Privacy Policy

Last updated: 18 August 2026 · GDPR-compliant

1. Data Controller

The data controller responsible for the processing of personal data on this website is:

ATS Corporation
730 Fountain Street North, Building #2
Cambridge, ON N3H 4R7, Canada
E-mail: [email protected]
Tel: (519) 653-6500

For the purposes of the EU General Data Protection Regulation (GDPR), where applicable, our representative can be reached at the address above. If you are an EU/EEA resident and would like to exercise your rights, please contact us using the details provided.

2. Overview — What This Site Collects (and What It Doesn't)

BuySleepLamp is a review and affiliate site. We do not run a contact form, we do not request account creation, and we do not process payments. The data we collect is limited to what is technically necessary to deliver the website, remember your preferences, and measure aggregated traffic.

2.1 What we do NOT collect

  • We do not collect your name, email, postal address, phone number, or payment information on this Site.
  • We do not run a contact form or newsletter signup.
  • We do not create user accounts.
  • We do not sell or rent your personal data to third parties.

2.2 What we do collect

  • Server logs: IP address (typically truncated/anonymized at the hosting level), browser type, operating system, referrer URL, pages visited, and timestamp. Used for security, debugging, and aggregated analytics.
  • Local storage / cookies (only if you accept): a small identifier to remember your cookie consent choice, your color/region preference, and any UI state. Stored in your browser only — never transmitted to advertising networks.
  • Affiliate click tracking: when you click "Buy on Dreamegg," we may record an anonymized outbound click event (e.g., a hash of timestamp + page) so we can attribute commissions. We do not record your name or contact details for this.

3. Legal Basis for Processing (GDPR Art. 6)

  • Art. 6(1)(a) Consent — for non-essential cookies and any local-storage identifiers beyond what's strictly necessary.
  • Art. 6(1)(f) Legitimate interests — for server logs, abuse prevention, and aggregated traffic measurement. Our legitimate interest is operating a secure, functional website.
  • Art. 6(1)(b) Contract — not applicable, as we do not enter into a direct sales contract with you. Sales contracts are formed between you and the merchant (e.g., Dreamegg).

4. Cookies and Similar Technologies

We use a small number of cookies and local-storage entries:

  • Strictly necessary: to remember your cookie-consent choice. Cannot be disabled while the site is in use.
  • Preferences: to remember UI state (e.g., the color you selected on the order page).
  • Analytics (if enabled by you): only aggregated, non-identifying counts of which pages are read. We do not use third-party advertising cookies.

You can withdraw or change your cookie consent at any time by clearing your browser's site data and revisiting the site — the consent banner will reappear. For full details, see our Cookie Policy .

5. Third Parties We Work With

  • Hosting / CDN provider: serves this Site to you. Receives your IP address and request metadata in the normal course of operation.
  • Affiliate network / merchant (Dreamegg): when you click an outbound link and complete a purchase, the merchant may set its own cookies on its own domain. That is governed by the merchant's privacy policy, not ours.
  • Analytics (privacy-respecting): if you accept analytics cookies, we may use a privacy-respecting analytics tool to count anonymous page views. No cross-site tracking, no advertising IDs.

We do not embed social media "like" or "share" buttons that track you before you interact with them.

6. International Data Transfers

Our hosting and certain service providers may be located outside your country of residence, including in the United States, Canada, or the European Economic Area. Where personal data is transferred outside the EEA, we rely on appropriate safeguards such as Standard Contractual Clauses or adequacy decisions, as required by applicable law.

7. Data Retention

  • Server logs: typically retained for 30–90 days for security and operational purposes, then deleted or anonymized.
  • Local storage / cookies: retained until you clear them, withdraw consent, or they expire (typically 12 months for consent records).
  • Affiliate click events: retained for the duration required to verify commissions, typically 30–60 days, then aggregated or deleted.

8. Your Rights

Subject to applicable law (including the GDPR for EU/EEA residents, the UK GDPR for UK residents, the LGPD for Brazilian residents, and similar laws elsewhere), you have the right to:

  • Access the personal data we hold about you (Art. 15 GDPR).
  • Rectification of inaccurate or incomplete data (Art. 16 GDPR).
  • Erasure ("right to be forgotten") (Art. 17 GDPR).
  • Restriction of processing (Art. 18 GDPR).
  • Data portability (Art. 20 GDPR).
  • Object to processing based on legitimate interests (Art. 21 GDPR).
  • Withdraw consent at any time, without affecting the lawfulness of prior processing (Art. 7(3) GDPR).
  • Lodge a complaint with a supervisory authority, in particular in the EU/EEA Member State of your habitual residence, place of work, or place of the alleged infringement (Art. 77 GDPR).

To exercise any of these rights, email [email protected] with the subject line "Privacy Request." We will respond within 30 days. We may need to verify your identity before acting on a request.

9. Children's Privacy

This Site is not directed at children under 16, and we do not knowingly collect personal data from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

10. Security

We use appropriate technical and organizational measures to protect personal data, including TLS encryption in transit, access controls, and minimization of data collected. No method of transmission over the Internet, however, is 100% secure.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top will reflect the latest revision. Material changes will be highlighted via a notice on the Site where appropriate.

12. Contact

For any privacy-related question, request, or complaint:

Joni A. Robertson, ATS Corporation
E-mail: [email protected]
Tel: (519) 653-6500
Address: 730 Fountain Street North, Building #2, Cambridge, ON N3H 4R7, Canada