Skip to content
Free UK standard delivery on orders over £60.00 · 30-day returns

Privacy Policy

Last updated: 6 September 2026

This policy explains how [REGISTERED COMPANY NAME] ("Dreamora", "we", "us") collects, uses and protects your personal data when you visit our website or place an order, in line with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who we are

[REGISTERED COMPANY NAME] is the data controller responsible for your personal data. Our registered address is [REGISTERED COMPANY ADDRESS]. You can contact us about privacy matters at [SUPPORT EMAIL].

Information we collect

  • Account details: name, email address and password (stored securely as a hash, never in plain text) when you register.
  • Order information: billing and delivery addresses, phone number, and the items you purchase, needed to fulfil your order.
  • Payment information: we never see or store your full card details. Payments are processed directly by Stripe, our PCI-compliant payment provider — see Stripe's own privacy policy for how they handle this data.
  • Guest checkout: if you check out without an account, we still process your order and delivery details to fulfil and support your order, but do not create a stored account profile.
  • Usage data: if you consent to analytics cookies, we collect anonymised information about how you use our site to help us improve it. See our Cookie Policy for details.
  • Marketing preferences: if you opt in, your email address so we can send you newsletters and offers. You can unsubscribe at any time.

How we use your information

  • To process and fulfil your orders, including payment, delivery and customer service.
  • To manage your account, including order history, saved addresses and wishlist.
  • To send you transactional emails (order confirmations, dispatch notices, password resets).
  • To send marketing communications, only where you've opted in, and to personalise them.
  • To detect and prevent fraud, and to comply with our legal and tax obligations.
  • To improve our website and products, using aggregated and anonymised analytics where you've consented.

Legal basis for processing

We process your data under the following legal bases: performance of a contract (to fulfil your order), legitimate interests (to prevent fraud and improve our service), consent (for marketing and analytics cookies), and legal obligation (for tax and accounting records).

Sharing your information

We share your information only with the third parties needed to run our business: our payment processor (Stripe), delivery couriers, email and hosting providers, and, where you've consented, analytics providers. We never sell your personal data.

How long we keep your data

We keep order and account records for as long as needed to comply with our legal and tax obligations (typically up to 6 years), and account data for as long as your account remains active. You can request deletion of your account at any time, subject to records we're legally required to retain.

Your rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you.
  • Correct inaccurate or incomplete data.
  • Request erasure of your data, where we're not legally required to keep it.
  • Object to or restrict certain processing, including marketing.
  • Request a copy of your data in a portable format.
  • Withdraw consent at any time, where processing is based on consent.

To exercise any of these rights, contact us at [SUPPORT EMAIL]. You also have the right to complain to the UK's Information Commissioner's Office (ICO) at ico.org.uk.

Cookies

We use cookies and similar technologies to run our site and, with your consent, to understand usage and personalise marketing. See our Cookie Policy for full details and how to manage your preferences.

Changes to this policy

We may update this policy from time to time. Significant changes will be highlighted on this page, with the "last updated" date above reflecting the most recent revision.