1. Information We Collect

Account info (email, name) when you register. Lead information (organization, contact, employees, products of interest) when you submit institutional or organizational pricing forms.

Usage analytics: which topics you view, audio/video playback events, language preference, session identifiers. We do NOT collect protected health information (PHI) on this site.

Cookies: essential cookies for sign-in and language preference; optional analytics cookies (only with your consent).

2. How We Use Information

To deliver bilingual sleep-health education to you. To respond to institutional/organizational pricing requests. To improve content quality and learner outcomes (anonymized aggregate analytics).

We do NOT sell your personal data. We do NOT use your data to train third-party AI models. SHS-internal model training (if any) uses anonymized aggregates only.

3. HIPAA Boundary

Sleep Health Services is an educational platform. We do NOT operate as a Covered Entity under HIPAA. We do NOT request or store protected health information (PHI) from users on this site.

If your employer or clinic deploys SHS via an enterprise agreement that involves PHI exchange, a separate Business Associate Agreement (BAA) governs that integration.

4. GDPR Rights (EU/UK Users)

You have rights to access, rectify, delete, restrict, port, and object to processing of your personal data. To exercise these rights, contact privacy@sleephealthservices.org.

Our legal basis for processing: legitimate interest in providing requested educational services; consent for analytics cookies; contract performance for paid subscriptions.

5. Data Retention

Account data: retained while your account is active and for 30 days after deletion request.

Lead data (institutional/organizational): retained for 24 months for follow-up, then anonymized.

Analytics events: retained for 36 months in identifiable form, then aggregated.

6. Security

Data encrypted in transit (TLS 1.2+) and at rest. Administrative access requires authentication; sensitive admin actions are audit-logged. We do NOT store credit card information; payments are processed by Stripe under their own security posture.

7. Children

SHS is intended for healthcare professionals, sleep technicians, and adult learners. We do not knowingly collect data from individuals under 13. Pediatric education content (PEDS exam prep) is for adult learners studying pediatric sleep medicine.

8. Changes

When we materially change this policy, we will update the version and date at the top of this page and, for registered users, send an email notice.