What we collect, why, and how to ask for it back.

Phase is built and operated by Lanart Rug Inc. (“we,” “us”), a corporation with its head office at 8255 boul Décarie, Montréal, QC, H4P 2P5, Canada. We are subject to Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA), Quebec’s Act respecting the protection of personal information in the private sector (as modernized by Law 25), and Canada’s Anti-Spam Legislation (CASL).

1. The person responsible for your data

Our designated privacy officer under Quebec Law 25 is the founder, James Galbraith, reachable at privacy@phasepillow.com. If you have a complaint we cannot resolve, you may file with the Commission d’accès à l’information du Québec or the Office of the Privacy Commissioner of Canada.

2. What we collect

When you visit phasepillow.com:

• Pages you view, anonymized via Vercel Analytics
• IP address and user-agent (kept for rate-limiting and abuse only)

When you join the waitlist or reserve a Phase:

• The email address you provide
• The page you signed up from (e.g. /reserve)
• The referring URL (where you came from)
• Your IP at signup, hashed-and-truncated for fraud prevention

When you reserve and pay a deposit:

• Your name, shipping address, and a Stripe customer/token
• Card data is collected directly by Stripe and we never see or store the card number

We do not collect data about minors knowingly. Phase is sold to adults only.

3. Why we collect it

• Run the waitlist: so we can email you when checkout opens and ship updates after that.
• Fulfill orders: charge the balance, ship the pillow, and provide warranty service.
• Prevent abuse: rate-limit the signup form and detect duplicate or hostile signups.
• Improve the product: understand which pages and answers convert. We never sell individual data to do this.

4. Who we share with

We use a small number of trusted processors:

• Vercel (USA) — site hosting
• Neon (USA) — Postgres database via Vercel
• Resend (USA) — transactional email delivery
• Stripe (USA, Canada) — payment processing
• Vercel Analytics — anonymized site analytics
• Canada Post / UPS — shipping

Some of these processors are located outside Quebec. As required by Quebec Law 25, we have completed privacy impact assessments and obtained contractual commitments that personal information is protected to a comparable standard. You can request a copy of the assessment summary by emailing the contact above.

We do not sell, rent, or share your personal information with advertisers or data brokers. Ever.

5. Your rights

You can ask us to:

• Confirm what we hold about you
• Send you a copy in a portable format
• Correct anything that’s wrong
• Delete what we hold, unless we need to keep it for a tax, warranty, or legal reason
• Withdraw consent for marketing email — anytime, via the unsubscribe link

We will respond within 30 days. To make a request, email privacy@phasepillow.com from the email on file.

6. How long we keep it

• Waitlist emails: until you unsubscribe, then deleted within 30 days
• Order records: 7 years (Canadian tax requirement)
• Marketing analytics: aggregated only, no personal identifiers retained beyond 13 months
• Rate-limit / IP data: 14 days

7. Cookies and tracking

We use a small number of strictly-necessary cookies for the checkout to function (Stripe) and to remember your form state. We do not use advertising or third-party tracking cookies. Vercel Analytics is cookieless.

8. Security

Personal information is encrypted in transit (HTTPS) and at rest. Access to the waitlist database is restricted to the Phase team via short-lived credentials. We use Stripe Payment Element so card data is never sent to our servers.

If we ever experience a confidentiality incident affecting your personal information, we will notify you and the Quebec Commission d’accès à l’information promptly, per Law 25.

9. Changes to this policy

When this policy changes materially, we’ll email anyone with an active account or reservation. The “Last updated” date at the top of this page always reflects the current version.