Privacy policy

Privacy Policy

The administrator of personal data responsible for their processing is:

MyDreamShapes Ltd

14 Westfield Road

London, W13 9EP

United Kingdom

privacy@mydreamshapes.com

Thank you for your interest in our online store. Protecting your privacy is very important to us. Below you will find detailed information regarding the handling of your data.

1. Access data and hosting

You can visit our website without providing personal data. For each page call-up, the server automatically saves so-called server logs, e.g. the name of the requested file, your IP address, the date and time of the call-up, the amount of data transferred, and the requesting ISP, and documents the page call-up. This data is analyzed solely for the purpose of ensuring the proper functioning of our website and improving our offerings. The above serves, in accordance with Article 6(1)(f) UK GDPR, to safeguard our legitimate interest in the optimal, correct presentation of our websites and offerings.

Hosting

All access data will be deleted no later than fourteen days after the end of your visit to our site. Website hosting and display services are partially provided on our behalf by service providers under a data processing agreement. Unless otherwise stated, all access data and data collected in the forms on our website are processed on their servers.

2. Collection and processing of data for contract performance and contact purposes

2.1 Data processing for the purpose of contract execution

We process the personal data you provide when placing an order for the purpose of fulfilling the contract (including warranty/guarantee inquiries and legal update obligations). The legal basis is Article 6(1)(b) UK GDPR.

2.2 Customer account

If you choose to create a customer account, we will process the necessary personal data for this purpose (Article 6(1)(a) UK GDPR – consent). You can delete your account at any time.

2.3 Processing of data for contact purposes

When you contact us (e.g. via contact form or email), we process the data you voluntarily provide for the purpose of responding to your inquiry (Article 6(1)(b) UK GDPR).

3. Data processing for delivery

For contract performance (Article 6(1)(b) UK GDPR), we will share your data with the courier company chosen during the ordering process.

4. Data processing for payment processing

For processing payments in our store, we work with online payment service providers. We share your payment data with the payment processor you choose during checkout (Article 6(1)(b) UK GDPR).

5. Marketing activities by e-mail

If you subscribe to our newsletter, we will process your email address based on your consent (Article 6(1)(a) UK GDPR). You can unsubscribe at any time via the link in the newsletter or by contacting us directly.

6. Cookies and similar technologies

We use cookies and similar technologies to make your visit to our website more attractive and to enable certain functions (e.g. shopping cart). Some cookies are necessary for the proper functioning of the site (legitimate interest – Article 6(1)(f) UK GDPR), while others require your consent (Article 6(1)(a) UK GDPR).

You can change your cookie settings at any time via your browser settings.

7. Use of third-party tools

Where you have given consent, we use analytics and marketing tools from providers such as Google and Meta (Facebook/Instagram). These may process your IP address, device/browser data, and site usage for analytics and personalised advertising purposes. Data may be transferred outside the UK/EU in accordance with standard contractual clauses.

8. Trusted Shops integration

Our website integrates the Trusted Shops Trustbadge to display trustmarks and reviews, and to offer buyer protection. This integration is based on our legitimate interest (Article 6(1)(f) UK GDPR). Data processing occurs jointly with Trusted Shops AG, Subbelrather Str. 15C, 50823 Cologne, Germany, under a joint controllership agreement.

9. Social media

We maintain profiles on Facebook, Instagram, YouTube, and LinkedIn. When you visit these profiles, the platform provider processes your data according to its privacy policy. Where applicable, processing is based on joint controllership agreements under Article 26 UK GDPR.

10. Your rights

Under the UK GDPR, you have the right to:

Access your personal data (Article 15)

Rectify inaccurate or incomplete data (Article 16)

Erase your data (“right to be forgotten”) (Article 17)

Restrict processing (Article 18)

Data portability (Article 20)

Object to processing (Article 21)

Lodge a complaint with the Information Commissioner’s Office (ICO)

If we process your data for direct marketing purposes, you may object at any time and we will stop processing.

11. Contact

If you have any questions about data protection or wish to exercise your rights, please contact: