Privacy Policy
Breathe Easy is committed to protecting your personal information. This policy explains what we collect, why we collect it, and how you can control it. We've written it in plain English — no legal jargon.
Overview
This Privacy Policy applies to Breathe Easy™ and all websites, mobile pages, and services we operate ("Services"). When you buy from us, visit our site, or contact us, you're sharing information with us. We take that trust seriously.
We collect only what we need. We never sell your personal data. We give you full control over what you share with us.
Quick summary: We collect your name, email, and shipping address to fulfill orders. We use analytics to improve our website. We use Stripe for payments and never store your card details. You can opt out of marketing emails at any time.
What We Collect
Information you give us directly
- Name and email address — when you place an order or sign up for updates
- Shipping address — to deliver your order
- Phone number — optional, used only for delivery notifications
- Order history — what you've purchased and when
- Customer support messages — when you contact us with a question or complaint
Information we collect automatically
- IP address and approximate location — to detect fraud and understand where our customers are
- Browser type and operating system — to ensure our site works correctly for you
- Pages visited and time spent — via analytics tools to improve our site
- Referral source — how you found us (e.g., Google, Instagram ad, direct)
- Cookies and similar tracking — see the Cookies section below
Payment information
We use Stripe to process all payments. We never see, store, or handle your full credit card number. Stripe is PCI-DSS Level 1 certified — the highest level of payment security. See Stripe's Privacy Policy for details.
How We Use Your Information
- To fulfill your order — process payment, arrange shipping, send tracking updates
- To provide customer support — answer questions, resolve issues, process returns
- To send transactional emails — order confirmations, shipping notifications (always sent, cannot opt out)
- To send marketing emails — promotions, new products, health tips (only with your consent; easy opt-out)
- To improve our products and website — understand how customers use our site, what features work, what doesn't
- To prevent fraud — detect suspicious activity and protect customers
- To comply with legal obligations — tax records, legal disputes, regulatory requirements
Marketing consent
We will only send you marketing emails if you have opted in — either at checkout or via a sign-up form. You can unsubscribe at any time by clicking "Unsubscribe" in any email or emailing us at privacy@breatheeasy.com.
Cookies
Cookies are small files stored on your device. We use them to keep your shopping cart working, remember your preferences, and understand how people use our site.
Essential Cookies
Required for basic site functionality. Cannot be disabled.
- Session cookies that keep your cart active while you browse
- Security cookies that prevent cross-site request forgery
Analytics Cookies
Help us understand how visitors use our site. We use Google Analytics in anonymised mode — no personally identifiable data is sent.
- Pages visited, time on site, bounce rate
- Traffic source (search, social, direct)
Marketing Cookies
Used to show you relevant Breathe Easy ads on Meta (Facebook/Instagram) and Google if you've visited our site. You can opt out in your browser settings or via the Meta Ads Manager.
Managing Cookies
You can delete or block cookies at any time in your browser settings. Blocking essential cookies will affect checkout functionality. For more control, visit youronlinechoices.com.
Who We Share Data With
We do not sell your personal data. We only share it with trusted third parties who help us operate our business:
- Stripe — payment processing
- Shipping carriers (UPS, FedEx, Royal Mail, etc.) — to deliver your order
- Email service providers — to send you order confirmations and marketing (if opted in)
- Google Analytics — anonymised website analytics
- Meta (Facebook/Instagram) — advertising analytics if you consent to marketing cookies
- Customer support tools — to manage support tickets and live chat
All third-party providers are bound by data processing agreements and are prohibited from using your data for their own purposes.
We may disclose personal data if required by law, court order, or to protect the rights and safety of Breathe Easy or our customers.
How Long We Keep Your Data
- Order data — 7 years (required for tax/accounting purposes)
- Customer account data — as long as your account is active, plus 2 years after last login
- Marketing preferences — until you unsubscribe or request deletion
- Support communications — 3 years after resolution
- Analytics data — 26 months (Google Analytics default)
You can request deletion of your personal data at any time (see Your Rights below). Some data must be retained longer to comply with legal obligations.
Your Rights
Depending on where you live, you have some or all of the following rights over your personal data:
Right to Access
Request a copy of all personal data we hold about you.
Right to Delete
Ask us to delete your personal data (subject to legal retention requirements).
Right to Correct
Update inaccurate or incomplete information we hold about you.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests, including marketing.
Right to Restrict
Ask us to limit how we use your data while a dispute is resolved.
To exercise any right, email us at privacy@breatheeasy.com. We will respond within 30 days. We may need to verify your identity before acting on a request.
California residents (CCPA): You have the right to know what personal information is collected, the right to delete, and the right to opt out of the "sale" of personal information. We do not sell personal information.
EEA/UK residents (GDPR): You have the right to lodge a complaint with your local supervisory authority if you believe we have mishandled your data.
How We Protect Your Data
- All data transmitted to and from our site is encrypted via TLS/HTTPS
- Payment data is processed entirely by Stripe — we never store card numbers
- Access to customer data is restricted to authorised staff only
- We conduct regular security reviews of our systems and third-party providers
- In the event of a data breach, we will notify affected customers and relevant authorities within 72 hours as required by law
Children's Privacy
Our Services are not directed at children under the age of 13. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us immediately at privacy@breatheeasy.com and we will delete it promptly.
Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, or legal requirements. When we make significant changes, we will:
- Update the "Last updated" date at the top of this page
- Send you an email notification (if you are a registered customer)
- Display a notice on our website for 30 days
Continued use of our Services after a change constitutes acceptance of the updated policy.
Contact Us
For privacy-related questions, data requests, or concerns, please contact our Privacy Team:
Breathe Easy Privacy Team
Email: privacy@breatheeasy.com
We aim to respond to all privacy requests within 30 days.
For general enquiries: Contact Us