Privacy Policy

Last updated: October 8, 2026

At ExportAZ Mattress, accessible from https://www.exportaz.org, one of our main priorities is the privacy of our visitors. This Privacy Policy explains what information ExportAZ Mattress (“ExportAZ Mattress”, “we”, “us” or “our”) collects, how we use it, who we share it with, how long we keep it and the rights you have over it.

ExportAZ Mattress is a static, reader-supported review website: there are no user accounts, no public comments and no payments processed on the site. The personal information we handle is therefore limited, and most of it is information you choose to send us. If you have questions after reading this page, please contact us using the details in Section 20.

1. Consent and Scope

By using our website, you acknowledge this Privacy Policy. Where the law relies on consent (for example, for our newsletter or any optional cookies), you give that consent by taking the relevant action, such as subscribing or clicking “Accept” on our cookie banner, and you can withdraw it at any time.

This policy applies only to our online activities and to information shared with us through https://www.exportaz.org, our forms and our email address. It does not apply to information collected offline or through other channels, or to third-party websites you reach through our links, including mattress brands and retailers.

2. Who We Are (Data Controller)

For the purposes of the EU General Data Protection Regulation (GDPR), the UK GDPR and similar laws, the data controller is the operator of ExportAZ Mattress. The site was founded and is edited by Ryan J. Cardona. We do not publish a postal address or telephone number; the best way to reach us about any privacy matter is by email at [email protected] or through our contact page. Privacy requests are handled directly by the editor.

3. Information We Collect

The personal information you are asked to provide, and the reasons why, will be made clear to you at the point we ask for it. In practice, we collect:

• Contact form data: your name, email address, the topic you select and your message.
• Service booking request data: your name, email address, chosen service, preferred date, the sleep details you choose to share (for example, sleep position, comfort preferences or pain points) and your message.
• Newsletter data: the email address you enter in the newsletter field in our footer.
• Direct correspondence: your email address, name and the contents of any email and attachments you send us.
• Technical and log data: information automatically recorded by our hosting provider when your browser requests our pages (see Section 6).
• Browser storage: small items kept in your own browser to remember your cookie choice, quiz answers and name on the thank-you page (see Section 9). These stay on your device and are not sent to us.

We do not ask for, and ask you not to send, payment card details, government ID numbers or medical records. For paid services, a payment link is emailed to you separately and payment is handled by a third-party payment provider, not on our website.

Sensitive information

Some sleep details in a booking request, such as back or joint discomfort, may count as health-related information under some laws. We use them only to prepare the consultation or report you asked for, never for advertising, and you are free to leave them out. Where the GDPR applies, we rely on your explicit consent, which you can withdraw at any time.

4. Categories of Data, Purposes, Legal Bases and Retention

We may keep information longer only where the law requires it (for example, records of paid services) or to establish, exercise or defend legal claims.

5. How We Use Your Information

We use the information we collect in various ways, including to:

• Provide, operate and maintain our website;
• Improve, personalize and expand our website and content;
• Understand and analyze how you use our website, using aggregated information wherever possible;
• Develop new products, services, features and functionality, such as new guides or tools in our Mattress Finder;
• Communicate with you, either directly or through one of our service providers, including for customer service, to provide you with updates and other information relating to the website, and for marketing where you have agreed;
• Send you emails, including replies, booking confirmations, payment links and, if you subscribed, our newsletter;
• Find and prevent fraud, spam and abuse.

We do not make decisions about you based solely on automated processing, and we do not build advertising profiles of our visitors.

6. Log Files

ExportAZ Mattress follows a standard procedure of using log files. These files log visitors when they visit websites; all hosting companies do this as part of their hosting services. The information collected includes internet protocol (IP) addresses, browser type, Internet Service Provider (ISP), date and time stamp, referring/exit pages, and possibly the number of clicks.

This information is not linked to any information that is personally identifiable. It is used for analyzing trends, administering the site, understanding movement around the website at an aggregate level and detecting attacks. Logs are kept for a limited period and are used to look at individual activity only when investigating abuse or a security incident.

7. Service Booking Data

When you submit a booking request on our services page, we use your details to check availability, confirm the booking by email, send you a separate payment link and deliver the service. A request is not a confirmed booking until we confirm it by email; our Terms of Use set out the booking, rescheduling and refund terms. Video consultations run on a third-party platform whose own privacy policy applies, and we never record a session without asking first. Our services offer general comfort and product guidance, not medical advice.

8. Newsletter

If you subscribe through the footer, we use your email address to send occasional emails about new guides, updated reviews and site news. Every email includes an unsubscribe link, and you can also unsubscribe by emailing us. We never sell or rent our mailing list. Our email provider records basic delivery information (such as bounces) to keep the list working; any open or click statistics we see are aggregated.

9. Cookies, Local Storage and Disabling Cookies

Our site is static and our fonts and scripts are self-hosted, so loading our pages makes no calls to Google Fonts or other content delivery networks. We use only these browser storage items:

• localStorage exportaz_consent — remembers your cookie-banner choice for 12 months.
• localStorage exportaz_finder — remembers your last Mattress Finder answers until you clear them.
• sessionStorage exportaz_form — holds the name you entered so it can appear on the thank-you page; deleted when you close the tab.

No analytics or advertising cookies are set by default. If we enable analytics in the future, it will only load after you consent through our cookie banner, and we will update this policy and our Cookie Policy first. You can change your choice at any time with the “Cookie settings” link in the footer.

You can choose to disable cookies and clear local storage through your individual browser options. More detailed information about cookie management with specific web browsers can be found on the browsers’ respective websites and in our Cookie Policy.

10. Advertising and Affiliate Partners

Some links on our site are affiliate links to mattress brands and retailers, marked with rel="sponsored". We may earn a commission if you buy through them, at no extra cost to you; see our Affiliate Disclosure. We do not place third-party advertising networks on our pages.

When you click an affiliate link, you leave our website and the merchant or its affiliate network may use cookies, web beacons or similar technologies on its own site to record that you came from ExportAZ Mattress. These technologies may automatically receive your IP address. ExportAZ Mattress has no access to or control over these cookies.

Third-party privacy policies

ExportAZ Mattress’s Privacy Policy does not apply to other advertisers, affiliate networks or websites. We advise you to consult the respective privacy policies of these third parties for more detailed information, including their practices and instructions about how to opt out of certain options.

11. Service Providers (Processors) and Sharing

We do not sell your personal information. We share it only where necessary to run the website and our services, with:

• Our hosting provider, which serves the website and keeps server logs;
• Our email and form-delivery provider, which delivers form submissions, hosts our mailbox and sends the newsletter;
• A payment provider, which processes payments through the link we email you (we never see your full card details);
• A video-call platform, used for live consultations;
• Advisers or authorities, where required by law or to protect our rights, users or the public.

Our providers act on our instructions under written terms that require them to protect your information.

12. International Data Transfers

Our service providers may process information in countries other than yours, including the United States, whose data protection laws may differ. Where we transfer personal information from the European Economic Area, the United Kingdom or Switzerland to a country without an adequacy decision, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (SCCs), the UK International Data Transfer Addendum or a recipient’s certification under an applicable data privacy framework. Contact us for more information.

13. Security

We use reasonable technical and organizational measures to protect personal information, including encrypted HTTPS connections, restricted access to our inbox and accounts, strong passwords and multi-factor authentication where available, and reputable service providers. Because the site has no accounts or customer database, very little personal information is exposed to the website itself. No internet transmission or storage is completely secure, however, so we cannot guarantee absolute security. If a personal data breach affects you, we will notify you and any relevant authority where the law requires.

14. Data Retention

We keep personal information only as long as we need it. Contact and booking form data and related emails are kept for a maximum of 24 months after our last interaction, then deleted or anonymized. Newsletter addresses are kept until you unsubscribe. Browser storage items expire as described in Section 9 and you can clear them at any time.

15. Your California Privacy Rights (CCPA/CPRA)

If you are a California resident, the California Consumer Privacy Act, as amended by the California Privacy Rights Act (together, “CCPA”), gives you these rights, subject to certain exceptions:

• Right to know the categories and specific pieces of personal information we have collected about you, its sources, our purposes and the categories of third parties we share it with.
• Right to delete personal information we have collected from you.
• Right to correct inaccurate personal information we hold about you.
• Right to opt out of the sale or sharing of your personal information, including sharing for cross-context behavioral advertising.
• Right to limit the use of sensitive personal information to purposes permitted by law.
• Right to non-discrimination for exercising any of these rights.

We do not sell personal information and do not share it for cross-context behavioral advertising, and we have not done so in the past 12 months. We do not knowingly sell or share the personal information of consumers under 16. We use sensitive information, such as health-related sleep details, only to provide the service you requested. The categories we collect, their sources, our purposes and recipients are described in Sections 3, 5 and 11.

You may make a request yourself or through an authorized agent. We will verify your identity, usually by confirming control of the relevant email address. If you make a request, we have one month to respond to you, and we will tell you if the law allows and we need an extension.

16. Your Data Protection Rights (GDPR and UK GDPR)

We would like to make sure you are fully aware of all of your data protection rights. If you are in the European Economic Area, the United Kingdom or Switzerland, every user is entitled to the following:

• The right to access – you have the right to request copies of your personal data.
• The right to rectification – you have the right to request that we correct any information you believe is inaccurate or complete information you believe is incomplete.
• The right to erasure – you have the right to request that we erase your personal data, under certain conditions.
• The right to restrict processing – you have the right to request that we restrict the processing of your personal data, under certain conditions.
• The right to object to processing – you have the right to object to our processing of your personal data, under certain conditions, and at any time to direct marketing.
• The right to data portability – you have the right to request that we transfer the data we have collected to another organization, or directly to you, under certain conditions.
• The right to withdraw consent – where we rely on consent, you can withdraw it at any time without affecting earlier processing.
• The right to complain – you can lodge a complaint with a data protection supervisory authority where you live, work or where an alleged infringement occurred (in the UK, the Information Commissioner’s Office).

Legal bases we rely on

If you make a request, we have one month to respond to you. For complex or numerous requests, we may extend this by up to two further months and will tell you why. If you would like to exercise any of these rights, please contact us.

17. Children’s Information

Another part of our priority is adding protection for children while using the internet. We encourage parents and guardians to observe, participate in, and/or monitor and guide their online activity. ExportAZ Mattress does not knowingly collect any personal identifiable information from children under the age of 13, and in the European Economic Area and the United Kingdom we do not knowingly collect personal information from anyone under 16 without parental consent. Our Kids & Teens Mattress Planning service is booked by a parent or guardian, not by a child.

If you think that your child provided this kind of information on our website, we strongly encourage you to contact us immediately and we will do our best efforts to promptly remove such information from our records.

18. Do Not Track and Global Privacy Control

There is no common standard for responding to browser “Do Not Track” (DNT) signals, so we do not respond to DNT in a specific way; because we run no cross-site tracking or advertising cookies, our practices are the same either way. We honor the Global Privacy Control (GPC) signal: if your browser sends GPC, we treat it as a request to opt out of the sale or sharing of personal information and will not load any optional analytics or marketing technology.

19. Links to Other Sites and Changes to This Policy

Our pages link to other websites, including mattress brands, retailers and health organizations. We are not responsible for their content or privacy practices, and we encourage you to read their privacy policies.

We may update this Privacy Policy from time to time, for example when we add a feature, change a service provider or the law changes. We will post the new version here and update the “Last updated” date. For significant changes, we will give additional notice, such as a site notice or an email to newsletter subscribers.

20. Contact Us

If you have additional questions or require more information about our Privacy Policy, or want to exercise your rights, do not hesitate to contact us:

• Email: [email protected]
• Contact page: Contact ExportAZ Mattress

Please put “Privacy request” in the subject line and tell us which right you wish to exercise. You can learn more about us on our About page.