Privacy
Last updated: August 12, 2025
This Privacy Policy describes how Drowsy Digital, Inc. and our subsidiaries and affiliates (“Ozlo,” “we”, “us” or “our”) process personal information that we collect through our digital or online properties or services that link to this Privacy Policy (including as applicable, our websites (including https://ozlosleep.com/), mobile application, social media pages, marketing activities, live events and other activities described in this Privacy Policy (collectively, the “Service”)). Additionally, our Supplemental US Notice, Supplemental EU-UK Notice, Supplemental Canadian Notice, Supplemental Australian Notice and Consumer Health Data Privacy Policy supplement this Privacy Policy and, for residents of these respective jurisdictions, include important additional information, including about your rights, under applicable privacy laws. Ozlo may provide additional or supplemental privacy policies to individuals for specific products, other websites, or services that we offer at the time we collect personal information.
Index
Personal Information We Collect
How We Use Your Personal Information
How We Share Your Personal Information
Changes to this Privacy Policy
Supplemental Australian Notice
Consumer Health Data Privacy Policy
Personal Information We Collect
- Information you provide to us. Personal information you may provide to us through the Service or otherwise includes:
- Contact data, such as your first and last name, salutation, email address, billing and mailing addresses, professional title and company name, and phone number.
- Demographic data, such as your city, state, province, territory, country of residence, postal code, gender, and age.
- Profile data, such as the username and password that you may set to establish an online account on the Service, date of birth, biographical details, photograph or picture, links to your profiles on social networks, interests, preferences, and any other information that you add to your account profile.
- Communications data based on our exchanges with you, including when you contact us through the Service, communicate with us via chat features, social media, or otherwise.
- Transactional data, such as information relating to or needed to complete your orders on or through the Service, including order numbers, shipping details and transaction history.
- Marketing data, such as your preferences for receiving our marketing communications and details about your engagement with them.
- Wellness and health related data and inferences, such as lifestyle preferences, exercise habits, respiration rate, sleep-related information and any other information that you voluntarily provide via the Services or when you choose to share activity or health data from your device (e.g., your phone’s accelerometer) or link or share through other third-party platforms or activity trackers to the Services, such as Apple Health or Google Fit. We may use some of this information to derive inferences concerning your sleep quality.
- Ambient environment data, such as details about your environment that might impact your sleep, including the amount of light and general volume of sound around you. Please note that while the microphone contained in your Ozlo device will capture general information about your surrounding environment (e.g., volume of sounds in the room), the Service will not collect details about or recordings of these sounds other than to detect decibel level.
- Payment data needed to complete transactions, including payment card information or bank account number.
- Other data not specifically listed here, which we will use as described in this Privacy Policy or as otherwise disclosed at the time of collection.
Third-party sources. We may combine personal information we receive from you with personal information we obtain from other sources, such as:
- Public sources, such as government agencies, public records, social media platforms, and other publicly available sources.
- Our affiliate partners, such as our affiliate network provider and publishers, influencers, and promoters who participate in our paid affiliate programs.
- Marketing and sales partners, such as joint marketing partners, event co-sponsors and resellers.
- Activity trackers, such as when you choose to connect or link other third-party platforms or activity trackers to the Services, such as Apple Health or Google Fit.
- Third-party services, such as social media services, that you use to log into, or otherwise link to, your Service account. This data may include your username, profile picture and other information associated with your account on that third-party service that is made available to us based on your account settings on that service.
- References, such as when we offer opportunities to refer a friend to use our Service. Please do not provide us with any person’s contact or other information without first obtaining that person’s permission.
Automatic data collection. We, our service providers, and our business partners may automatically log information about you, your computer or mobile device, and your interaction over time with the Service, our communications and other online services, such as:
- Device data, such as your computer or mobile device’s operating system type and version, manufacturer and model, browser type, screen resolution, RAM and disk size, CPU usage, device type (e.g., phone, tablet), IP address, unique identifiers (including identifiers used for advertising purposes), language settings, mobile device carrier, radio/network information (e.g., Wi-Fi, LTE, 3G), and general location information such as city, state or geographic area.
- Online activity data, such as pages or screens you viewed, how long you spent on a page or screen, the website you visited before browsing to the Service, navigation paths between pages or screens, information about your activity on a page or screen, access times and duration of access, and whether you have opened our emails or clicked links within them.
- Precise geolocation data when you authorize our mobile application to access your device’s location.
- Communication interaction data such as your interactions with our email, text or other communications (e.g., whether you open and/or forward emails) – we may do this through use of pixel tags (which are also known as clear GIFs), which may be embedded invisibly in our emails.
Cookies and similar technologies. Some of the automatic collection described above is facilitated by the following technologies:
- Cookies, which are small text files that websites store on user devices and that allow web servers to record users’ web browsing activities and remember their submissions, preferences, and login status as they navigate a site. Cookies used on our sites include both “session cookies” that are deleted when a session ends, “persistent cookies” that remain longer, “first party” cookies that we place and “third party” cookies that our third-party business partners and service providers place.
- Local storage technologies, like HTML5, that provide cookie-equivalent functionality but can store larger amounts of data on your device outside of your browser in connection with specific applications.
- Web beacons, also known as pixel tags or clear GIFs, which are used to demonstrate that a webpage or email was accessed or opened, or that certain content was viewed or clicked. These may come in the form of small transparent graphic images that are automatically loaded onto your browser/device when you visit a website or open an html format email message.
How We Use Your Personal Information
We may use your personal information for the following purposes or as otherwise described in this Privacy Policy or at the time of collection:
Service delivery and operations. We may use your personal information to:
- generally provide, operate and improve the Service and our business;
- personalize the service, including remembering the devices from which you have previously logged in and remembering your selections and preferences as you navigate the Service;
- establish and maintain your user profile on the Service;
- enable security features of the Service, such as by sending you security codes, and remembering devices from which you have previously logged in;
- communicate with you about the Service, including by sending Service-related announcements, updates, security alerts, and support and administrative messages;
- communicate with you about events or contests in which you participate;
- understand your needs and interests, and personalize your experience with the Service and our communications; and
- provide support for the Service, and respond to your requests, questions and feedback.
Research and development. We may use your personal information for research and development purposes, including to analyze and improve the Service and our business and to develop new products and services.
Marketing and advertising. We, our service providers and our third-party advertising partners may collect and use your personal information for marketing and advertising purposes:
- Direct marketing. We may send you direct marketing communications and may personalize these messages based on your needs and interests. You may opt-out of our marketing communications as described in the Opt-out of marketing section
- Interest-based advertising. In accordance with your selections in Your Privacy Choices, our third-party advertising partners may use cookies and similar technologies to collect information about your interaction (including the data described in the automatic data collection section above) with the Service, our communications and other online services over time, and use that information to serve online ads that they think will interest you. This is called interest-based advertising. We may also share information about our users with these companies to facilitate interest-based advertising to those or similar users on other online platforms.
Service improvement and analytics. We may use your personal information to analyze your usage of the Service, improve the Service, improve the rest of our business, help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails, and to develop new products and services.
Compliance and protection. We may use your personal information to:
- comply with applicable laws, lawful requests, and legal process, such as to respond to subpoenas, investigations or requests from government authorities;
- protect our, your or others’ rights, privacy, safety or property (including by making and defending legal claims);
- audit our internal processes for compliance with legal and contractual requirements or our internal policies;
- enforce the terms and conditions that govern the Service; and
- prevent, identify, investigate and deter fraudulent, harmful, unauthorized, unethical or illegal activity, including cyberattacks and identity theft.
With your consent. In some cases, we may specifically ask for your consent to collect, use or share your personal information, such as when required by law.
To create aggregated, de-identified and/or anonymized data. We may create aggregated, de-identified and/or anonymized data from your personal information and other individuals whose personal information we collect. We make personal information into de-identified and/or anonymized data by removing information that makes the data identifiable to you. We may use this aggregated, de-identified and/or anonymized data and share it with third parties for our lawful business purposes, including to analyze and improve the Service, such as to train our AI models and for other machine learning purposes, and to otherwise promote our business.
Cookies and similar technologies. In addition to the other uses included in this section, subject to Your Privacy Choices, we may use cookies and similar technologies described above for the following purposes:
- Technical operation. To allow the technical operation of the Service, such as by remembering your selections and preferences as you navigate the site, and whether you are logged in when you visit password protected areas of the Service.
- Functionality. To enhance the performance and functionality of our services.
- Advertising. To help our third-party advertising partners collect information about how you use the Service and other online services over time, which they use to show you ads on other online services they believe will interest you and measure how the ads perform.
- Analytics. To help us understand user activity on the Service, including which pages are most and least visited and how visitors move around the Service, as well as user interactions with our emails. For example, we use Google Analytics for this purpose. You can learn more about Google Analytics and how to prevent the use of Google Analytics relating to your use of our sites here: https://tools.google.com/dlpage/gaoptout?hl=en.
Retention. We generally retain personal information to fulfill the purposes for which we collected it, including for the purposes of satisfying any legal, accounting, or reporting requirements, to establish or defend legal claims, or for fraud prevention purposes. To determine the appropriate retention period for personal information, we may consider factors such as the amount, nature, and sensitivity of the personal information, the potential risk of harm from unauthorized use or disclosure of your personal information, the purposes for which we process your personal information and whether we can achieve those purposes through other means, and the applicable legal requirements.
When we no longer require the personal information, we have collected about you, we may either delete it, anonymize it, or isolate it from further processing.
How We Share Your Personal Information
We may share your personal information with the following parties and as otherwise described in this Privacy Policy, in other applicable notices, or at the time of collection.
Affiliates. Our corporate parent, subsidiaries, and affiliates.
Service providers. Third parties that provide services on our behalf or help us operate the Service or our business (such as hosting, information technology, customer support, online chat functionality providers, email delivery, marketing, consumer research and website analytics).
Payment processors. Any payment card information you use to make a purchase on the Service is collected and processed directly by our payment processors, such Stripe or Shopify. Stripe and Shopify may use your payment data in accordance with their own privacy policy available at https://stripe.com/privacy and https://www.shopify.com/legal/privacy.
Advertising partners. Third-party advertising companies for the interest-based advertising purposes described above.
Third parties designated by you. We may share your personal information with third parties where you have instructed us or provided your consent to do so. For example, we may share your personal information with family members or other third parties at your direction.
Business and marketing partners. In accordance with your preferences, third parties with whom we co-sponsor events or promotions, with whom we jointly offer products or services, who help facilitate purchases of our products or services (including resellers), or whose products or services may be of interest to you.
Linked third-party services. If you log into the Service with, or otherwise link your Service account to, a social media or other third-party service, we may share certain personal information with that third-party service. The third party’s use of the shared information will be governed by its privacy policy and the settings associated with your account with the third-party service.
Professional advisors. Professional advisors, such as lawyers, auditors, bankers and insurers, where necessary in the course of the professional services that they render to us.
Authorities and others. Law enforcement, government authorities, and private parties, as we believe in good faith to be necessary or appropriate for the Compliance and protection purposes described above.
Business transferees. We may disclose personal information in the context of actual or prospective business transactions (e.g., investments in Ozlo, financing of Ozlo, public stock offerings, or the sale, transfer or merger of all or part of our business, assets or shares), for example, we may need to share certain personal information with prospective counterparties and their advisers. We may also disclose your personal information to an acquirer, successor, or assignee of Ozlo as part of any merger, acquisition, sale of assets, or similar transaction, and/or in the event of an insolvency, bankruptcy, or receivership in which personal information is transferred to one or more third parties as one of our business assets.
Your Choices
In this section, we describe the rights and choices available to all users. Residents of certain jurisdictions may have additional rights available to them under applicable privacy laws, as described in our Supplemental US NoticeSupplemental EU-UK Notice, Supplemental Canadian Notice, Supplemental Australian Notice and Consumer Health Data Privacy Policy.
Access or update your information. If you have registered for an account with us through the Service, you may review and update certain account information by logging into the account.
Opt-out of communications. You may opt-out of marketing-related emails by following the opt-out or unsubscribe instructions at the bottom of the email, or by emailing us at marketingunsubscribe@ozlosleep.com. Please note that if you choose to opt-out of marketing-related emails, you may continue to receive service-related and other non-marketing emails.
If you receive text messages from us, you may opt out of receiving further text messages from us by replying STOP to our message.
Cookies. You may manage your cookie preferences on our website by visiting Your Privacy Choices. Additionally, most browsers let you remove or reject cookies. To do this, follow the instructions in your browser settings. Many browsers accept cookies by default until you change your settings. Please note that if you set your browser to disable cookies, the Service may not work properly. For more information about cookies, including how to see what cookies have been set on your browser and how to manage and delete them, visit www.allaboutcookies.org. You can also configure your device to prevent images from loading to prevent web beacons from functioning.
Blocking images/clear gifs: Most browsers and devices allow you to configure your device to prevent images from loading. To do this, follow the instructions in your particular browser or device settings. Note that this will generally prevent all images from loading, not just clear gifs.
Mobile location data. You can enable/disable our access to your device’s precise geolocation in your mobile device settings.
Advertising choices. You may be able to limit use of your information for interest-based advertising through the following settings/options/tools:
- Your Privacy Choices. Changing your preferences through our Your Privacy Choices
- Browser settings. Changing your internet web browser settings to block third-party cookies.
- Privacy browsers/plug-ins. Using privacy browsers and/or ad-blocking browser plug-ins that let you block tracking technologies.
- Platform settings. Google and Facebook offer opt-out features that let you opt-out of use of your information for interest-based advertising on or through those platforms. You may be able to exercise that option at the following websites:
- Google: https://adssettings.google.com/
- Facebook: https://www.facebook.com/about/ads
- Ad industry tools. Opting out of interest-based ads from companies that participate in the following industry opt-out programs:
- Network Advertising Initiative: http://www.networkadvertising.org/managing/opt_out.asp
- Digital Advertising Alliance: optout.aboutads.info
- AppChoices mobile app, available at https://www.youradchoices.com/appchoices, which will allow you to opt-out of interest-based ads in mobile apps served by participating members of the Digital Advertising Alliance.
- Mobile settings. Using your mobile device settings to limit use of the advertising ID associated with your mobile device for interest-based advertising purposes.
You will need to apply these opt-out settings on each device and browser from which you wish to limit the use of your information for interest-based advertising purposes.
We cannot offer any assurances as to whether the companies we work with participate in the opt-out programs described above.
Do Not Track. Some Internet browsers may be configured to send “Do Not Track” signals to the online services that you visit. We currently do not respond to “Do Not Track” signals. To find out more about “Do Not Track,” please visit http://www.allaboutdnt.com.
Declining to provide information. We need to collect personal information to provide certain services. If you do not provide the information we identify as required or mandatory, we may not be able to provide those services.
Linked third-party platforms. If you choose to connect to the Service through your social media account or other third-party platform, you may be able to use your settings in your account with that platform to limit the information we receive from it. If you revoke our ability to access information from a third-party platform, that choice will not apply to information that we have already received from that third party.
Delete your content or close your account. You can choose to delete certain content through your account. If you wish to request to close your account, please contact us.
Other Sites And Services
The Service may contain links to websites, mobile applications, and other online services operated by third parties. In addition, our content may be integrated into web pages or other online services that are not associated with us. These links and integrations are not an endorsement of, or representation that we are affiliated with, any third party. We do not control websites, mobile applications or online services operated by third parties, and we are not responsible for their actions. We encourage you to read the privacy policies of the other websites, mobile applications and online services you use.
Security
We employ a number of technical, organizational and physical safeguards designed to protect the personal information we collect. However, security risk is inherent in all internet and information technologies and we cannot guarantee the security of your personal information.
International Data Transfer
We are headquartered in the United States and may use service providers that operate in other countries. Your personal information may be transferred to the United States or other locations where privacy laws may not be as protective as those in your state, province, or country.
Users in Europe should read the important information provided in our Supplemental EU-UK Notice about transfer of personal information outside of Europe.
Children
The Service is not intended for use by anyone under 18 years of age. If you are a parent or guardian of a child from whom you believe we have collected personal information in a manner prohibited by law, please contact us. If we learn that we have collected personal information through the Service from a child without the consent of the child’s parent or guardian as required by law, we will comply with applicable legal requirements to delete the information.
Changes to this Privacy Policy
We reserve the right to modify this Privacy Policy at any time. If we make material changes to this Privacy Policy, we will notify you by updating the date of this Privacy Policy and posting it on the Service or other appropriate means. Any modifications to this Privacy Policy will be effective upon our posting the modified version (or as otherwise indicated at the time of posting). In all cases, your use of the Service after the effective date of any modified Privacy Policy indicates your acknowledging that the modified Privacy Policy applies to your interactions with the Service and our business.
How to Contact Us
Email: support@ozlosleep.com
Mail: 850 New Burton Rd Ste 201 Dover DE 19904
Phone: 1-833-GET-OZLO
Supplemental US Notice
Last Updated: August 12, 2025.
This Supplemental US Notice supplements the information contained in our Privacy Policy and describes how Ozlo processes personal information about residents of states that have privacy laws applicable to us that grant their residents some or all of the rights described below (collectively, the “State Privacy Laws”). This Supplemental US Notice applies only to residents of states with State Privacy Laws. In the event of any conflict or inconsistency between this notice and our Privacy Policy, this Supplemental US Notice will control for residents of states with State Privacy Laws. Unless otherwise expressly stated herein, all terms in this Supplemental US Notice have the same meaning as defined in our Privacy Policy or as otherwise defined by the privacy law of the state of your residence (such as, for California residents, the California Consumer Privacy Act of 2018, as amended (“CCPA”)).
This Supplemental US Notice describes how we collect, use and share personal information of consumers in our capacity as a “controller” or “business” and describes the rights consumers in covered states may have with respect to their personal information. In some cases, we may provide a different privacy notice to certain categories of residents of covered states, such as job applicants, in which case that notice will apply instead of this.
For purposes of this Supplemental US Notice, the terms “personal information” and “sensitive personal information” have the meanings provided to these terms (or analogous terms) by the State Privacy Laws, as applicable, and do not include information exempted from the scope of those laws. Similarly, for purposes of this Supplemental US Notice, the terms “sell,” “share,” “targeted advertising” and “profiling” have the meanings provided to these terms by State Privacy Laws, as applicable, and do not include activities exempted from the scope of those laws.
Your privacy rights. The State Privacy Laws may provide residents with some or all of the rights listed below. However, these rights are not absolute and some State Privacy Laws do not provide these rights to their residents. Therefore, we may decline your request in certain cases as permitted by law.
- You may have the right to request information concerning whether we are processing your personal information as well as the following information about how we have collected and used your personal information:
- The categories or specific pieces of personal information that we have collected about you and inferences derived from such personal information.
- The categories of sources from which we collected personal information.
- The business or commercial purpose for collecting and/or selling or sharing personal information.
- The categories of third parties with which we share personal information.
- The categories of personal information that we sold or disclosed for a business purpose.
- A list or the categories of third parties to whom your personal information (or any personal information) was sold or disclosed for a business purpose.
- You may have the right to request a copy of the personal information that we have collected about you. If available in a digital format, you may have the right to request a copy of your personal information be provided in a portable and, to the extent technically feasible, readily usable format.
- You may have the right to appeal our denial of any request validly submitted. If so and we deny your request, we will inform you of the reason for denying your request and provide you with instructions on how you may be able to appeal the decision. If we deny your appeal, we will also inform you, if applicable, of any online mechanism that may be available to you to submit a complaint to the applicable attorney general.
- You may have the right to ask us to correct inaccurate personal information that we have collected about you.
- You may have the right to ask us to delete the personal information that we have collected about you and/or from you.
-
Opt-out.
- Opt-out of certain processing for targeted advertising purposes. We may process personal information for targeted advertising purposes. You may have the right to opt-out of certain processing of personal information for targeted advertising purposes.
- Opt-out of profiling/automated decision making. We do not use your personal information to engage in profiling in furtherance of decisions about you, or perform automated decision-making, that results in legal or significant financial impacts, significant impacts on housing, education, employment, health care, or criminal justice, or similarly significant impacts.
- Opt-out of other sales of personal information. You may have the right to opt-out of other sales of your personal information.
- Consumers under 16. We do not have actual knowledge that we collect, sell or share the personal information of consumers under 16 years of age.
- Sensitive personal information. While we process certain categories of sensitive personal information as described in our Privacy Policy, we do so only for limited purposes, such as providing the Service you request or order, and therefore we do not offer a right to limit use or disclosure of your Sensitive Personal Information under State Privacy Laws.
- You may be entitled to exercise some or all of the rights described above free from discrimination as prohibited by the State Privacy Laws.
Exercising your right to information/know, access, appeal, correction, and deletion. You may submit requests to exercise your right to information/know, access, appeal, correction, or deletion here, by calling us toll free at 1-833-GET-OZLO, or via email to support@ozlosleep.com.
Exercising your right to opt-out of the “sale” or “sharing” of your personal information.
While we do not sell personal information for money, we, like many companies, use services that help deliver interest-based ads to you, as described in our Privacy Policy. The State Privacy Laws may classify our use of some of these services as “selling” or “sharing” your personal information with the advertising partners that provide the services. These third parties use this information for, among other purposes, serving ads that are more relevant and may sell that information to, or share that information with, other businesses for advertising and other purposes.
Note that opting out will not affect your receipt of advertising based on activities within or across our own websites or apps or the processing of your personal information solely for measuring or reporting advertising performance, reach, or frequency. You can submit requests to opt-out of tracking for targeted advertising purposes or other sales of personal information by clicking the following link:
Additionally, we interpret browser-based universal opt-out preference signals (such as the Global Privacy Control), where applicable, as signals to opt out of the sale or sharing of your personal information for purposes of targeted advertising. You may be able to opt out by broadcasting an Opt-Out Preference Signal, such as the Global Privacy Control (“GPC”) (on the browsers and/or browser extensions that support such a signal). If you choose to use the GPC signal, you will need to turn it on for each supported browser or browser extension you use.
If you would like us to make the connection between your browser and your account when you send the opt-out of “sale” / “sharing” of your personal information request or GPC signal, and you have not yet opted out of “sale” / “sharing” your personal information, we recommend you submit the Your Privacy Choices form by clicking the following link:
Verification of Identity; Authorized agents. We may need to verify your identity in order to process your information/know, access, appeal, correction, or deletion requests and reserve the right to confirm your residency. To verify your identity, we may require government identification, a declaration under penalty of perjury, or other information, where permitted by law. For example, we may request your email address and send you a link to verify your email address.
Under some State Privacy Laws, you may enable an authorized agent to make a request on your behalf. However, we may need to verify your authorized agent’s identity and authority to act on your behalf. We may require a copy of a valid power of attorney given to your authorized agent pursuant to applicable law. If you have not provided your agent with such a power of attorney, we may ask you to take additional steps permitted by law to verify that your request is authorized, such as by providing your agent with written and signed permission to exercise your State Privacy Laws rights on your behalf, the information we request to verify your identity, and confirmation that you have given the authorized agent permission to submit the request.
We cannot process your request if you do not provide us with sufficient detail to allow us to understand and respond to it. In certain circumstances, we may decline a request to exercise the rights described above, particularly where we are unable to verify your identity or locate your information in our systems. If we are unable to comply with all or a portion of your request, we will explain the reasons for declining to comply with the request.
Personal information that we collect, use and disclose. We have summarized the personal information and sensitive personal information we collect, the purposes for which we collect it and the third parties with or to whom we may disclose, sell or share it or by reference below to both the categories specified in the “Personal Information We Collect” section of our Privacy Policy and the categories of personal information specified in the CCPA (Cal. Civ. Code §1798.140). The categories of personal information described below may be collected directly from you, automatically through tracking and other technologies, from Ozlo entities and affiliates, and from third parties such as resellers, social networks or services you use to log into the Service, as further described in our Privacy Policy. These charts describe our practices currently and during the 12 months preceding the effective date of this Supplemental US Notice. Information you voluntarily provide to us, such as in free-form webforms, may contain other categories of personal information not described below.
|
Personal Information (“PI”) we collect |
CCPA statutory category |
Purposes |
Categories of third parties to whom we “disclose” PI for a business purpose |
Categories of third parties to whom we “sell” or “share” PI** |
|
Contact data, demographic data, and profile data |
● Identifiers ● Customer records information |
● Provide, operate and improve the Service and our business ● Personalize the service ● Establish and maintain your user profile ● Communications ● Enable security features of the Service ● Marketing, advertising and analytics ● Create aggregated, de-identified and/or anonymized data ● With your consent |
● Affiliates ● Service providers ● Payment processors ● Advertising partners ● Business and marketing partners ● The additional third parties identified below* |
● Advertising partners ● Business and marketing partners |
|
Communications data and communication interaction data |
● Identifiers ● Commercial information ● Customer records information ● Internet and network activity data |
● Provide, operate and improve the Service and our business ● Personalize the service ● Establish and maintain your user profile ● Communications ● Enable security features of the Service ● Marketing, advertising and analytics ● Create aggregated, de-identified and/or anonymized data ● With your consent |
● Affiliates ● Service providers ● Advertising partners ● Business and marketing partners ● The additional third parties identified below* |
● Advertising partners ● Business and marketing partners |
|
Transactional data and payment data |
● Identifiers ● Commercial information ● Customer records information |
● Provide, operate and improve the Service and our business ● Communications ● Marketing, advertising and analytics ● Create aggregated, de-identified and/or anonymized data ● With your consent |
● Affiliates ● Service providers ● Payment processors ● Advertising partners ● Business and marketing partners ● The additional third parties identified below* |
● Advertising partners ● Business and marketing partners |
|
Marketing data |
● Identifiers ● Commercial information ● Customer records information ● Internet and network activity data ● Inferences |
● Provide, operate and improve the Service and our business ● Personalize the service ● Communications ● Marketing, advertising and analytics ● Create aggregated, de-identified and/or anonymized data ● With your consent |
● Affiliates ● Service providers ● Advertising partners ● Business and marketing partners ● The additional third parties identified below* |
● Advertising partners ● Business and marketing partners |
|
Ambient environment data |
● Sensory data |
● Provide, operate and improve the Service and our business ● Personalize the service ● With your consent |
● Affiliates ● Service providers ● Advertising partners ● Business and marketing partners ● The additional third parties identified below* |
● Advertising partners ● Business and marketing partners |
|
Device data and online activity data |
● Identifiers ● Inferences ● Commercial information ● Geolocation data ● Internet and network activity data |
● Provide, operate and improve the Service and our business ● Personalize the service ● Establish and maintain your user profile ● Communications ● Enable security features of the Service ● Marketing, advertising and analytics ● Create aggregated, de-identified and/or anonymized data ● With your consent |
● Affiliates ● Service providers ● Advertising partners ● Business and marketing partners ● The additional third parties identified below* |
● Advertising partners ● Business and marketing partners |
|
SENSITIVE PERSONAL INFORMATION |
||||
|
Sensitive personal information (“SPI”) we collect |
CCPA statutory category |
Purposes |
Categories of third parties to whom we “disclose” SPI for a business purpose |
Categories of third parties to whom we “sell” or “share” SPI |
|
● Precise geolocation data |
● Geolocation data |
● Provide, operate and improve the Service and our business ● Personalize the service |
● Service providers ● Third parties at your request (e.g., Google Maps) |
● N/A |
|
● Wellness and health related data and inferences |
● Sensory data ● Health data ● Inferences |
● Provide, operate and improve the Service and our business ● Personalize the service |
● Service providers ● Third parties at your request (e.g., Apple Health or Google Fit) |
● N/A |
*Your personal information, including your sensitive personal information, may also be disclosed to third parties at your request or with your consent, to third parties in connection with a business transaction, and/or to law enforcement, regulators and other third parties for legal reasons.
**Each of the categories of personal information that is sold or shared with third parties is sold or shared for purposes of marketing, advertising, analytics and service personalization.
Additional information for California residents.
- Shine the light law. Under California’s Shine the Light law (California Civil Code Section 1798.83), California residents may ask companies with whom they have formed a business relationship primarily for personal, family or household purposes to provide the names of third parties to which they have disclosed certain personal information (as defined under the Shine the Light law) during the preceding calendar year for their own direct marketing purposes, and the categories of personal information disclosed. You may send us requests for this information to support@ozlosleep.com. In your request, you must include the statement “Shine the Light Request," and provide your first and last name and mailing address and certify that you are a California resident. We reserve the right to require additional information to confirm your identity and California residency. Please note that we will not accept requests via telephone, mail, or facsimile, and we are not responsible for notices that are not labeled or sent properly, or that do not have complete information.
Contact Us. If you have questions or concerns about our privacy policies or information practices, please contact us using the contact details set forth in the “How to Contact Us” section of our Privacy Policy.
Supplemental EU-UK Notice
Last updated: August 12, 2025
This Supplemental EU-UK Notice (this “EU-UK Privacy Notice”) supplements our Privacy Policy and applies only to the extent that the EU-UK Data Protection Legislation (as defined below) applies to the processing of personal data by Ozlo. If this EU-UK Privacy Notice applies, the data subject whose personal data is so processed has certain rights with respect to such personal data.
For this EU-UK Privacy Notice, “EU-UK Data Protection Legislation” means all applicable legislation and regulations relating to the processing and/or protection of personal data, in each case as in force from time to time in the European Union (“EU”), the European Economic Area (“EEA”) or the United Kingdom (“UK”), including: (i) Regulation (EU) 2016/ 679 (the “EU GDPR”); (ii) the EU GDPR as it forms part of the laws of England and Wales, Scotland and Northern Ireland by virtue of section 3 of the European Union Withdrawal Act 2018 (“UK GDPR”); (iii) the Federal Act on Data Protection (the “FADP”) in Switzerland; (iv) any other legislation which implements any other current or future legal act of the EU or the UK concerning the protection and processing of personal data and any national implementing or successor legislation; and (v) any amendment or re-enactment of any of the foregoing. The terms “controller,” “processor,” “data subject,” “personal data” and “processing” in this EU-UK Privacy Notice shall be interpreted in accordance with the applicable EU-UK Data Protection Legislation.
CONTROLLER AND CONTACT INFORMATION
For the purposes of EU-UK Data Protection Legislation, Drowsy Digital, Inc. dba Ozlo Sleep is the controller. We are registered in Delaware under company number 87-4540348.Our registered office is at 850 New Burton Rd. Ste. 201, Dover, Delaware 19904, USA. As an organization subject to EU-UK Data Protection Legislation due to its extra-territorial scope without an establishment in the EEA, EU, and the UK, we have appointed the following representatives: (i) in the UK, EDPO UK Ltd (incorporated under the laws of England, having its registered office at 8 Northumberland Avenue, London, WC2N 5BY under company number 12945565); (ii) in the EU, European Data Protection Office (a public limited company incorporated under the laws of Belgium, having its registered office at 1030 Brussels, Avenue Huart Hamoir 71, registered under company number 0689.629.220); and (iii) in Switzerland, EDPO CH Switzerland (a limited liability company incorporated under the laws of Switzerland, having its registered office at Rue de Lausanne 37, 1201 Geneva under company number 303.251.600.
Questions, comments and requests regarding this EU-UK Privacy Notice are welcomed and can be submitted by contacting:
- Pursuant to Article 27 of the UK GDPR, we have appointed EDPO UK Ltd as our UK GDPR representative in the UK. You can contact EDPO UK Ltd regarding matters pertaining to the UK GDPR:
- By using EDPO UK Ltd’s online request form: https://edpo.com/uk-gdpr-data-request/; or
- By writing to EDPO UK Ltd at 8 Northumberland Avenue, London, WC2N 5BY.
- Pursuant to Article 27 of the EU GDPR, we have appointed European Data Protection Office as our EU GDPR representative in the EU. You can contact European Data Protection Office regarding matters pertaining to the EU GDPR:
- By using European Data Protection Office’s online request form: https://edpo.com/gdpr-data-request/; or
- By writing to European Data Protection Office at Avenue Huart Hamoir 71, 1030 Brussels, Belgium.
- Pursuant to Article 14 of the FADP, we have appointed EDPO CH Switzerland as our representative in Switzerland. You can contact EDPO CH Switzerland regarding matters pertaining to the FADP:
- By using EDPO CH Switzerland’s online request form: https://edpo.com/swiss-data-request/; or
- By writing to EDPO CH Switzerland at Rue de Lausanne 37, 1201 Geneva, Switzerland.
THE PURPOSES FOR WHICH WE PROCESS YOUR PERSONAL DATA
Depending on how you use Ozlo’s website, your interactions with us, and the permissions you give us, will impact the purposes for which we use your personal data. Details of how we use your personal data are set out in “How We Use Your Personal Information” section of the Privacy Policy.
OUR LEGAL BASES FOR PROCESSING YOUR PERSONAL DATA
We are entitled to use your personal data for these purposes because one or more of the following legal bases applies:
- your consent, e.g., when you request to receive marketing communications from us and our third parties. Note that you can withdraw this consent at any time;
- to take steps to enter into or perform a contract with you or other individuals, e.g., providing quotes and other information to help you make a decision on whether to use our services;
- compliance with our legal obligations;
- in order to establish, exercise or defend our legal rights or for the purpose of legal proceedings or
- ours or our third parties’ legitimate interests, where these are not overridden by your privacy and data protection rights. Our legitimate interests include: fulfilling your requests for information about our services, conducting surveys and other research projects, personalizing and tailoring the content of our website and our promotions to you, maintaining and improving our website so that users can get the information they need from the website quickly, allowing Ozlo to effectively and efficiently administer and manage the operation of its business, maintaining compliance with internal policies and procedures, monitoring the use of our copyrighted materials, offering optimal, up-to-date security solutions for mobile devices and IT systems, and for internal research purposes.
SHARING YOUR PERSONAL DATA
We may share your personal data with the parties identified in the “How We Share Your Personal Information” section of the Privacy Policy.
RETENTION OF PERSONAL DATA
The period for which we will hold your personal data is set out in the “Retention” section in the Privacy Policy.
INTERNATIONAL TRANSFERS OF PERSONAL DATA OUTSIDE THE EEA/UK
As an organization headquartered in the United States, the personal data that we collect from you may be transferred to, and stored at, a destination outside the UK or the EEA. It may also be processed by staff operating outside the UK or the EEA working for us or for one of our suppliers. Such staff may be engaged in, among other things, the processing of your payment details and the provision of support services. If we transfer personal data to a third party outside of the UK or EEA, we will, as required by EU-UK Data Protection Legislation, ensure that your data protection rights are protected by appropriate safeguards, such as the UK’s International Data Transfer Agreement or the European Commission’s Standard Contractual Clauses for the transfer of personal data to controllers or processors established in third countries. Please contact us (using the information set out in the “Controller and Contact Information” section of this EU-UK Privacy Notice above) if you would like more information about these safeguards.
YOUR RIGHTS
In certain circumstances, EU-UK Data Protection Legislation may give rights to individuals in respect of personal data that Ozlo holds about them, e.g.:
- the right to refuse to provide any personal data and the right to object at any time to the processing of their personal data;
- the right to confirm whether we process their personal data and to obtain information regarding the processing of their personal data and access to the personal data about them that Ozlo holds;
- where consent was provided for certain processing activities, the right to withdraw their consent to the collection, processing, use and/or disclosure of their personal data at any time. Please note that this will not affect the lawfulness of any collection, processing, use or disclosure undertaken before such withdrawal and that Ozlo may still be entitled to process the personal data if it has another legitimate reason (other than consent) or a consent exception for doing so;
- the right to receive a copy of some personal data in a structured, commonly used and machine-readable format and/or request that Ozlo transmits that data to a third party where this is technically feasible;
- the right to request that Ozlo rectifies or corrects their personal data if it is inaccurate or incomplete;
- the right to request that Ozlo erases their personal data;
- the right to request that Ozlo restricts, anonymizes or blocks its processing of their personal data; and
- where applicable, the right to lodge a complaint with the competent data protection supervisory authority in the relevant jurisdiction if they think that any of their rights have been infringed by Ozlo, for example, in the UK, this is the Information Commissioner’s Office (“ICO”).
Please note that if you do not provide certain personal data to Ozlo when requested (and where relevant, provide your consent), we may not be able to provide you with some or all of our services (including those set out in this EU-UK Privacy Notice or in other agreements we enter into with you).
You can exercise your rights at any time by contacting us using the information set out in the “Controller and Contact Information” section above. Please note that the exercise of certain of your rights may prevent us from providing services to you.
We are typically able to resolve privacy questions or concerns promptly and effectively. If you are not satisfied with the response you receive from us, you may have the option to escalate concerns to the data protection supervisory authority in the relevant jurisdiction, here.
Supplemental Canadian Notice
While the Privacy Policy generally applies to our collection, use and disclosure of the personal information of Canadian residents, this notice (the “Canada Privacy Notice”) sets out certain additional or varied terms and conditions that are applicable to our processing of such personal information, consistent with the applicable privacy laws of Canada or a province of Canada. In the event of any conflict between this notice and the Privacy Policy, the terms and conditions of this notice will govern with respect to Canadian residents. Ozlo operates using policies and procedures designed to comply with all applicable Canadian privacy laws, as well as with applicable Canadian laws respecting unsolicited communications, such as Canada’s Anti-Spam Legislation.
Consent
When you visit our website, download or use our mobile app, correspond or communicate with us, participate in one of our events, promotions or contests, engage in any other activities described in our Privacy Policy or otherwise do business with Ozlo, you agree to our collection, use and disclosure of your personal information in accordance with our Privacy Policy and this Canada Privacy Notice.
If you disagree with our Privacy Policy or this Canada Privacy Notice, including with respect to any change that we might make to these documents, you may close your account and refrain from using our services, or in some cases, opt out from certain uses and disclosures. Continuing to use our services, including our website, after we post or communicate a change signifies that you consent to the revised terms of the Privacy Policy or Canada Privacy Notice.
Personal information
For the purpose of the Privacy Policy and this Canada Privacy Notice, personal information is any information about an identifiable individual, including any information that, alone or in combination with other information, could be used to identify an individual. It does not include aggregated information, or any personal information that has been de-identified through the removal of potentially identifying details, such that the data may not be reasonably identified with a particular individual.
Third party platform advertising
From time to time, we may engage third-party platforms (such as social networking platforms, search engines and other third-party websites) to serve users of those platforms with more individually-targeted advertising, which is based both on the platform’s user data and your interactions with Ozlo outside of that third-party platform. To do this, we may provide to the platform provider limited personal information, such as an email address, that could be matched to your profile with that platform, if any. Such matching allows the platform to target Ozlo customers and users that are users of that platform with relevant advertising, based on demographic factors selected by us. It also allows the platform to target other “lookalike” users of that platform with traits similar to those of the Ozlo customers on that platform.
Further information about this process may be provided by the social media platforms that you use, and you may exercise the preferences provided by those social media platforms with respect to your viewing of advertising on those platforms. To opt-out of Ozlo’s use your personal information for such purposes, please visit Your Privacy Choices or contact us using one of the methods set out in the “How to Contact Us” section of the Privacy Policy.
Information and Options
Ozlo provides you with a number of options through which you may obtain access to the personal information that we hold about you, request revisions to or deletion of that information or otherwise exercise control over some uses of your personal information. In addition to those set out in our Privacy Policy, these options include the following.
Further information. Should you have any questions about our Privacy Policy, this Canada Privacy Notice, or the manner in which we collect, use, share, disclose and protect your personal Information, including seeking more information about our policies and practices with respect to the use of personal information by third party service providers, you may contact us using one of the methods set out in the “How to Contact Us” section of the Privacy Policy.
Individual rights. As required by Canadian privacy laws, you have certain rights to access and manage the personal information that we hold about you.
As noted in the Privacy Policy, if you have registered for an account with us through the Service, you may review and update certain account information by logging into the account.
In addition, upon request, you may examine the personal information we hold about you, except as required or permitted by law. Where we are unable to provide access to all the personal information about you that we may hold, we will provide the reasons why we are unable to do so.
You may request access to your personal information by visiting Your Privacy Choices or by making a request, in writing, using the email or postal address set out in the “How to Contact Us” section of the Privacy Policy. Your request must provide your first and last name and your mailing address, and you must certify that you are a Canadian resident and indicate the province in which you reside. Note that, in an effort to prevent fraudulent or unauthorized requests for access, we may request identification or additional details for authentication purposes.
You may also make a subsequent request to us to correct any personal information that you feel is inaccurate or incomplete (other than the information that you may change by logging into your account). You may also request the deletion of your personal information, subject to legal and contractual restrictions; however, please note that deletion of some information may impact our ability to provide you with certain services.
Residents of the Province of Quebec also have the right to request that their personal information be provided in a readable format to another organization, unless doing so raises serious practical difficulties.
Opting out. You may generally withdraw your consent to our use or disclosure of your personal Information at any time, subject to legal and contractual restrictions; however, without such consent, we may be unable to provide you with certain services or benefits.
- Cookies
By visiting Your Privacy Choices, you may opt-out of the collection and use for certain purposes of the personal information collected through cookies on our website. You may opt-out of the use of cookies for analytics, behavioural advertising and product enhancement purposes. It is not possible to opt out of the use of essential cookies, as these are required for the proper functioning of our website.
- Interest-Based Advertising
As described in our Privacy Policy, you may opt-out of receiving interest-based ads through tools provided by various ad industry programs. Canadian residents may opt-out of Interest-Based Advertising by clicking on the AdChoices icon on any ads that you see or by visiting www.youradchoices.ca. To learn more about interest-based advertising in mobile apps and to opt out of this type of advertising by third-party advertising companies that participate in the DAAC’s AppChoices tool, please download the version of AppChoices for your device at https://youradchoices.ca/appchoices/.
As noted above, you may also opt-out of the collection and use of the personal information collected through our website for marketing and advertising purposes by setting your preferences in Your Privacy Choices.
You may opt-out of our use of your personal information for the purpose of targeting you or lookalike audiences with ads on third party platforms (like social media and search platforms) by visiting Your Privacy Choices or by contacting us directly using one of the methods set out in the “How to Contact Us” section of the Privacy Policy.
Please note that even if you opt-out of interest-based or third-party platform advertising using personal information collected by Ozlo or from our website, you may still see ads for on some of the Internet sites and platforms that you visit; however, these ads will not be targeted based on your perceived interests and tastes, and may therefore be less relevant to you. You may also continue to see ads for Ozlo, however such ads will be displayed based on the perceived interests and preferences for all users of the site or platform on which the ad is displayed rather than on any of your personal information.
- Other uses or disclosures
If you would like to withdraw your consent for any other use or disclosure of your personal information by Ozlo, please request such deletion by visiting Your Privacy Choices or notifying us in writing using one of the methods set out in the “How to Contact Us” section of the Privacy Policy. Please be specific as to the uses or disclosures for which you want to withdraw consent. As noted above, your ability to withdraw consent may be subject to legal or contractual restrictions.
Supplemental Australian Notice
Last Updated: August 12, 2025.
This information is to be read with our Ozlo privacy policy available at https://ozlosleep.com/ and, taken together, outline the types of personal information we collect and disclose (including countries where your personal information is likely to be disclosed), how we handle your information, how you can access and correct your information, and other matters required under Australian privacy law including as follows:
- Applicable Australian privacy requirements we comply with include the Privacy Act 1988 (Cth) including the Australian Privacy Principles, the Spam Act 2003 (Cth), the Do Not Call Register Act 2006 (Cth), and applicable state/territory health privacy laws and any mandatory standards or industry codes.
- Australian specific definitions under those laws apply and terms used include the meaning given to the terms “Personal Information” and “de-identification” under the Privacy Act 1988 (Cth).
- Where there are Australian privacy law requirements for obtaining your consent, we comply with those requirements including in relation to sensitive information (such as information about your health).
-
If you wish to request correction of or access to your personal information, or if you have a complaint in relation
to your privacy, please contact the Ozlo Privacy Officer via the contact details provided below:
Drowsy Digital, Inc trading as Ozlo
850 New Burton Rd Ste 201
Dover DE 19904
United States of America
Email: support@ozlosleep.comWe will establish in consultation with you a reasonable process, including timeframes, for seeking to resolve a privacy complaint.
- You may also obtain further general information about your privacy rights from the Office of the Australian Information Commissioner at http://www.oaic.gov.au/.
Ozlo Sleepbud products and accessories are available to purchase in Australia from our authorised reseller Brand Access LLC through the website it operates at https://ozlosleep.au. When you purchase at that website, Brand Access will collect and handle your personal information in accordance with its privacy policy at https://ozlosleep.au/policies/privacy-policy.