Privacy Policy

Article 1. Who We Are

1.1. This Privacy Policy describes how Dreamares V.O.F., hereinafter referred to as “Dreamares”, “we”, “us”, or “our”, collects, uses, stores, and protects personal data.

1.2. Dreamares V.O.F. is registered with the Dutch Chamber of Commerce under number 82650675 and is located at:

Dreamares V.O.F.
Frans Halsstraat 46
9601 HN Hoogezand
The Netherlands

Email: info@dreamares.com

1.3. Dreamares is the data controller for the personal data described in this Privacy Policy, unless stated otherwise.

1.4. This Privacy Policy applies to:

• dreamares.com;
• dreamares.nl;
• our online store;
• customer accounts and account-related features;
• our newsletter and marketing communications;
• customer service and other communications with Dreamares.

Article 2. Personal Data We Process

2.1. Depending on how you use our Websites and Services, we may process the following categories of personal data.

Identity and contact information

This may include:

• first and last name;
• billing address;
• delivery address;
• email address;
• telephone number;
• country of residence.

We use this information to process and deliver orders, manage returns, provide customer support, and communicate with you.

Order and transaction information

This may include:

• products ordered;
• selected sizes and quantities;
• order date;
• order number;
• order value;
• payment status;
• delivery status;
• returns, cancellations, and refunds;
• purchase history.

Payment information

Payments may be processed through Stripe or PayPal.

Dreamares generally does not receive or store your complete credit card or payment account details. These details are processed directly by the relevant payment provider.

We may receive limited payment-related information, such as:

• payment method;
• transaction identifier;
• payment status;
• refund status;
• card type or limited card information, such as the final digits of a payment card.

Stripe and PayPal may process personal data as independent data controllers or service providers for their own legal, payment-security, and fraud-prevention purposes.

Customer account information

If customer account functionality is available, we may process:

• your name and email address;
• authentication and login information;
• account preferences;
• saved addresses;
• order history;
• account activity.

Your password is processed through our authentication infrastructure. Dreamares does not need to know or view your password in order to manage your account.

Communication information

When you contact us, we may process:

• your contact information;
• the date and method of communication;
• the content of your message;
• any documents, photographs, or other information you provide;
• information required to resolve your question or complaint.

Newsletter and marketing information

If you subscribe to our newsletter or agree to receive marketing communications, we may process:

• your name;
• email address;
• marketing preferences;
• consent status;
• the date and method of your subscription;
• interactions with our marketing communications, where permitted.

Technical and device information

When you visit our Websites, certain technical information may be processed automatically, including:

• IP address;
• browser type and version;
• device type;
• operating system;
• approximate location based on IP address;
• language and time-zone settings;
• visited pages;
• date and time of visits;
• referring website;
• website interactions;
• error, security, and diagnostic information.

Shopping preferences

We may process information about:

• products you view;
• products added to your shopping cart;
• previous purchases;
• product and size preferences;
• interactions with promotions.

We use this information to operate the store, understand customer interests, and improve our products and Websites.

Article 3. How We Collect Personal Data

3.1. We collect personal data directly from you when you:

• place an order;
• create or use an account;
• subscribe to our newsletter;
• contact customer service;
• request a return or refund;
• participate in a promotion;
• complete a form;
• communicate with us through email or social media.

3.2. We automatically collect certain technical information when you visit or interact with our Websites.

3.3. We may also receive information from service providers involved in your order or use of our Websites, including:

• Stripe;
• PayPal;
• PostNL;
• Vercel;
• Supabase;
• email and communication providers;
• fraud-prevention and security providers;
• Meta and TikTok, where their marketing technologies have been activated with your consent.

Article 4. Purposes and Legal Bases

4.1. We only process personal data when we have a valid legal basis.

Performance of a contract

We process personal data when this is necessary to:

• accept and process your order;
• receive and confirm payment;
• deliver your products;
• manage customer accounts;
• provide order updates;
• process returns, cancellations, and refunds;
• provide customer service connected to your purchase.

Legal obligations

We may process or retain personal data to:

• maintain legally required financial and tax records;
• comply with consumer-protection requirements;
• respond to lawful requests from authorities;
• prevent or report unlawful activity where required;
• comply with accounting and administrative obligations.

Legitimate interests

We may process personal data where this is necessary for our legitimate business interests, provided that your rights and interests do not outweigh those interests.

These interests may include:

• securing our Websites and systems;
• preventing fraud and misuse;
• improving our Websites, products, and services;
• handling disputes and legal claims;
• maintaining business records;
• understanding general website performance;
• providing effective customer service.

Consent

We rely on your consent where required, including for:

• newsletter subscriptions;
• certain promotional communications;
• non-essential cookies;
• personalised advertising;
• Meta Pixel;
• TikTok Pixel;
• similar marketing and tracking technologies.

You may withdraw your consent at any time. Withdrawing consent does not affect processing that took place before the withdrawal.

Article 5. Cookies and Similar Technologies

5.1. Our Websites may use cookies and similar technologies.

Essential cookies

Essential cookies are required to operate the Websites and online store. They may be used for:

• shopping-cart functionality;
• checkout processes;
• account authentication;
• security;
• fraud prevention;
• remembering privacy and cookie preferences;
• maintaining website sessions.

These cookies cannot always be disabled without affecting essential website functionality.

Preference cookies

Preference cookies may remember choices such as:

• language;
• region;
• display preferences;
• previously selected settings.

Analytics cookies

Analytics technologies may be used to understand how visitors interact with our Websites and to improve performance and usability.

Where legally required, analytics cookies will only be activated after you have provided consent.

Marketing cookies

We may use marketing technologies provided by platforms such as Meta, including Facebook and Instagram, and TikTok.

Where these technologies are enabled, they may be used to:

• measure advertising performance;
• understand whether an advertisement resulted in a visit or purchase;
• create advertising audiences;
• display more relevant advertisements;
• limit repeated advertisements.

Non-essential marketing and tracking technologies will only be activated after you have given consent through our cookie settings.

5.2. You can accept, reject, or adjust non-essential cookies through our cookie banner or cookie settings.

5.3. You can also manage cookies through your browser settings. Blocking all cookies may affect the functioning of certain parts of the Websites.

Article 6. Newsletter and Direct Marketing

6.1. We may send newsletters and promotional communications when:

• you have provided consent; or
• sending the communication is otherwise permitted by applicable law.

6.2. Transactional communications relating to your order, payment, delivery, return, refund, security, or account are not considered promotional communications and may still be sent when necessary.

6.3. You can unsubscribe from promotional emails at any time by:

• using the unsubscribe link included in the email; or
• contacting us at info@dreamares.com.

6.4. After unsubscribing, we may retain limited information about your opt-out to ensure that we respect your preference.

Article 7. Sharing Personal Data

7.1. We do not sell your personal data.

7.2. We may share personal data with trusted third parties where necessary to operate our business and provide our Services.

Payment providers

We may share transaction and order information with:

• Stripe;
• PayPal.

These providers process payments, assist with fraud prevention, and comply with financial and legal obligations.

Delivery providers

We may share necessary delivery information with PostNL, including:

• your name;
• delivery address;
• email address;
• telephone number;
• shipment and tracking information.

PostNL may use this information to deliver your order and provide delivery updates.

Hosting and database providers

Our Websites and related systems use:

• Vercel for website hosting and infrastructure;
• Supabase for database, authentication, and backend services.

These providers may process technical, account, customer, and order information on our behalf, depending on how you use the Websites.

Marketing platforms

Where you have provided the required consent, information may be shared with or collected through:

• Meta, including Facebook and Instagram;
• TikTok.

These platforms may also process information for their own purposes under their respective privacy policies.

Professional advisers and authorities

We may share information with:

• accountants;
• legal advisers;
• insurers;
• fraud-prevention specialists;
• regulators;
• law-enforcement authorities;
• courts and other public authorities.

We only do so where reasonably necessary or legally required.

Business transfers

If Dreamares is involved in a merger, sale, restructuring, financing, or transfer of all or part of the business, personal data may be shared with relevant parties, subject to appropriate confidentiality and data-protection safeguards.

Article 8. International Data Transfers

8.1. Some of our service providers may process personal data outside the European Economic Area.

8.2. Where personal data is transferred to a country that has not been recognised as providing an adequate level of data protection, we take reasonable steps to ensure that appropriate safeguards are in place.

These safeguards may include:

• European Commission adequacy decisions;
• Standard Contractual Clauses;
• approved data-protection frameworks;
• contractual and organisational security measures;
• other transfer mechanisms permitted under applicable law.

8.3. You may contact us for more information about the safeguards relevant to your personal data.

Article 9. Retention of Personal Data

9.1. We do not retain personal data longer than reasonably necessary for the purposes for which it was collected.

9.2. Retention periods depend on the type of information and our legal obligations.

Orders, invoices, and financial administration

Order, invoice, payment, and accounting information is generally retained for at least seven years where required by Dutch tax and accounting law.

Certain ecommerce records may be retained for ten years where EU One Stop Shop or Import One Stop Shop requirements apply.

Customer accounts

Account information is generally retained for as long as your account remains active.

When you request account deletion, we will delete or anonymise information that is no longer required. Information connected to orders, invoices, disputes, fraud prevention, or legal obligations may be retained for longer.

Customer service communications

Customer service communications are retained for as long as necessary to answer your request, manage complaints, establish what was agreed, or protect legal rights.

Marketing information

Newsletter and marketing information is retained until you unsubscribe or withdraw your consent, unless limited information must be retained to record and respect your opt-out.

Technical and security information

Technical logs and security information are retained for the period reasonably necessary for website security, troubleshooting, fraud prevention, and system administration.

9.3. After the applicable retention period, personal data will be deleted, anonymised, or securely removed unless further retention is legally required.

Article 10. Security

10.1. We use appropriate technical and organisational measures designed to protect personal data against:

• unauthorised access;
• accidental loss;
• misuse;
• alteration;
• disclosure;
• destruction.

10.2. Access to personal data is limited to persons and service providers who need the information for legitimate business purposes.

10.3. Although we take reasonable measures to secure personal data, no website, database, transmission method, or storage system can be guaranteed to be completely secure.

10.4. You are responsible for keeping your account credentials confidential and for notifying us if you suspect unauthorised use of your account.

Article 11. Your Privacy Rights

11.1. Subject to applicable data-protection law, you may have the right to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request deletion of your personal data;
• request restriction of processing;
• object to certain processing;
• request data portability;
• withdraw consent at any time;
• object to direct marketing;
• submit a complaint to a data-protection authority.

11.2. These rights are not absolute. We may be required or permitted to retain certain information, for example when it is needed for legal compliance, fraud prevention, outstanding transactions, or legal claims.

11.3. To exercise your rights, contact info@dreamares.com.

Please clearly describe your request. We may ask for additional information to verify your identity before processing the request.

11.4. You also have the right to submit a complaint to the Autoriteit Persoonsgegevens, the Dutch Data Protection Authority.

Article 12. Automated Decision-Making

12.1. Dreamares does not currently use personal data to make decisions based solely on automated processing that produce legal or similarly significant effects for customers.

12.2. Payment providers and fraud-prevention providers may use automated systems to identify suspicious transactions or determine whether a payment can be processed. Their processing is governed by their own terms and privacy policies.

Article 13. Children’s Privacy

13.1. Our Websites and Services are not specifically directed at children.

13.2. We do not knowingly collect personal data from children who are not legally able to provide valid consent without the involvement of a parent or legal guardian.

13.3. If you believe that a child has provided personal data to us without the appropriate permission, please contact us at info@dreamares.com.

Article 14. Third-Party Websites and Social Media

14.1. Our Websites may contain links to third-party websites, payment services, delivery services, and social-media platforms.

14.2. Dreamares is not responsible for the privacy practices of these third parties when you visit or use their independent services.

14.3. We recommend reviewing the privacy policies of third parties before providing personal data to them.

Article 15. Changes to This Privacy Policy

15.1. We may update this Privacy Policy when:

• our Websites or Services change;
• we introduce new technologies or service providers;
• legal requirements change;
• our data-processing practices change.

15.2. The latest version will be published on our Websites. The “Last Updated” date at the top indicates when the Privacy Policy was last revised.

15.3. Where required, we will provide additional notice or request new consent before making material changes that affect consent-based processing.

Article 16. Contact Us

If you have questions, concerns, or requests relating to this Privacy Policy or the processing of your personal data, please contact:

Dreamares V.O.F.
Frans Halsstraat 46
9601 HN Hoogezand
The Netherlands

KvK: 82650675
Email: info@dreamares.com