Privacy Policy

DESCANSO Mattress · descansomattress.com
Effective date: September 30, 2026
Last updated: September 30, 2026

This policy explains what personal information DESCANSO collects through descansomattress.com, why we collect it, who else handles it, and what choices you have. It is written to be read, not skimmed past. If anything here is unclear, write to us and we will explain it. Related pages: Terms of Sale & Use and Returns & Warranty.

1. Who we are

DESCANSO Mattress is a mattress maker. We build every mattress in our workshop in Dallas, Texas, and we serve the Dallas–Fort Worth Metroplex. We sell only online, through descansomattress.com. We do not operate retail stores.

The site is owned and operated by Derick Gallegos, a sole proprietor, under the business name DESCANSO Mattress. Derick Gallegos is the person responsible for the personal information described in this policy.

Email: derick.builds@descansomattress.com
Phone: +1 (817) 313-5698
Location: Dallas, Texas

2. What we collect

We collect only what each part of the site needs to do its job.

The quiz. The mattress quiz runs inside your browser. Your answers are used to show you a recommendation on your screen. The quiz does not send your answers to our servers. When you choose a recommended model and continue to the cart, the recommendation (for example, "Quiz recommendation: Queen iSoft") travels in the page address and is placed in the order notes field, where you can read and change it before you pay. If you enter a referral card number in the quiz, or arrive through a shared referral link, your browser remembers it on your device so it can be filled in at checkout.

Orders and payment. To place an order we ask for your name, email address, phone number, delivery address (street, city and ZIP code), optional delivery notes, and any referral code you have. Order details also include the model, size, options and price of what you bought. Card details are entered in a secure payment form provided by Stripe. Your card number never passes through our servers and we never see or store it.

For a DESCANSO STUDIO order, when you approve your quote we also ask for your name, phone number and delivery address (street, city, state and ZIP code) before payment.

Custom order requests, design appointments and DESCANSO STUDIO. When you send a request, we collect your name, email, phone number, preferred contact method (email, text or call), the day and time you prefer to be reached, the model or starting point you have in mind, size or exact dimensions, desired firmness, the full configuration you built in STUDIO, and any notes you write. If you tick the optional WhatsApp box, we record that you agreed to be contacted there.

Newsletter. If you subscribe, we collect your email address and the time you agreed.

Reviews. If you submit a review, we collect your name, star rating, an optional title, your review text, and the product it is about. We read reviews before they are published. If a review is published, your name and what you wrote appear publicly on the site. Do not include information in a review that you do not want public.

Referral program. A numbered referral card is issued to you automatically when your purchase is confirmed. We keep the card number, the name of the customer it was issued to, and the order it came from. When someone uses a card, we record the name of the person referred, the order reference, and whether the referral was confirmed. The page that shows a cardholder the status of their card shows status only. It never shows a referred person's name, email, phone number or address.

Referral-card wallet link (optional). Referral-card emails include an optional link, with a QR code, to a wallet-card page run by Elune Connections. If you use it, you give your details to Elune directly, under Elune's own privacy policy. We do not collect them on that page.

Internal customer record. We keep an internal customer record that brings together your contact details, your orders and requests, your consent choices (with the date and the version of this policy in force), and private notes and labels our team adds to manage follow-up.

Technical information. Like any website, our servers and hosting provider receive basic technical information when you visit, such as your IP address, browser type and the pages requested. We use IP addresses to limit repeated or abusive requests to our forms.

We do not collect Social Security numbers, government ID numbers or card numbers, and we do not ask for them.

3. How we use it

To build, deliver and support your order, and to send order and payment confirmations.
To answer your custom order or appointment request, agree a time with you, and prepare a quote you approve before anything is built or charged.
To send you the marketing emails you asked for (see section 8).
To run the referral program, including issuing cards and confirming referrals.
To review, moderate and publish reviews.
To keep a customer record so we can follow up on your orders and requests, including private notes and labels our team adds.
To keep the site secure, prevent spam and fraud, and fix errors.
To meet legal, tax and accounting obligations.

We will not use your information for a materially different purpose without telling you first.

4. Who we share it with

We share personal information with the service providers that help us run the business, and only what each one needs.

Provider	What it does for us	What it receives
Stripe	Processes card payments	Payment details you enter in Stripe's form; your name, email, phone and delivery address; order details, delivery notes and referral code attached to the payment; whether you opted in to marketing; and, if you came through the quiz, a marker saying so. Stripe handles this under its own privacy policy.
Resend	Sends our transactional emails (order confirmations, custom order confirmations, referral cards, quotes, newsletter welcome, and review notices to us)	Your email address and the content of the message.
Vercel	Hosts the website and runs its server functions	Technical request data and the information you submit through the site as it is processed.
Neon	Hosts the database where orders, requests, subscribers and reviews are stored	The records described in section 2.
Google Workspace	Our business email and inbox. All customer email to derick.builds@descansomattress.com arrives here	Your email address and anything you write to us.

These providers handle your information to perform their services for us, under their own terms and privacy policies. Some of them process data in the United States or elsewhere.

Elune Connections (optional, your choice). Referral-card emails include a link and QR code to a wallet-card page run by Elune Connections. The link itself does not send Elune your information. If you open the page and enter your name or phone number, Elune receives it directly and handles it under its own privacy policy.

We may also disclose information when the law requires it, to enforce our terms, or to protect the safety and rights of customers, our business or others. If DESCANSO is ever sold or transferred, customer information may transfer with it, and we will tell you.

We do not share your information with advertising networks.

5. Cookies and similar technologies

Cookies and local storage in use

descanso_src: a first-party cookie set by our own quiz page. Its value is quiz, and it lasts 30 days. It tells us that an order came through the quiz, so we can see which part of the site leads to orders. The cookie itself contains no name, email or other personal information about you. When you place an order, its value is recorded on the order and passed to Stripe as order metadata.
Your browser's local storage: the site stores a few items on your device, not on our servers: your shopping cart, a saved referral card number, and, while you are checking out, a copy of the checkout form so you do not lose it if the page reloads. The saved checkout form is removed once your payment is confirmed. You can clear all of this at any time in your browser settings.
Stripe: on the cart and checkout page, Stripe's payment tools load in your browser and may set their own cookies or similar identifiers to process the payment. We do not control these.
Google Fonts: the quiz page loads its typefaces from Google's font service, so your browser contacts Google to fetch them.
Staff sign-in cookie: descanso_admin, used when DESCANSO staff sign in to our private admin area. Visitors do not receive it.

Analytics and advertising

To understand how the site is used, we use the tools below. They may set cookies or similar identifiers in your browser and receive information such as the pages you view, your approximate location, your device and browser type, and how you move through a page.

Google Analytics reports how many people visit, which pages they view and roughly where they are, so we can see what works. It is operated by Google under Google's own privacy policy.
Microsoft Clarity records how visitors use our pages (clicks, scrolling and page views) as session recordings and heatmaps, so we can fix confusing pages. Clarity masks sensitive content, such as text typed into form fields, by default. It is operated by Microsoft under Microsoft's own privacy statement.

These tools do not run on the private payment links we send to customers or in our staff area. You can block them with your browser settings or a content blocker. Google offers an opt-out add-on at tools.google.com/dlpage/gaoptout.

Controlling cookies

Most browsers let you block or delete cookies and local storage. If you do, the site still works, but your cart and saved referral code will not be remembered.

6. We do not sell your personal information

We do not sell your personal information, and we do not use it for profiling that produces legal or similarly significant effects. The analytics tools described in section 5 receive usage data about visits to the site.

7. Referral program and other people's information

If you give us another person's name or contact details, for example when using a referral card, please share only information you have that person's permission to share. Referral status pages show status only, as described in section 2.

8. Marketing emails and messages

Email. We send you marketing email only if you opt in: by subscribing in the site footer, or by ticking the optional box at checkout for promotions, exclusive deals and updates. Subscribing to the newsletter records the time of your consent. Every marketing email tells you how to unsubscribe, and you can also reply "unsubscribe" or write to derick.builds@descansomattress.com at any time. We stop sending marketing email within 10 business days of your request.

Transactional email. Order confirmations, payment receipts, quotes and replies to your requests are not marketing. You will receive them even if you have unsubscribed from marketing.

Text and WhatsApp. If you choose "Text message" as your preferred contact method, we use your number to text you about your request. If you tick the optional WhatsApp box on the custom order form, we may contact you on WhatsApp about that request. That box is optional, and email remains available either way. We also use the channel you choose (text, email or WhatsApp) for the night-21 comfort check-in described on our Returns & Warranty page. We do not send promotional texts or WhatsApp messages, and we will ask for your express written consent before we ever begin. To stop text or WhatsApp messages, reply "stop" or tell us by email.

9. Your choices and rights

You can ask us at any time to:

Access the personal information we hold about you and receive a copy.
Correct information that is wrong or out of date.
Delete your personal information.
Opt out of marketing emails, texts and WhatsApp messages.

To make a request, email derick.builds@descansomattress.com from the address we have on file. We may need to confirm it is really you before we act. We will respond within 30 days.

Some records we must keep even after a deletion request, for example order, payment and tax records, or records we need to resolve a dispute or honor a warranty. In that case we will tell you what we are keeping and why. We will not treat you differently for exercising any of these choices.

If you are not satisfied with our response, you may contact the Texas Attorney General's office.

10. How long we keep it

We keep personal information only as long as we need it for the purposes above.

Order, invoice and payment records: as long as needed to fulfill your order, honor the warranty, and meet tax and legal obligations.
Custom order and appointment requests that do not become orders: as long as needed to respond to your request and follow up with you.
Newsletter subscribers: until you unsubscribe or ask us to delete your address.
Reviews: until you ask us to remove yours or we retire it.
Referral records: for as long as the card and its credits remain valid, and as long as needed to honor a reward you have earned.

When we no longer need information for these purposes, we delete it or remove what identifies you.

11. Security

We use reasonable technical and organizational measures to protect your information. Card details are handled by Stripe, and we do not store them. Our forms are served over an encrypted (HTTPS) connection, and access to the private admin area is limited to DESCANSO staff. No method of transmission or storage is completely secure, so we cannot guarantee absolute security. If a breach affecting your information occurs, we will notify you and the authorities as the law requires.

12. Children

This site is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.

13. Texas and other U.S. residents

DESCANSO sells to customers in Dallas and the Dallas–Fort Worth Metroplex, and this policy applies to all visitors in the United States. Where a state privacy law, including the Texas Data Privacy and Security Act, gives you rights beyond those in section 9, we will honor them to the extent the law applies to us. We do not sell personal information, as stated in section 6.

14. Changes to this policy

We may update this policy as the site or the law changes. The "Last updated" date at the top shows when it last changed. If a change is material, for example if we begin using analytics or advertising tools, we will say so on the site before it takes effect, and where required we will ask for your consent.

15. Contact

Questions, requests or complaints about your privacy:

DESCANSO Mattress, Derick Gallegos
Email: derick.builds@descansomattress.com
Phone: +1 (817) 313-5698
Workshop: Dallas, Texas