Privacy Policy
Last updated October 19, 2026
This Privacy Policy explains how BEMBU LLC ("YORU", "we", "us" or "our") collects, uses and shares personal information when you visit this website, buy from us or write to us. It also explains your choices and your rights, including your rights under US state privacy laws, and it serves as our notice at collection under California law.
On this page
- Summary
- Who is responsible for your information
- Notice at collection
- Information we collect
- How we use your information
- Why we are allowed to use it
- Who receives your information
- Where your information is processed
- We do not sell or share your information
- No analytics and no tracking pixels
- Global Privacy Control and Do Not Track
- How long we keep information
- How we protect information
- Children and teens
- Your US state privacy rights
- Changes to this Policy
- Contact us
Summary
- We collect only what we need to sell and deliver your order and to answer you: your name, email address, shipping and billing address, a phone number if you choose to give one, your order details, your confirmation that you are 18 or older, and your messages.
- Card details are handled by our third-party payment processor. We never see or store your full card number.
- Your cart and the sizes you choose are kept in your browser's local storage, on your device.
- We use no analytics, no advertising cookies and no tracking pixels. See our Cookie Policy.
- We do not sell your personal information and we do not share it for targeted advertising.
- We do not ask for health information, and we do not need any to sell you bedding.
- You can ask to access, correct, delete or receive a copy of your information, or to opt out, by emailing nzb1383@gmail.com. We honor Global Privacy Control.
Who is responsible for your information
BEMBU LLC, a Wyoming limited liability company, 30 N Gould St Ste R, Sheridan, WY 82801, United States. Email: nzb1383@gmail.com.
Notice at collection
This short notice tells you, at or before the point of collection, what we collect and why. The details follow in the rest of this Policy.
| What we collect | Why we use it | Sold or shared? | How long we keep it |
|---|---|---|---|
| Identifiers and contact details (name, email, postal address, a phone number if you give one for delivery) | To take, ship and deliver your order, to answer you, and to handle cancellations, returns, refunds and warranty claims | No | 7 years for order records, 3 years for emails |
| Order and payment details (items, sizes, prices, sales tax, and a few card details from our payment processor) | To take payment, issue refunds, detect and stop fraud, and keep tax records | No | 7 years |
| Age confirmation (that you are 18 or older, not your date of birth) | To sell to adults, as our Terms of Sale require | No | With the order record, 7 years |
| Technical information (IP address, browser and device type, pages requested) | To deliver, secure and fix the website | No | A short period decided by our host |
| Photos you send us (for example of a damaged item) | To handle your claim | No | 3 years after our last exchange |
| Safety reports (what you tell us about a safety concern or an incident with a product) | To handle your report, keep product safety records and report to the US Consumer Product Safety Commission when the law requires it | No | 5 years after the report |
Information we collect
When you visit the website
When your browser requests a page, our hosting provider's servers automatically receive technical information: your IP address, browser type and version, device type and operating system, the page requested, the referring page, and the date and time. A general location, such as your country, state or city, can be inferred from your IP address. We do not collect precise geolocation.
Your cart and the sizes you choose are kept in your browser's local storage. They stay on your device and are used only to show your cart and, when you go to checkout, to prepare your order. See our Cookie Policy.
When you place an order
- Contact and delivery details: your name, email address, shipping address, billing address, and a phone number if you choose to give one for delivery.
- Order details: the products and sizes you buy, quantities, prices, sales tax, and order and delivery dates.
- Age confirmation: your confirmation at checkout that you are 18 or older. We do not ask for your date of birth or an ID document.
- Payment information: collected and processed directly by our third-party payment processor. We receive only a few details, such as the type of payment method, the last four digits and expiration date of the card, the billing address and whether the payment went through.
When you email us
Your name, your email address, what you write to us and anything you attach, such as an order number, a delivery address or photos of a damaged item.
When you report a safety concern
If you tell us about a safety concern or an incident with one of our products, we receive what you choose to send: the product, what happened, when, and any photos. A report may mention an injury. We use it only to handle your report, keep our product safety records and meet our legal duties, which can include reporting to the US Consumer Product Safety Commission (CPSC). We never sell or share it, and we never use it for marketing.
From other sources
- Our payment processor: confirmation that your payment went through, refund status, the outcome of fraud screening and, if you dispute a charge, the details of the dispute.
- Our warehouse partner and carriers: shipping and delivery status, and address corrections.
What we do not ask for
We do not ask for Social Security numbers, government ID numbers, your date of birth, biometric data, precise location or health information, and we do not need any of them to sell you our products. To help you choose a pillow, we only need to know how you like to sleep. If you send us health information anyway, we use it only to answer you, and we delete it on request. There are no customer accounts on our website, so there is no password to keep.
How we use your information
- To process, pack, ship and deliver your order, including customs clearance for imported products.
- To take payment, issue refunds, answer card disputes, and detect and stop fraud.
- To sell to adults, as described in our Terms of Sale.
- To send you emails about your order: confirmation, shipping and tracking, delay notices, returns and refunds.
- To answer your questions and handle cancellations, returns, warranty claims, safety reports and privacy requests.
- To contact you about a product safety notice or a recall, if one ever concerns a product you bought.
- To run, secure and fix the website.
- To keep business, tax, accounting and product safety records and to comply with the law.
- To protect our rights and enforce our Terms of Sale.
We do not send marketing emails. If we ever start, only people who asked for them will receive them, and every message will include an unsubscribe link. We do not use your information for automated decisions that have legal or similarly significant effects on you, and we do not build profiles about you.
Why we are allowed to use it
In plain words, we use your information only when one of these reasons applies:
- Your order: we need it to do what you asked, that is, to sell, ship and deliver your order, handle a return or answer your message.
- The law: we must keep tax and accounting records, keep product safety records and report to authorities when the law requires it, and answer lawful requests from authorities.
- Running a safe business: we have a legitimate need to secure the website, detect fraud and defend our rights, and we do so in ways you would reasonably expect, without overriding your interests.
- Your consent: when you choose to send us photos or other details, or if you ever ask for marketing emails. You can withdraw your consent at any time by emailing us.
Who receives your information
We share personal information only with the recipients below, and only as needed for the purposes above. Service providers act on our behalf, under contracts or terms that restrict how they may use it.
- Hosting: Vercel Inc., in the United States, which delivers our pages and receives the technical information described above.
- Payment: our third-party payment processor, which processes your payment and screens it for fraud. It handles your card details under its own privacy notice, which is linked from its payment page.
- Shipping: our warehouse partner overseas, the carriers and the customs brokers, which receive your name, shipping address, phone number if given and the order contents to pack, import and deliver your order and to handle returns.
- Email: our email provider, which stores and delivers the emails we exchange with you.
- Order handling: the people who help us run the shop, answer your messages and handle your orders, under a duty of confidentiality. They may work from outside the United States.
- Advisers: our accountants and lawyers, when needed.
- Customs and tax authorities, when needed to import and deliver your order or to meet our tax obligations.
- The US Consumer Product Safety Commission, when the law requires us to report a product safety matter.
- Law enforcement, courts and regulators, when the law requires it or when needed to protect the rights, property or safety of our customers, our business or others.
- A buyer or successor of our business, if we are involved in a merger, acquisition or reorganization. Your information would remain protected by this Policy.
- Anyone else, with your consent or at your direction.
Where your information is processed
We are a Wyoming company, and this website is meant for customers in the United States. Our website is hosted in the United States. The people who handle your orders and messages, our email provider and our warehouse partner may access or store your information from outside the United States, where privacy laws may differ. The carriers and customs brokers that move your package also see your shipping details on the way. We share only what is needed, and we require the people and partners who work for us to use it for nothing else.
We do not sell or share your information
We do not sell personal information, and we do not share it for cross-context behavioral advertising (targeted advertising). We have not done so in the past 12 months. We do not sell or share the personal information of anyone under 18. If this ever changes, we will update this Policy before it happens and give you a clear way to opt out.
No analytics and no tracking pixels
We use no analytics or audience measurement tools, no advertising or social media pixels, no session recording and no browser fingerprinting. Our fonts are served from our own website, and our pages load no scripts from other companies, apart from the secure payment form of our payment processor at checkout. If we ever want to add any of these tools, we will update this Policy and our Cookie Policy before they are switched on, and give you the choices the law requires, including a way to opt out of targeted advertising.
Global Privacy Control and Do Not Track
We honor the Global Privacy Control (GPC) signal. If your browser sends it, we take it as a valid request to opt out of the selling or sharing of your personal information, targeted advertising and profiling, for that browser and for any information we can link to it. Since we do none of these today, nothing else changes for you, but the signal will be respected if our practices ever change. Because we do not track you across websites, our website works the same whether or not your browser sends a "Do Not Track" signal.
How long we keep information
| Information | How long we keep it |
|---|---|
| Order, payment and tax records, including the age confirmation | As long as tax and accounting laws require, generally 7 years after the order |
| Emails, support requests and warranty claims | 3 years after our last exchange, or longer if needed for a dispute or a legal claim |
| Safety reports | 5 years after the report, or longer if the law or a pending claim requires it |
| Records of privacy requests | At least 24 months, as California law requires |
| Server logs | A short period decided by our hosting provider, for security and troubleshooting |
| Browser storage (cart and sizes) | On your device, until you clear it |
When we no longer need information, we delete it or make it anonymous.
How we protect information
We use reasonable administrative, technical and physical safeguards suited to the information we hold. The website is served over an encrypted HTTPS connection, card payments are handled by a payment processor that complies with the Payment Card Industry Data Security Standard (PCI DSS), and access to customer information is restricted to the people who need it. No system is completely secure. If a security breach affects your personal information, we will notify you as the law requires.
Children and teens
Our website is not directed to children under 13, and we do not knowingly collect personal information from children under 13, in line with the Children's Online Privacy Protection Act (COPPA). You must be at least 18 years old to place an order, and we do not knowingly sell to anyone younger. If you believe a child or a teen has given us personal information, please email us and we will delete it.
Your US state privacy rights
Residents of California (under the California Consumer Privacy Act, as amended by the California Privacy Rights Act), Virginia, Colorado, Connecticut, Utah, Texas, Oregon, Montana, Iowa, Delaware, Nebraska, New Hampshire, New Jersey, Tennessee, Minnesota, Maryland, Indiana, Kentucky, Rhode Island and other states with similar laws have rights over their personal information. Some of these laws only apply to businesses above certain size thresholds. To keep things simple and fair, we honor the requests below from every US resident, subject to the exceptions the law allows.
Your rights
- Right to know and access: to confirm whether we process your personal information, and to know the categories and specific pieces of personal information we hold about you, where it came from, why we use it and the categories of recipients we disclose it to. Where your state's law provides for it, you can also ask for the list of specific third parties to which we have disclosed it.
- Right to delete: to ask us to delete the personal information we collected from or about you. We may keep what the law requires us to keep, such as tax records and product safety records, or what we need to complete your order, handle a return or a warranty claim, or detect fraud. If so, we will tell you.
- Right to correct: to ask us to correct inaccurate personal information.
- Right to portability: to receive your personal information in a portable and readily usable format.
- Right to opt out: of the selling of your personal information, its sharing for cross-context behavioral advertising, targeted advertising, and profiling in furtherance of decisions that produce legal or similarly significant effects. We do none of these today. You can still send us an opt-out request, and we honor Global Privacy Control.
- Sensitive personal information: we do not ask for it and we do not use it to infer anything about you. The only sensitive information we may hold is what you choose to tell us, for example if a safety report mentions an injury, and we use it only to handle that report and meet our legal duties, so there is nothing to limit. We do not seek health information or consumer health data, and we never use any for advertising or profiling.
- Right to appeal: to appeal our decision if we decline your request, as described below.
- No discrimination: we will not deny you products, charge you a different price or give you a different level of service because you used any of these rights.
How to make a request
Email nzb1383@gmail.com with the subject line "Privacy request". Tell us which right you want to use and your state of residence, and include the email address you used with us and, if you have one, an order number. There is no charge, unless a request is manifestly unfounded or excessive and the law allows a fee.
How we verify your request
To protect your information, we verify each request before acting on it, usually by matching the details you give us with our records and confirming by email from the address you used with us. For requests for specific pieces of information or for deletion, we may ask for one more detail from a past order, such as its date or the items in it. We use the information you give us for verification only to handle your request. Opt-out requests do not need to be verified.
Authorized agents
You can use an authorized agent to make a request for you. The agent must give us your signed written permission or a valid power of attorney. Unless the agent holds a power of attorney, we may also ask you to verify your identity directly with us and to confirm that you gave the agent permission.
Response times
We confirm receipt of your request within 10 business days and respond within 45 calendar days. If we need more time, we may extend this once by 45 more days, and we will tell you why within the first 45 days. We act on opt-out requests as soon as possible, and within 15 business days at the latest.
Appeals
If we decline your request, in whole or in part, we will explain why. You can appeal by replying to our answer or by emailing nzb1383@gmail.com with the subject line "Privacy appeal". We will respond in writing within 45 days, explaining what we decided and why. If we deny your appeal, we will tell you how to contact the Attorney General of your state.
Categories of personal information (California disclosures)
We collect the categories below from you, from your browser and from the other sources described above, for the purposes described in this Policy. We disclose each category for business purposes only to the recipients shown. We have not sold or shared any category in the past 12 months, and we do not sell or share any.
| Category | Examples | Disclosed for a business purpose to |
|---|---|---|
| Identifiers | Name, email address, postal address, IP address, order number | Website host, payment processor, email provider, people who handle orders for us, warehouse partner, carriers, customs authorities |
| Customer records (Cal. Civ. Code 1798.80(e)) | Name, address, phone number if given, a few payment card details | Payment processor, people who handle orders for us, warehouse partner, carriers, accountants and lawyers |
| Characteristics of protected classifications | Only your confirmation that you are 18 or older. We do not collect your date of birth or your exact age | Our accountants and lawyers, when needed |
| Commercial information | Products and sizes bought, order history, returns, refunds and warranty claims | Payment processor, people who handle orders for us, warehouse partner, carriers, customs authorities, accountants and lawyers |
| Internet or other network activity | Server logs: pages requested, browser and device type, referring page | Website host |
| Approximate location | Country, state or city inferred from your IP address, not precise geolocation | Website host |
| Audio, electronic or visual information | Photos you choose to send us, for example of a damaged item | Email provider, warehouse partner when needed for a claim |
| Sensitive personal information | Only what you choose to tell us, for example an injury mentioned in a safety report | Email provider, our lawyers when needed, and the US Consumer Product Safety Commission when the law requires a report |
We do not collect biometric information, precise geolocation, employment information, education information, or inferences drawn to create a profile about you.
Other state notices
- California "Shine the Light": we do not disclose personal information to third parties for their own direct marketing purposes.
- California financial incentives: our prices are the same for everyone, and we do not provide any financial incentive, or any difference in price or service, in exchange for personal information.
- Nevada: we do not sell covered information as defined by Nevada law. You can still send us an opt-out request by email.
Changes to this Policy
We will post any change to this Policy on this page and update its "last updated" date. Before we add any analytics or advertising tool, we will update this Policy. If a change materially affects how we use information we already hold, we will tell you by email or with a notice on the website before it takes effect, and ask for your consent where the law requires it.
Contact us
For any question or request about your personal information, email nzb1383@gmail.com. We reply within 2 business days, and we handle formal privacy requests within the times given above. Postal address: BEMBU LLC, 30 N Gould St Ste R, Sheridan, WY 82801, United States.