Privacy policy

Last update: January 29, 2026

§ 1. GENERAL INFORMATION

  1. This Privacy Policy sets out the rules for the processing of personal data and the use of cookie technologies on the website dreamly.store (the "Store").

  2. The Data Controller ensures that your data is processed securely, using appropriate technical and organizational measures (including SSL encryption), and in compliance with the General Data Protection Regulation (GDPR) and applicable Polish laws.

§ 2. DATA CONTROLLER

The controller of your personal data is: DREAMLY SPÓŁKA Z OGRANICZONĄ ODPOWIEDZIALNOŚCIĄRegistered office: ul. PANIOWICKA 1A/ 5, 54-107 WROCŁAW, POLAND Registered in the Register of Entrepreneurs of the National Court Register (KRS). Tax ID (NIP): 8943260871 REGON: 541762610 Waste Database Number (BDO): 000683036 Share capital: 5,000.00 PLN Contact: hey@dreamly.store

§ 3. PURPOSES AND LEGAL BASES FOR PROCESSING

We process data for clearly defined purposes:

Purpose of processing Legal basis (GDPR)
Order fulfillment and shipping Art. 6(1)(b) (necessity for the performance of a contract)
Newsletter and waitlist (Klaviyo) Art. 6(1)(a) (voluntary consent)
Customer Account management Art. 6(1)(b) (performance of a contract for digital services)
Direct marketing and offer profiling Art. 6(1)(f) (legitimate interest of the controller)
Tax and accounting compliance Art. 6(1)(c) (legal obligation)
Complaints and legal claims defense Art. 6(1)(f) (legitimate interest of the controller)
Export to Sheets

§ 4. DATA RETENTION PERIOD

We store data only as long as necessary:

  1. Transaction and accounting data: 6 years (in accordance with tax regulations and the statute of limitations for claims).

  2. Marketing data (Newsletter): Until you withdraw your consent (by clicking "unsubscribe").

  3. E-mail correspondence: 3 years (to maintain accountability and customer service continuity).

  4. Cookie data: Until deleted by the User via browser settings.

§ 5. DATA RECIPIENTS AND INTERNATIONAL TRANSFERS

  1. Your data is shared only with trusted partners:

    • Shopify Inc. (e-commerce platform).

    • Klaviyo Inc. (marketing automation).

    • Courier companies (e.g., InPost, DPD) – for delivery.

    • Payment processors – for secure transaction handling.

    • Accounting firm – for tax purposes.

  2. Due to the use of Shopify and Klaviyo services, data may be transferred outside the European Economic Area (EEA). These entities guarantee a high level of data protection through Standard Contractual Clauses and participation in privacy programs approved by the EC.

§ 6. COOKIES, PIXELS, AND PROFILING

  1. The Store uses cookies: strictly necessary (for the cart and session) and analytical/marketing cookies.

  2. We use profiling. By using tools such as Klaviyo, we analyze your activity (e.g., viewed products) to send you tailored offers or discount codes (e.g., in case of an abandoned cart).

  3. You can restrict or disable cookies in your browser settings at any time; however, this may limit some Store functionalities.

§ 7. YOUR RIGHTS

You have the right to: access your data, rectify it, request erasure ("the right to be forgotten"), restrict processing, data portability, and the right to object. You also have the right to withdraw your marketing consent at any time and to lodge a complaint with the President of the Personal Data Protection Office (UODO) in Poland.