Privacy policy

Last updated: September 30, 2026

This policy explains what personal information Davi Rodrigues Lima, trading as Phew (ABN 14 633 985 608), collects when you visit phewsleep.com or buy from us, how we use it, and the choices you have.

What we collect

When you order: your name, email address, shipping and billing address, phone number (if you give it), the products you bought and your order history. Card details are entered on Shopify's secure checkout and handled by the payment processor. We never see or store your full card number.

When you contact us: your email address and what you write to us.

When you join our email list: your email address and which emails you open or click.

When you browse: device and browser information, IP address, approximate location, the pages you visit, what you add to your cart, and how you arrived at the store. This is collected through cookies, pixels and similar technologies.

How we use it

To process, ship and track your order, and to deliver your digital bonuses.
To answer your emails and handle refunds, replacements and reships.
To send order and shipping updates.
To send marketing emails, if you subscribed or bought from us. Every marketing email has an unsubscribe link.
To measure our ads and show ads to people who may be interested in our products.
To prevent fraud and keep the store secure.
To meet our legal, tax and accounting obligations.

Who we share it with

We share only what each partner needs to do its job:

Shopify, which hosts the store and checkout, and our payment processors.
Our fulfillment partners, including warehouses outside the United States, who receive your name, shipping address and phone number to pack and ship your order.
Shipping carriers, to deliver and track your package.
Email service providers, to send order updates and marketing emails.
Advertising and analytics partners, such as Meta (Facebook and Instagram) and Google, through pixels and similar tools, to measure ad results and show relevant ads.
Authorities or advisers, when the law requires it or to protect our rights.

We do not sell your personal information for money. Sharing browsing data with advertising partners for targeted ads may count as "sharing" or "targeted advertising" under some US state laws. You can opt out as described below.

Cookies and ad tracking

Cookies keep your cart working and help us understand how the store is used. Advertising cookies and pixels help us measure and target ads. You can block or delete cookies in your browser settings, and your browser's Global Privacy Control signal is treated as a request to opt out of sharing for targeted advertising.

Your choices and rights

Wherever you live, you can:

ask for a copy of the personal information we hold about you,
ask us to correct or delete it,
unsubscribe from marketing emails at any time, and
opt out of the sharing of your information for targeted advertising.

Residents of California, Colorado, Connecticut, Virginia, Texas, Oregon and other states with privacy laws have these rights under their state law. We will not treat you differently for using them.

To make a request, email wearphew@gmail.com with the subject "Privacy request". We may ask you to confirm your identity with your order number or email address, and we reply within 45 days. You can use an authorized agent to make a request for you.

Where your data is stored

We operate from Australia, the store runs on Shopify, and our service providers operate in several countries, including the United States, Canada, Australia and China. Your information may be processed in these countries, which may have different privacy laws from yours. We only use providers that protect it.

How long we keep it

We keep order records for as long as tax and accounting laws require (usually 5 to 7 years). Marketing data is kept until you unsubscribe or ask us to delete it. Other information is deleted when it is no longer needed.

Security

We use Shopify's secure checkout, encrypted connections and limited access to protect your information. No system is completely secure, and if a breach affects you, we will tell you as the law requires.