THE EXTENT PERMITTED BY APPLICABLE LAW. WHERE APPLICABLE LAW REQUIRES YOUR SEPARATE OR EXPRESS CONSENT FOR SPECIFIC PROCESSING ACTIVITIES, SUCH CONSENT WILL BE SOUGHT AT THE TIME OF COLLECTION OR BEFORE SUCH PROCESSING OCCURS.

General

Ikano Industry Mexico S.A. de C.V., an entity formed under the laws of Mexico (“Company” or “we” or “us” or “our”) respects the privacy of its users (“User(s)” or “you”) that use our website ikonasleep.com and any other websites, microsites, or sub-sites operated by us or our affiliates that link to or reference this Privacy Policy (collectively, the "Platform").

The following privacy policy (“Privacy Policy”) is designed to inform you, as a User of the Platform, about the types of information that the Company may gather about or collect from you in connection with your use thereof. It also is intended to explain the conditions under which Company uses and discloses that information, and your rights in relation to that information, including rights available under applicable U.S. federal and state privacy laws, as well as international data protection laws where applicable. If you are a resident of California, the European Economic Area (EEA), Mexico, or Canada, please note that additional privacy rights and protections apply as described in this Privacy Policy. Changes to this Privacy Policy are discussed at the end of this document. Each time you use the Platform, however, the current version of this Privacy Policy will apply. Accordingly, each time you use the Platform you should check the date of this Privacy Policy (which appears at the end of this document) and review any changes since your last visit.

This Privacy Policy is expressly incorporated into our Terms of Use, which can be accessed by clicking the links contained herein. Any defined or capitalized terms not otherwise defined herein shall have the meaning ascribed to them in our Terms of Use.

Please note that this Privacy Policy does not apply to the practices of third parties who you may choose to share information with when you use the Platform. Please note that the collection and use of your information by these third parties is subject to their own privacy policies and terms. You should understand the privacy and security practices of any third party before you share information with them. The Company does not control and is not responsible for the privacy practices of any third party.

The Platform is hosted in Mexico. If you are accessing our Platform from other jurisdictions, please be advised that you are transferring your personal information to us in Mexico, and by using our Platform, you consent to that transfer and use of your personal information in accordance with this Privacy Policy. You also agree to abide by the applicable laws of Mexico, Canada, applicable U.S. states, and U.S. federal law concerning your use of the Platform and your agreements with us. Any persons accessing our Platform from any jurisdiction with laws or regulations governing the use of the internet, including personal data collection, use and disclosure, different from those of the jurisdictions mentioned above may only use the Platform in a manner lawful in their jurisdiction. If your use of the Platform would be unlawful in your jurisdiction, please do not use the Platform.

From time to time, we may want to contact you with information about announcements, Platform updates, promotions, and special offers. We also may want to contact you with information about products and services from our business partners. You may opt out of such communications at any time by clicking the “unsubscribe” link found within the Company’s emails and changing your contact preferences.

To the extent the Company's processing activities are subject to the General Data Protection Regulation (EU) 2016/679 ("GDPR") or the UK GDPR, the following additional provisions apply to Users located in the European Economic Area or the United Kingdom.

For EEA Users: We only send marketing communications to Users located in the EEA with your prior consent. Please see the section “For EEA Users” below.

Gathering, Use and Disclosure of Non-Personally-Identifying Information

Users of the Platform Generally

“Non-Personally-Identifying Information” is information that, without the aid of additional information, cannot be directly associated with a specific person. “Personally-Identifying Information,” by contrast, is information such as a name or email address that, without more, can be directly associated with a specific person. Like most website operators, the Company gathers from Users Non-Personally-Identifying Information of the sort that web browsers and mobile device applications, depending on their settings, may make available. That information includes a User’s Internet Protocol (IP) address, operating system, browser type and the locations of websites or apps the User views right before arriving at, while navigating and immediately after leaving the Platform, as more fully described herein. For purposes of certain privacy laws, some of this information may be considered “personal information” when combined with other data. Although such information is not Personally-Identifying Information, it may be possible for the Company to determine from an IP address a User’s internet service provider and the geographic location of the visitor’s point of connectivity as well as other statistical usage data. The Company may analyze Non-Personally-Identifying Information gathered from Users to help the Company better understand how the Platform is being used. By identifying patterns and trends in usage, the Company is able to better design the Platform to improve Users’ experiences, both in terms of content and ease of use. From time to time, the Company may also release the Non-Personally-Identifying Information gathered from Users in the aggregate, such as by publishing a report on trends in the usage of the Platform. We retain Non-Personally-Identifying Information only for as long as necessary to fulfill the purposes described in this Privacy Policy, detect and prevent fraud, comply with legal obligations, and otherwise for legitimate business purposes.

Automatically Collected Information.

We may collect and process device, log, usage, communications, and analytics information to operate, secure, support, and improve the Platform, detect and prevent fraud, personalize User experiences, and for marketing purposes, based on our legitimate interests, contractual necessity, or your consent where required by law (e.g., EEA Users). Certain data about the devices you use to connect with our Platform and your use thereof are automatically logged in our systems, including:

Mobile Device Information. If you use a mobile device to access the Platform, we may collect device information (such as your mobile device ID, model, and manufacturer), operating system, version information and IP address.

Log data. As with most websites and technology services delivered over the internet, our servers automatically collect data when you access or use our Platform and record it in log files. This log data may include the IP address, browser type and settings, the date and time of use, information about browser configuration, language preferences, and cookie data.

Usage information. This is information about the Platform and how you use it. We may also obtain data from our third-party partners and service providers to analyze how Users use our Platform. For example, we will know how many Users access a specific page on the Platform and which links they clicked on. We use this aggregated information to better understand and optimize the Platform.

Device information. This is data from your computer or mobile device, such as the type of hardware and software you are using (for example, your operating system and browser type), as well as unique device identifiers for devices that are using our software.

Web Cookies. Data obtained from cookies are described below and in our Cookie Policy, which is incorporated into these Terms by reference.

Targeted Ads. We may use certain information to deliver personalized content, recommend features, measure engagement, and, where applicable, provide targeted advertising or promotional communications (“profiling”). Where required by applicable law, you have the right to object to such processing at any time. For more information about targeted ads, please read our Targeted Ads Preferences, which is incorporated into these Terms by reference, which describes your rights to opt out of certain advertising practices.

Web Cookies
Web cookies are small text files stored on your device and used by web browsers to deliver personalized content and remember login credentials, preferences, and account settings. The Company uses web cookies and similar technologies, including pixels, SDKs, and web beacons, to collect usage, device, and analytics information necessary to operate, secure, support, and improve the Platform, measure engagement, and, where applicable, deliver relevant promotional or marketing communications. Certain cookies or similar technologies may constitute “sharing” or “selling” of personal information under applicable state privacy laws. We honor browser-based Global Privacy Control (“GPC”) signals to the extent required by applicable law; however, certain Platform features may require the use of cookies or device identifiers for core functionality. For additional information about cookies and how we use them, please review our Cookie Policy.
PLATFORM USERS WHO DO NOT WISH TO HAVE WEB COOKIES PLACED ON THEIR DEVICES SHOULD CONFIGURE THEIR BROWSERS OR DEVICES TO REFUSE WEB COOKIES PRIOR TO ACCESSING THE PLATFORM, WITH THE UNDERSTANDING THAT CERTAIN FEATURES OR FUNCTIONALITY OF THE PLATFORM MAY NOT OPERATE PROPERLY WITHOUT THE USE OF COOKIES OR SIMILAR TECHNOLOGIES. PLATFORM USERS WHO DISABLE OR REFUSE WEB COOKIES ASSUME ALL RISKS ASSOCIATED WITH ANY RESULTING REDUCTION IN FUNCTIONALITY OR PERFORMANCE.
Web Beacons.

A “Web Beacon” is an object that is embedded in a web page or email that is usually invisible to the User and allows website operators to check whether a User has viewed a particular web page or an email. The Company may use Web Beacons on the Platform and in emails to count Users who have visited particular pages, viewed emails and to deliver co-branded services. Web Beacons are not used to access Users’ Personally-Identifying Information. They are a technique that the Company may use to compile aggregated statistics about Platform usage. Web Beacons collect only a limited set of information, including a number, time and date of a page or email view and a description of the page or email on which the Web Beacon resides. You may not decline Web Beacons. However, they can be rendered ineffective by declining all Web Cookies or modifying your browser setting to notify you each time a Web Cookie is tendered, permitting you to accept or decline Web Cookies on an individual basis.

Analytics.

We may use third-party analytics providers to analyze and track Platform usage, measure engagement, better understand how Users interact with the Platform. These providers may use cookies, pixels, SDKs, and similar technologies to collect information about your device, browser, and activity on the Platform. In some cases, we may use analytics services provided by third parties, including Google Analytics, which may employ first-party cookies (such as Google Analytics cookies) and, where applicable, third-party cookies or identifiers (such as DoubleClick cookies) in connection with advertising, analytics, or measurement services, including Google Analytics for Display Advertising. The information collected may be used to analyze trends, administer the Platform, improve functionality, measure campaign effectiveness, and better understand User behavior.

If you do not want your information to be collected or used by Google Analytics, you may install the Google Analytics Opt-out Browser Add-on available at https://tools.google.com/dlpage/gaoptout, and you may opt out of Google Analytics for Display Advertising or the Google Display Network by adjusting your Google Ads Settings at https://www.google.com/settings/ads. Additional information about cookies and similar technologies can be found in our Cookie Policy.

Aggregated and Non-Personally-Identifying Information

We may share aggregated and Non-Personally Identifying Information we collect under any of the above circumstances. We may also share it with third parties and our affiliate companies to develop, measure, and deliver targeted advertising on the Platform and, where applicable, on third-party websites. We may combine Non-Personally Identifying Information we collect with additional Non-Personally Identifying Information collected from other sources. We also may share aggregated information with third parties, including advisors, advertisers, and investors, for the purpose of conducting general business analysis. For example, we may tell our advertisers the number of visitors to the Platform and the most popular features or services accessed. This information does not contain any Personally-Identifying Information and may be used to develop Platform content and services that we hope you and other Users will find of interest and to target content and advertising.

Hosting and Infrastructure Providers

The Platform is hosted and supported by third-party infrastructure and hosting providers, which may process and store personal information on our behalf in order to operate, secure, and maintain the Platform. Such processing may include information such as IP addresses, device and browser information, usage and session data, and personal information submitted through forms, accounts, or Platform features. These providers act as our service providers or data processors and are authorized to process personal information solely for the purposes described in this Privacy Policy and in accordance with applicable data protection laws. Where required by law, we enter into data processing agreements with such providers and implement appropriate contractual, technical, and organizational safeguards to protect personal information.

Additional Terms for Mobile Device Users

Geo-Location Information. Unless we have received your prior consent, we do not access or track any location-based information from your mobile device at any time while accessing our Platform on your mobile device, except that it may be possible for the Company to determine from an IP address the geographic location of your point of connectivity, in which case we may gather and use such general location data.

Social Media. We may use hyperlinks on the Platform which will redirect you to a social network if you click on the respective link. Settings regarding privacy protection can be found on the websites or applications of these social networks and are not within our control. Please be aware that when you use third-party sites or services, their own terms and privacy policies will govern your use of those sites or services.

Collection, Use and Disclosure Of Personally-Identifying Information

Generally


As defined above, Personally-Identifying Information is information that can be directly associated with a specific person. The Company may collect a range of Personally-Identifying Information from and about Users. Much of the Personally-Identifying Information collected by the Company about Users is information provided by Users themselves when (1) explicitly asked by us to provide such information, or (2) communicating with us. Such information may include each User’s name, address, email address and telephone number. Users are under no obligation to provide the Company with Personally-Identifying Information of any kind, with the caveat that a User’s refusal to do so may prevent the User from using or accessing the Platform. For EEA Users, we process personal data based on contractual necessity, legal obligation, legitimate interests, and consent (for marketing communications, cookies, or other activities requiring consent). BY SUBMITTING ANY INFORMATION OR CONTENT THROUGH THE PLATFORM OR DIRECTLY TO US THROUGH MAIL OR EMAIL, YOU CONSENT TO THE USE AND DISCLOSURE OF YOUR PERSONALLY-IDENTIFYING INFORMATION AS DESCRIBED IN THIS “COLLECTION, USE AND DISCLOSURE OF PERSONALLY-IDENTIFYING INFORMATION” SECTION. We retain Personally-Identifying Information only for as long as reasonably necessary to fulfill the purposes for which it was collected, comply with legal obligations, resolve disputes, and enforce agreements. Retention periods vary based on the type of information and applicable legal requirements.

Company Communications.

We may occasionally use your name and email address to send you notifications regarding new services and products that we think you may find valuable. We may also send you service-related announcements from time to time through the general operation of the Platform. Generally, you may opt out of such emails through an unsubscribe link contained in our emails or by emailing us at privacy@ikonasleep.com.

Company Disclosures.

We will disclose Personally-Identifying Information under the following circumstances:

By Law or to Protect Rights. When we believe disclosure is appropriate, we may disclose Personally-Identifying Information in connection with efforts to investigate, prevent or take other action regarding illegal activity, suspected fraud or other wrongdoing; to protect and defend the rights, property or safety of the Company, our Users, our employees or others; to comply with applicable law or cooperate with law enforcement; to enforce our agreements or policies, in response to a subpoena or similar investigative demand, a court order or a request for cooperation from a law enforcement or other government agency; to establish or exercise our legal rights; to defend against legal claims; or as otherwise required by law. In such cases, we may raise or waive any legal objection or right available to us.

Business Partners. The Company may work with third-party business partners, including technology, analytics, hosting, and operational service providers, to assist us with operating and improving the Platform. When these partners process personal information on our behalf, they do so only for the purposes described in this Privacy Policy and in accordance with applicable law. We encourage you to review the privacy policies of any third party before disclosing your personal information to them.

Marketing Communications. Unless Users opt-out from receiving Company marketing materials as provided for herein, the Company may email Users about products and services that the Company believes may be of interest to them. If you wish to opt-out of receiving marketing materials from the Company, you may do so by following the unsubscribe link in the email communications or contacting us using the contact information below.

Advertising. Ads appearing on our Platform may be delivered to you by advertising partners, who may embed or set Cookies. These cookies allow the ad server to recognize your computer each time they send you an online advertisement to compile Non-Personally-Identifying Information about you or others who use your computer. This information allows ad networks to, among other things, deliver targeted advertisements that they believe will be of most interest to you. This Privacy Policy does not cover the use of cookies by any advertisers.

Some of the ads on our Platform may also be served by Google. Google's use of the DART Cookie enables it to serve ads to you based on your visit to our Platform and other sites on the Internet. DART uses Non-Personally-Identifying Information and does NOT track personal information about you, such as your name, email address, physical address, etc. You may opt out of the use of the DART Cookie by visiting Google’s Ad and Content Network Privacy Policy. For more information, please review our Cookie Policy and Targeted Ads Preferences.

Third-Party Service Providers. We may share your Personally-Identifying Information, which may include your name and contact information (including email address) with our authorized third-party service providers that perform certain services on our behalf. These services may include providing customer service and marketing assistance, performing business and sales analysis, supporting the Platform’s functionality, and supporting any beta services, surveys, and other features that may be offered through the Platform from time to time. Such third-party service providers referenced herein may have access to Personally-Identifying Information needed to perform their agreed-upon services. You acknowledge and agree that each third-party service provider to whom Personally-Identifying Information is shared may have their own privacy practices and the Company disclaims any liability for the re-use or dissemination of any Personally-Identifying Information by any third-party with whom your Personally-Identifying Information is shared.

Business Transfers; Bankruptcy. Company reserves the right to transfer all Personally-Identifying Information in its possession to a successor organization in the event of a merger, acquisition, bankruptcy or other sale of all or a portion of the Company’s assets. Other than to the extent ordered by a bankruptcy or other court, the use and disclosure of all transferred Personally-Identifying Information will be subject to this Privacy Policy, or to a new privacy policy if you are given notice of that new privacy policy and are given an opportunity to affirmatively opt-out of it. Personally-Identifying Information submitted or collected after a transfer, however, may be subject to a new privacy policy adopted by the successor organization.

Changing Personally-Identifying Information.

You may at any time review or change your Personally-Identifying Information by contacting us using the contact information below. Upon your request, we will deactivate or delete your contact information from our active databases. Such information will be deactivated or deleted as soon as practicable based on your activity and in accordance with our deactivation policy and applicable law. We may retain in our files some Personally-Identifying Information to prevent fraud, to troubleshoot problems, to assist with any investigations, to enforce our Privacy Policy, and to comply with legal requirements as is permitted by law. Therefore, you should not expect that all your Personally-Identifying Information will be completely removed from our databases in response to your requests. Additionally, we keep a history of changed information to investigate suspected fraud in connection with the use of our Platform.

General Use.


The Company uses the Personally-Identifying Information in the file we maintain about you, and other information we obtain from your current and past activities on the Platform to (1) communicate with you by email about the Company, its capabilities, and related offerings, where you have provided your contact information and where permitted by applicable law. We do not share your personal information with third parties for their own independent marketing purposes without your separate consent; (2) to develop and display content and advertising tailored to your interests on the Platform and other sites; (3) to resolve disputes and troubleshoot problems; (4) to measure consumer interest in our Platform; (5) to inform you of updates; (6) to customize your experience; (7) to detect and protect us against error, fraud and other criminal activity; (8) to enforce our Terms of Use; and (9) to do as otherwise described to you at the time of collection. At times, we may look across multiple Users to identify problems. In particular, we may examine your Personally-Identifying Information to identify Users using multiple User IDs or aliases. We may compare and review your Personally-Identifying Information for accuracy and to detect errors and omissions.

Security

We take the security of your Personally-Identifying Information seriously and use reasonable electronic, personnel and physical measures to protect it from loss, theft, alteration, or misuse. However, please be advised that even the best security measures cannot fully eliminate all risks. We cannot guarantee that only authorized persons will view your information. We are not responsible for third-party circumvention of any privacy settings or security measures. You acknowledge that no method of electronic transmission or storage of communications is completely secure, and that communications transmitted through the Platform may be processed and stored by third-party service providers as described herein.

Do-Not-Track Policy

Most web browsers and some mobile operating systems include a Do-Not-Track (“DNT”) feature or setting you can activate to signal your privacy preference not to have data about your online browsing activities monitored and collected. Because there is not yet a common understanding of how to interpret the DNT signal, the Platform currently does not respond to DNT browser signals or mechanisms.

Privacy Policy Changes

The Company may, in its sole discretion, change this Privacy Policy from time to time. Any and all changes to the Company’s Privacy Policy will be reflected on this page and the date new versions are posted will be stated at the bottom of this Privacy Policy. Unless stated otherwise, our current Privacy Policy applies to all information that we have about you. Users should regularly check this page for any changes to this Privacy Policy. The Company will always post new versions of the Privacy Policy on the Platform. However, the Company may, as determined in its discretion, decide to notify Users of changes made to this Privacy Policy via email or otherwise. Accordingly, it is important that Users always maintain and update their contact information when changes go into effect.

Ad Management Partners

The Company may engage third-party companies as partners (“Company Partners”) with whom Company may share the following data when providing ad management services to third-party publishers. The Company and its advertising partners collect and process the following information through the use of cookies, pixels, or server-to-server connections. Company Partners may process data for targeted advertising based on consent (EEA Users) or legitimate interests (U.S. Users). For California residents, data shared with partners may be subject to the right to opt-out of sale or sharing. None of the information listed below is retained by the Company after it is processed, and an advertisement is served. The information collected is only used for the listed purpose.

• Advertising Identifier
• IP Address
• Operating System type
• Operating System version
• Device Type and Model
• Cookie information
• Language of the website
• Web browser type
• Email (in hashed form)

Company Partners may also use this information to link to other end users’ information the partner has independently collected to deliver targeted advertisements. Company Partners may also separately collect data about end users from other sources, such as advertising IDs or pixels, and link that data to data collected from the Company advertisers and publishers in order to provide interest-based advertising across your online experience, including devices, browsers and apps. This data includes cookie information, device information, usage data, information about interactions between Users and advertisements and websites, geolocation data, traffic data, and information about a visitor’s referral source to a particular website. Company Partners may also create unique IDs to create audience segments, which are used to provide targeted advertising. For more information, please visit our Cookie Policy, which is incorporated into these Terms by reference.

If you would like more information about this practice and to know your choices to opt-in or opt-out of this data collection, please visit the Network Advertising Initiative. You may also visit Your Ad Choices and the NAI Opt-Out Page to learn more information about interest-based advertising. You may download the AppChoices app to opt out in connection with mobile apps or use the platform controls on your mobile device to opt out. For more information about cookies and how to disable them, you can consult the information at All About Cookies.

Children’s Online Privacy Protection

The Children’s Online Privacy Protection Act (“COPPA”), a U.S. federal law, protects the online privacy of children under thirteen (13) years of age. The Platform is not directed to children under thirteen (13) years of age. We do not knowingly collect or maintain Personally-Identifying Information from anyone under the age of thirteen (13), unless or except as permitted by law. Any person who provides Personally-Identifying Information through the Platform represents to us that he or she is at least thirteen (13) years of age or older. If we learn that Personally-Identifying Information has been collected from a User under thirteen (13) years of age on or through the Platform, then we will take the appropriate steps to cause this information to be deleted. If you are the parent or legal guardian of a child under thirteen (13) who has become a User or has otherwise transferred Personally-Identifying Information to us, please contact the Company using our contact information below to have that child’s information deleted.

U.S. State-Specific Notices

For Users who are residents of California, Colorado, Connecticut, Nevada, Utah, and Virginia, please read our Privacy Rights Summary Notice and Targeted Ad Preferences.

Additional Rights and Choices for California Residents.

If you are a California resident, the following additional rights may be available to you.

Shine the Light.

Users who are California residents may request (i) a list of categories of personal information disclosed to third parties during the immediately preceding calendar year for those third parties’ own direct marketing purposes; and (ii) a list of the categories of third parties to whom we disclosed such information. To exercise a request, please send us an email or a letter to the addresses in the section entitled “Contact Us” below and specify you are making a “California Shine the Light” request. We may require additional information from you to allow us to verify your identity and are only required to respond to requests once during any calendar year.

California Consumer Privacy Act of 2018 (CCPA).

Beginning January 1, 2020, the CCPA provides California residents with additional rights as described below. Please note your right to know and right to delete are subject to certain exceptions under the CCPA.

Notice of Collection.

During the past twelve (12) months, we may have collected the following categories of personal information that the CCPA covers:

• Identifiers, including name, email address, date of birth, phone number, IP address, and an ID or number assigned to you.
• Internet activity, including your interactions with our platforms and mobile applications.
• Geolocation data, including location enabled services such as GPS.
• Inferences, including information about your interests, preferences, and favorites.
• This privacy statement includes additional information about our data practices. For more information on information we collect, including the sources we receive information from, review this Privacy Policy in its entirety. We collect and use these categories of personal information for the business purposes described herein, including to provide and manage our platform.

Right to Know.

You have the right to know certain information about our data practices in the preceding twelve (12) months. You have the right to request the following information from us:

• The categories of personal information we have collected about you;
• The categories of sources from which the personal information was collected;
• The categories of personal information about you we disclosed for a business purpose or sold;
• The categories of third parties to whom the personal information was disclosed for a business purpose or sold;
• The business or commercial purpose for collecting or “selling” the personal information; and
• The specific pieces of personal information we have collected about you.

Right to Delete.

You have the right to request the deletion of personal information that we collect or maintain about you.

Right to Correct.

You have the right to request that we correct inaccurate personal information that we maintain about you, taking into account the nature of the personal information and the purposes for which it is processed. Upon receiving a verifiable request to correct inaccurate personal information, we will use commercially reasonable efforts to correct the information as required by applicable law.

Right to Limit Use of Sensitive Personal Information.

To the extent we collect or process sensitive personal information as defined under California law, you have the right to limit our use of such information to that which is necessary to perform the services reasonably expected by an average consumer, comply with legal obligations, ensure security and integrity, and perform other uses permitted by the California Privacy Rights Act and its implementing regulations. We do not use sensitive personal information for purposes that would require offering a “Limit the Use of My Sensitive Personal Information” link unless required by applicable law.

Right to Opt-Out of “Sale”.

We do not sell information as the term “sell” is traditionally understood. However, we may share or disclose certain information about you when you use our Platform for targeted advertising purposes, which may be considered a “sale” or “sharing” under the CCPA. For example, we may disclose information to advertising partners, advertising technology companies, and companies that perform advertising-related services in order to provide you with more relevant advertising tailored to your interests. This information may include identifiers such as your IP address, advertising identifiers, commercial information, your internet, or other electronic network information such as your interaction with an ad, geolocation data and inferences. To the extent the Company sells your personal information as the term “sell” or “share” is defined under the CCPA, you have the right to opt-out of the sale of your personal information by us to third parties at any time. You may submit a request to opt-out by clicking Do Not Sell My Personal Information and following the instructions, or by contacting us as set forth below.

How to Exercise Your CCPA Rights.

To exercise any of these rights, please email us at privacy@ikonasleep.com. In the request, please specify which right you are seeking to exercise and the scope of the request. We will confirm receipt of your request within ten (10) days. We may require specific information from you to help us verify your identity and process your request. This is a security measure to help ensure that your personal information is not disclosed to someone that does not have the right to receive it. If we are unable to verify your identity, we may deny your requests to know or delete.

If you choose to exercise any of these rights, you will not receive different prices or quality of services unless permitted by applicable law, including if those differences are reasonable related to your information.

Please note that if you opt out of receiving one form of communication, it does not mean you’ve opted out of other forms as well. For example, if you opt out of receiving marketing emails, you may still receive marketing text messages if you’ve opted in to receiving them.

For EEA Users

Individuals located in the European Economic Area (EEA) have certain rights in respect to their personal information, including the right to access, correct, or delete Personally-Identifying Information we process through your use of the Platform. If you’re a User based in the EEA, you can:

• Request a Personally-Identifying Information report by emailing us at the address provided below. This report will include the Personally-Identifying Information we have about you, provided to you in a structured, commonly used, and portable format. Please note that the Company may request additional information from you to verify your identity before we disclose any information.
• Have your Personally-Identifying Information corrected or deleted. Some Personally-Identifying Information can be updated by you: You can update your name and email address, as well as language preference, by emailing us at the address providing below.
• Object to us processing your Personally-Identifying Information. You can ask us to stop using your Personally-Identifying Information, including when we use your Personally-Identifying Information to send you marketing emails. We only send marketing communications to Users located in the EEA with your prior consent, and you may withdraw your consent at any time.
• Request that we transfer your Personally-Identifying Information to another person by e-mailing us at the e-mail address listed at the bottom of this Privacy Policy.
• Complain to a regulator. If you are based in the EEA and believe that we have not complied with data protection laws, you have a right to lodge a complaint with your local supervisory authority.

Aviso de Privacidad; Residents of Mexico.

In accordance with the Ley Federal de Protección de Datos Personales en Posesión de los Particulares ("LFPDPPP") and its Regulations, the following information applies to Users who are residents of Mexico.

Data Controller.

Ikano Industry Mexico S.A. de C.V., located Camino a los Nuncios No. 1000, Col. Otra No Especificada En El Catalogo, Ramos Arizpe, Coahuila, Mexico 25946, is responsible for the processing of your personal data.

Purposes of Processing.

We collect and process your personal data for the following primary purposes, which are necessary to provide you access to the Platform and respond to your inquiries: (i) responding to contact form submissions and general inquiries; and (ii) operating and improving the Platform. We may also process your personal data for the following secondary purposes, which are not necessary for the provision of the Platform but which support our business operations: (i) sending promotional communications about the Company and its products; and (ii) analytics and platform improvement. You may opt out of secondary processing purposes at any time by contacting us as described below.

ARCO Rights.

You have the right to Access, Rectify, Cancel, or Object to the processing of your personal data (collectively, "ARCO Rights") at any time. To exercise your ARCO Rights, please submit a written request to privacy@ikonasleep.com or to our address above, including your full name, contact information, a description of the right you wish to exercise, and any documents supporting your identity. We will respond within twenty (20) business days of receiving a complete request.

Data Transfers.

Your personal data may be transferred to third-party service providers acting on our behalf, including hosting, analytics, and technology providers, who are contractually bound to process your data only for the purposes described in this Privacy Policy. We do not transfer your personal data to third parties for their own independent use without your consent, except as required by law.

Changes to This Notice.

Any material changes to this Aviso de Privacidad will be communicated through the Platform or by email where required by applicable law.

Additional Rights for Canadian Residents.

If you are a resident of Canada, the following additional provisions apply to the processing of your personal information.

Consent.

We collect, use, and disclose your personal information with your knowledge and consent, except where otherwise permitted or required by law. By providing your personal information to us, you consent to the collection, use, and disclosure of your personal information as described in this Privacy Policy. You may withdraw your consent at any time, subject to legal or contractual restrictions and reasonable notice, by contacting us as described below. Withdrawal of consent may affect our ability to provide certain services or respond to your inquiries.

Access and Correction.

You have the right to request access to the personal information we hold about you and to request correction of any inaccuracies. To make such a request, please contact us using the information in the "Contact Us" section below.

Privacy Officer.

Our Privacy Officer is responsible for overseeing compliance with applicable Canadian privacy law. You may direct privacy inquiries or complaints to our Privacy Officer at privacy@ikonasleep.com.

Cross-Border Transfers.

Your personal information may be transferred to and processed in Mexico, the United States, or other jurisdictions outside Canada. When we transfer personal information outside Canada, we take steps to ensure that appropriate protections are in place, including contractual safeguards consistent with applicable Canadian privacy law.

Quebec Residents.

If you are a resident of Quebec, you have additional rights under Quebec's Act respecting the protection of personal information in the private sector (Law 25), including the right to data portability, the right to de-indexation in certain circumstances, and the right to be informed of any automated decision-making involving your personal information. For inquiries specific to Quebec privacy rights, please contact us at privacy@ikonasleep.com.

Contact Us

If you have any questions regarding our Privacy Policy, please contact us by email at privacy@ikonasleep.com.

Last updated: April 23, 2026

This page supplements our Terms of Use and Privacy Policy. If you are a California, Connecticut, Colorado, Utah, or Virginia consumer, this Privacy Rights Summary Notice (“Notice”) will apply to you. This Notice explains the categories of personal information/data (“personal information”) that we collect and how we use them in accordance with the California Consumer Privacy Act (“CCPA”) (as amended by the California Privacy Rights Act (“CPRA”), the Colorado Privacy Act (“CPA”), the Connecticut Data Privacy Act ("CTDPA"), the Utah Consumer Privacy Act ("UCPA"), and the Virginia Consumer Data Protection Act (“VCDPA”) (collectively, the “Privacy Laws”).

This also delivers information on certain opt-out rights concerning disclosures, “sales,” or “sharing” of personal information to third parties. Finally, this describes how we use “Sensitive Personal Information” and our retention schedule for each category of personal information.

Personal Information Collection
We may collect (and may have collected during the 12-month period prior to the effective date of this Policy) the following categories of personal information about you:

• Identifiers such as your name, alias, address, phone numbers and IP address;
• personal information, such as a credit card number or other payment information;
• commercial information;
• internet or other electronic network activity information, including content interaction information, such as content downloads, streams, and playback details, and the content of email and text messages;
• geolocation data, such as the location of your device or computer, which may in some cases constitute precise geolocation information;
• education information;
• professional information; and/or
• inference data.

Our Platform is designed for a general audience and is not directed to children. We do not knowingly collect or solicit personal information from children under the age of thirteen (13) (or other relevant ages, which may apply by virtue of applicable law).

Personal Information Uses

During the last twelve (12) months, we may have used the personal information we collect for the following business or commercial purposes:

• Facilitating accounting, auditing, and reporting;
• Delivering analytics (machine generated through computing/mobile devices for performance, monitoring, personalization, and order processing);
• Delivering advertising through technology (including, for example, to facilitate personalized content, remarketing, online display ads, and interest-based ads);
  Delivering advertising through direct or mass media (including, for example, via email, SMS, telephone, post, and broadcasts);
• Facilitating affiliate marketing;
• Administering claims management, handling, and insurance;
• Responding to incidents;
• Delivering customer service;
• Pursuing legal matters;
• Delivering website, mobile-app, and e-commerce services;
• Facilitating information security;
• Facilitating fraud monitoring and prevention;
• Delivering logistics (including, order management, shipping, and fulfillment);
• Developing customer information for personalization;
• Processing, fulfilling, and shipping orders;
• Delivering shopping and customer engagement;
• Delivering and improving social media engagement;
• Conducting surveys;
• Administering technology and ensuring technology integrity (including, for example, by maintaining and improving networks; and identifying and fixing problems);
• Processing transactions and payments;
• Developing, reviewing, and testing products and services; and/or
• Performing other miscellaneous services.

Opting Out of “Sale” or “Share” of Personal Information
You also have the right to opt out of the “selling” or “sharing” of your personal information. We do not have actual knowledge that we sell or share personal information of consumers under the age of sixteen (16).

To specify your preferences, certain consumers can visit our Do Not Sell My Personal Information page. We will not deny, charge different prices for, or provide a different level or quality of goods or services, if you choose to exercise any of your privacy rights.

Opting Out of Information Disclosures to Unaffiliated Third Parties
In addition to the rights mentioned above, we provide you with a cost-free means to opt-out of our sharing your information with third parties with whom we do not share the same brand name, if that third party will use it for its own direct marketing purposes.

If you would like to exercise this right under California law, please complete the form on our Do Not Sell My Personal Information page.

Sensitive Personal Information
We will only process Sensitive Personal Information where it is necessary for the purposes of carrying out our legal obligations or exercising specific rights as permitted by law.

Retention Policy
We seek to ensure that we retain only information necessary to effectively service our customers; provide relevant product assortments and advertisements; assist you with customer service-related matters; and comply with our legal obligations. The need to retain personal information varies widely with the type of information and the purpose for which it was collected. We strive to ensure that personal information is only retained for the period to fulfill the purpose for which it was collected. Where applicable, we rely on one or more of the following legal bases: contractual necessity, legitimate interests, legal obligation, or your consent.

Contact Us
If you have general questions about this Notice, please email us at or write to us at privacy@ikonasleep.com or by mail at:

Camino a los Nuncios #1000
Col. Otra No Especificada En El Catalogo
Ramos Arizpe, Coahuila
Mexico 25946

Last Updated: April 23, 2026

Introduction to Cookies.

‍This Cookie Policy (“Cookie Policy”) provides detailed information about why, how, and when we use Cookies on our Platform and Service, as defined in our Terms of Use and Privacy Policy. Any capitalized terms used in this Cookie Policy but not defined herein, have the meanings set forth in in our Terms of Use. By accessing our Platform, you agree to our use of strictly necessary cookies as further set forth herein. Where required by applicable law, we will obtain your separate consent before placing non-essential cookies on your device. We use a cookie consent management platform using Usercentrics to manage cookie preferences and obtain, record, and maintain user consent in accordance with applicable laws. If you are accessing our Platform via any other third-party application or site, you expressly agree to be bound by the notices, terms, and conditions posted thereon.

‍What is a Cookie?

‍A Cookie is a small text file that is placed on your hard drive by a web page server. Cookies contain information that can later be read by a web server in the domain that issued the Cookie to you. Some of the Cookies will only be used if you use certain features or select certain preferences, and some Cookies are essential to the Platform and will always be used. Web beacons, tags, and scripts may be used in the Platform or in emails to help us deliver Cookies and count visits, understand usage and campaign effectiveness, and determine whether an email has been opened and acted upon. We may receive reports based on the use of these technologies by our service/analytics providers (for example, Google Analytics) on an individual and aggregated basis.

‍Why does Company use Cookies?

The Company and our marketing partners, affiliates, and analytics or service providers use Cookies and other technologies to ensure everyone who uses the Platform has the best possible experience. For example, when you use our Platform, we may place a number of Cookies in your browser. We use these Cookies to enable us to hold session information as you navigate from page to page within the Platform, improve your experience, and track and analyze usage and other statistical information. If you elect not to activate the Cookie or to later disable Cookies, you may still visit our Platform, but your ability to use some features or areas of those offerings may be limited.

‍How to Disable Cookies.

You may also manage your cookie preferences at any time through the cookie consent tool available on our Platform. You can generally activate or later deactivate the use of Cookies through a functionality built into your web browser. To learn more about how to control Cookie settings through your browser:

Click here to learn more about managing Cookie settings in Mozilla Firefox;
Click here to learn more about managing Cookie settings in Google Chrome;
Click here to learn more about managing Cookie settings in Microsoft Internet Explorer;
Click here to learn more about managing Cookie settings in Safari;
Click here to learn more about managing Cookie settings in Microsoft Edge.

If you want to learn more about Cookies or how to control, disable, or delete them, please visit www.allaboutcookies.org for detailed guidance. In addition, certain third-party advertising networks, including Google, permit users to opt out of or customize preferences associated with your Internet browsing. To learn more about this feature from Google, click here.

‍Types of Cookies that Company Uses.

‍Many jurisdictions require or recommend that website operators inform users/visitors as to the nature of Cookies they utilize and, in certain circumstances, obtain the consent of their users to the placement of certain Cookies. Each Cookie used by the Company generally falls within one of the following categories:

Essential Cookies:

Essential Cookies (First-Party Cookies) are sometimes called “strictly necessary,” as without them we cannot provide many services that you need. For example, essential Cookies help remember your preferences as you use our Platform, Products, and/or Services.

‍Analytics Cookies:

These Cookies track information about your visits and usage of the Platform, Products, and/or Services so that we can make improvements and report our performance — for example, to analyze visitor and user behavior so as to provide more relevant content or suggest certain activities. We might also use analytics Cookies to test new ads, pages, or features to see how users react to them. Google Analytics is the main technology we currently use in this regard. To learn more about Google Analytics and your privacy, visit the “How Google uses data when you use our partners’ sites or apps” page at www.google.com/policies/privacy/partners/. To opt out of being tracked by Google Analytics when using our website, visit http://tools.google.com/dlpage/gaoptout.

Functionality or Preference Cookies:

During your visit to the Platform, Cookies are used to remember information you have entered or choices you make (such as your username, language, or your region). They also store your preferences when personalizing the Platform to optimize your use of the Platform (for example, your preferred language). These preferences are remembered through the use of persistent Cookies, and the next time you visit the Platform or use our Products or Services, you will not have to set them again.

‍Targeting or Advertising Cookies:

These Third-Party Cookies are placed by third-party advertising platforms or networks in order to deliver ads and track ad performance or enable advertising networks to deliver ads that may be relevant to you based upon your activities (this is sometimes called “behavioral tracking” or “targeted” advertising) on the Platform. They may subsequently use information about your visit to target you with advertising that you may be interested in on the Platform and other websites. You can opt out of interest-based targeting provided by participating ad servers through the Digital Advertising Alliance (http://youradchoices.com).

Cookies Subject to Change.

The content of this Cookie Policy is for your general information and use only. You acknowledge that this information is subject to change.

Updating this Cookie Policy.

‍If there are any material changes to this Cookie Policy, you will be notified by the posting of a prominent notice on our Platform prior to the change becoming effective. We encourage you to periodically review this page for the latest information. Your continued use of the Platform, Products, and/or Services constitutes your agreement to be bound by such changes to this Cookie Policy. Your only remedy, if you do not accept the terms of this Cookie Policy, is to discontinue use of and access to the Platform, Products, and/or Services.

Contact Us.
If you have any questions regarding this Cookie Policy or how the Company uses Cookies, you may contact us by emailing us at privacy@ikonasleep.com.

Last Updated: April 23, 2026

Ikano Industry Mexico S.A. de C.V., aims to be fully transparent about how we treat your personal information/data (“personal information”). Certain states, namely, California, Colorado, Connecticut, Utah, Virginia, give consumers of those states the right to opt out of certain data sharing practices that could constitute “selling,” “sharing,” or “profiling” (collectively, “share” or “sharing”) under these laws. You may opt out of profiling in furtherance of decisions that produce legal or similarly significant effects, where applicable. The Company does not currently engage in automated decision-making that produces legal or similarly significant effects concerning Platform visitors. On this page, you can learn about our data-sharing practices and exercise your right to opt out of certain data sharing practices concerning your personal information.

Please follow the steps outlined in all three sections below (“Affiliate and Third-Party Preferences”, “Targeting Cookies Preferences”, and “Digital Vendor Preferences”) to fully exercise your privacy choices.

Affiliate And Third-Party Preferences
To opt out of sharing your personal information with our affiliates and other companies for their own marketing purposes, please click the following link and fill out the form located on our Do Not Sell My Information page.

Targeting Cookies Preferences
We allow our advertising partners to collect certain information through cookies and similar technologies on our Platform, which is used to show you ads that are targeted to your interests. To learn more about opting out of selling or sharing of information facilitated by these cookies, click the link below, please visit our Cookie Policy.

We may also recognize Global Privacy Control (GPC) signals from your web browser or web browser extension to automatically opt you out of the selling or sharing of information facilitated by these cookies. For more information about GPC, please visit Global Privacy Control.

IMPORTANT: Please note that you will need to repeat this process on each device, browser, and digital environment you use to access our Platform. You will need to repeat this process again if you delete cookies on any of your browsers or devices. For information about our privacy practices, please visit our Privacy Policy.

Digital Vendor Preferences
Below are a few other choices you have to control sharing of your information in connection with targeted advertising:

• In your browser or mobile device (via settings), you can exercise choices related to sharing of device identifier information with app developers and other businesses for advertising purposes. The settings vary based on the browser or mobile platform you use (e.g., Apple or Android).
• Visit NAI Opt Out or DAA Opt Out to learn about other methods to opt out of interest-based advertising. Both organizations operate a centralized registry that displays and manages opt-out preferences for participating advertising-technology providers.

Last Updated: April 23, 2026

Certain state laws give consumers the right to opt out of the "sale" or "sharing" of their personal information with third parties. We may share certain information about Platform visitors, such as cookie identifiers, IP addresses, and usage data, with analytics and advertising technology partners in ways that may constitute "selling" or "sharing" under applicable law. This page explains how you can exercise your opt-out rights.

Certain state laws may classify some cases of limited information sharing with advertising partners through the use of these services as a “sale” of personal information from which you may have the right to opt-out. This is because the companies that provide these services and our advertising partners may collect some information from our users (e.g., cookies, advertising IDs, IP addresses, and usage activity) to help them understand how people interact with advertising content on and off of our services and content, and to serve ads that they think users may want to see based on their online activity.

You may exercise your right to opt out by taking the steps below. You have the ability to restrict this use of cookies and advertising IDs.

There are a few different ways you can do this for cookies:

• You can use your browser’s settings to clear, delete, or prevent cookies. Instructions for how to do this on the different types of browsers can be found here.
• We may use Google tools to measure and serve advertisement. Please click here to control your advertisement preferences with Google, or here for additional tools to opt-out of personalized ads and cookies from Google.
• We may use Amazon tools to measure and serve advertisement. Please click here to control your advertisement preferences with Amazon, and here to learn more about how Amazon conducts these services.
• Many of our advertisement partners collect information by using a tag or pixel implemented by a company that is a member of the National Advertising Initiative and/or the Digital Advertising Alliance, both of which participate in opt-outs. These organizations can help you install opt-out “do not track” cookies on your browser, so that member companies that have committed to honoring them will stop serving you interest based-advertisements. You can have these opt-out cookies placed on your browser by clicking here and here. Please note that if you have configured your browser’s settings to block cookies you may not be able to set the opt-out cookie and may see a message that an “Opt-Out is Blocked by Browser Settings,” or that an “Opt-Out is Temporarily Unavailable.” In addition, if you clear or delete cookies on a particular browser, you will need to reset the opt-out cookie. If you use different computers or browsers, you may need to replicate your choices across those computers and browsers.
• Additionally, you can also restrict the collection and use of advertising IDs on your mobile device. Instructions for how to do this can be found here. If you use multiple mobile devices, you will need to replicate your selections across these devices.
  
  
  Last Updated: April 23, 2026