Legal
Last updated: 19 October 2026
In short: we collect only what we need to process your order, deliver it, support you and, if you choose, send you occasional emails. We never sell your personal data, and you can unsubscribe or ask us to delete your data at any time.
This website, sovasleep.io, is run by Sova Sleep Ltd, a company registered in England and Wales (company number 17277239), with its registered office at 71-75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.
Sova Sleep Ltd is the data controller for the personal data described in this policy. This means we decide how and why your data is used, and we are responsible for looking after it under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
We are registered with the Information Commissioner's Office (ICO) under registration reference ZC257670.
Sova Soundscape works in your web browser and does not require an account. Your listening settings may be stored in your own browser so the app remembers them. We do not use them to identify you.
We only use your personal data when the law allows us to. The table below shows what we use it for and the legal basis we rely on.
| Purpose | Legal basis |
|---|---|
| Processing and delivering your order, including order and delivery updates | Performance of a contract |
| Handling returns, refunds and our 30-day money-back guarantee | Performance of a contract |
| Answering your questions and support requests | Legitimate interests (helping our customers) |
| Keeping financial and tax records | Legal obligation |
| Preventing fraud and keeping our website secure | Legitimate interests |
| Asking you to review a product you bought | Legitimate interests |
| Sending marketing emails and discount codes | Consent |
| Analytics and advertising cookies | Consent |
| Improving our website and products | Legitimate interests |
We only send marketing emails, such as launch news, new soundscapes and offers, if you have agreed to receive them, for example by signing up through our newsletter form or popup, or by ticking the box at checkout.
You can unsubscribe at any time using the link at the bottom of every marketing email, or by contacting us. Unsubscribing will not affect emails about orders you have placed.
Some of our providers store or process data outside the UK, including in the European Economic Area and the United States. When this happens, we make sure your data is protected by appropriate safeguards, such as UK adequacy regulations, the UK Extension to the EU-US Data Privacy Framework, or the UK's International Data Transfer Agreement or Addendum to the EU Standard Contractual Clauses.
Under UK data protection law you have the right to:
To use any of these rights, contact us using the details in section 13. We will reply within one month. There is normally no charge.
Our website uses an encrypted (HTTPS) connection, and payments are handled by Stripe, which meets the PCI DSS security standard for card data. We limit access to personal data to people who need it, and our providers are required to keep it secure.
Our products and website are intended for adults. We do not knowingly collect personal data from anyone under 18. If you believe a child has given us their data, please contact us and we will delete it.
We may update this policy from time to time, for example if we start using a new service provider. The date at the top shows when it was last updated. If we make significant changes, we will let you know on our website or by email.
If you have any questions about this policy or how we use your data, please contact us:
If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113. We would appreciate the chance to put things right first, so please contact us before going to the ICO.
