Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it.
1. Who is responsible for your personal data
For the purpose of the Data Protection Act 1998 (the “Act”), EU General Data Protection Regulation (“GDPR”), PCI-DSS, and European data protection legislation, the data controller is Dreammovez. We control the ways your personal data are collected and the purposes for which your personal data are used by Dreammovez. Our Privacy Notice applies to the personal data that Dreammovez collects and uses. References in this Privacy Notice to Dreammovez, “we”, “us” or “our” mean Dreammovez Limited, a company registered in England and Wales under company number 11086770 and whose registered office is at Ground Floor, 2 Woodberry Grove, London N12 0DR.
2. Purpose and lawful basis for processing your data
We process your personal data for the following purposes:
These purposes allow Dreammovez to seek your consent to process your data for communication, education and marketing purposes (GDPR 1). Without your explicit consent, Dreammovez will not process your data for these purposes. The purpose and lawful basis for processing your data may change from time to time, where this Notice will be updated.
Your consent will be an explicit action from 25th May 2018. Because of the need for consent we will not use defaulted opt-in checkboxes or include your personal data for communication and marketing purposes where you have asked only for communications relating to service delivery or in the performance of contractual obligations. The length of time we retain your personal data will depend on any legal obligations we have, the nature of any contracts we have in place with you, the existence of your consent or our legitimate interests as a business. We will retain your personal data for as long as we need it in order to fulfil our purposes as set out in this Privacy Notice or in order to comply with the law. We will not contact you if you have withdrawn consent, but you can grant or withdraw your consent at any time by email email@example.com We will also include the opportunity to unsubscribe or withdraw consent on all marketing emails.
4. Personal data we collect about you
When using the term “personal data” in our Privacy Notice, we mean information that relates to you and allows us to identify you, either directly or in combination with other information that we may hold. We collect some personal data from you, for example when you use our website, or use our services or contact us. We may collect and process the following categories of information about you:
We will only use your personal data for those situations listed above, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose. If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis, which allows us to do so.
Please note that we may process your personal data without your knowledge or consent, where this is required or permitted by law.
Sensitive personal data
Information that could reveal your racial or ethnic origin, physical or mental health, religious beliefs or alleged commission or conviction of criminal offences is considered “sensitive personal data” under the UK Data Protection Act 1998 and other data protection laws, which we do not collect via our website.
We use your personal data for the following purposes:
b) To communicate with you and manage our relationship with you
We will need to contact you by email and/or telephone in the course of delivering our service to meet our contractual obligations. We may also need to contact you for administrative or operational reasons.
Please be aware that these communications are not made for marketing purposes and as such, you will continue to receive them even if you opt-out from receiving marketing communications.
We may also use your personal data if we contact you after you have sent us a request, filled in a web-form through our website or contacted us on social media.
Your opinion is very important to us, so we may send you an email to seek your feedback.
We will use the communications you exchange with us and the feedback you may provide in order to manage our relationship with you as our client and to improve our services and experiences for clients.
c) To personalise and improve your customer experience
We may use your personal data in order to tailor our services to your needs and preferences and to provide you with a personalised client experience. We may also collect information on how you use our website, which pages of our website you visit most, which services you search for to understand what you like. We may use this information to tailor the content and offers that you see on our website and, if you have agreed to receiving marketing communications, to send you relevant messages that we think you will like.
d) To inform you about our news and offers that you may like
We may send you marketing communications, if you have indicated that you are happy to receive these and you explicitly agree to receive such communications. You can also request us to send you marketing communications through managing your preferences in your account.
If you are happy to receive marketing communications, we will provide you with news from us such as new products that you may be interested in or services that you may like.
Please note that we do not share your contact details and other personal data with other companies for marketing purposes, unless we have obtained your consent to do so.
If you do not want to receive marketing communications from us, you can simply tell us so by clicking the relevant box on our preference form.
You can also choose to opt out from receiving marketing communications at any time, by clicking on the relevant unsubscribe link at the bottom of any marketing related email you may receive from us.
If you prefer, you can express your preference to not receive marketing communications by emailing us, firstname.lastname@example.org, calling us (0207 859 4304). We ask that you allow 28 working days to complete any unsubscribe request.
e) To improve our services, fulfil our administrative purposes and protect our business interests
The business purposes for which we will use your information include accounting, billing and audit, credit or other payment card verification, fraud screening, security and legal purposes, statistical and marketing analysis, systems testing, maintenance and development such as:
f) To comply with our legal obligations
For example, our obligations for accounting and auditing of our business to comply with any obligations under employment law and to provide your information to local police agencies
6. How long do we retain personal data for?
To determine the appropriate retention period for personal data, we consider the amount, nature, and sensitivity of the personal data, the potential risk of harm from unauthorised use or disclosure of your personal data, the purposes for which we process your personal data and whether we can achieve those purposes through other means, and the applicable legal requirements.
In some circumstances we may anonymise your personal data so that it can no longer be associated with you, in which case we may use such information without further notice to you.
Once you are no longer a client, we will retain your personal data in accordance with our data retention policy and applicable laws and regulations.
7. Requesting access to your data
You have a right to request access to the personal data that we hold about you. This could include information relating to service purchases.
If you have questions in relation to your personal data, please contact us.
8. Your Right to be Forgotten
You have a right to be forgotten and have data erased and / or stop being processed where the personal data is no longer necessary for the purpose of collection, you withdraw consent, when you object to the processing or to comply with a legal obligation.
We will not erase your records, as we need to maintain your transactional data for our legal obligations to the local tax and revenue authorities. The records will be anonymised to overwrite your personal data with fictional names, addresses and emails, making it impossible to restore a single client.
We have a number of security and governance protections in place that will be excluded from your right to be forgotten:
reasons, and your info may be kept in this archive. Access to this gateway is limited to named data controllers for Dreammovez.
If you have questions in relation to your personal data, please contact us.
9. Right to restrict processing
You have a right for your personal data to be stored but not processed. This is achieved through the withdrawal of consent.
If you have questions in relation to your personal data, please contact us
10. Security of your personal data
We are committed to taking appropriate technical and organisational measures to protect your personal data against unauthorised or unlawful processing and against accidental loss, destruction or damage to personal data. When you provide your personal data through our website or systems, this information is transmitted across the Internet securely using high-grade encryption.
The information that you provide to us will be held in our systems, which are located on our premises or those of an appointed third party. We may also allow access to your information by other third parties who act for us for the purposes described in this Privacy Notice or for other purposes approved by you.
All information you provide to us is stored on our secure servers. Any payment transactions will be encrypted using SSL technology.
Unfortunately, the transmission of information via the Internet is not completely secure. Although we will do our best to protect your personal data, we cannot guarantee the security of your data transmitted to the site; any transmission is at your own risk. Once we have received your information, we will use strict procedures and security features to try to prevent unauthorised access.
We will retain your personal data for as long as we need it in order to fulfil our purposes set out in this Privacy Notice or in order to comply with the law.
11. Cookies and other tracking technologies
In order to improve our services, to provide you with more relevant content and to analyse how visitors use our website, we may use technologies, such as cookies or tracking software. Please be aware that in most cases we will not be able to identify you from the information we collect using these technologies.
12. Sharing your personal data
We may share your personal information with certain trusted third parties in accordance with contractual arrangements in place with them, including:
13. Data Protection Officer
We have not appointed a DPO to oversee compliance with this Privacy Notice. If you have any questions about this Privacy Notice or how we handle your personal data, please contact your usual contact at our office. You have the right to make a complaint at any time to the Information Commissioner’s Office (ICO), the UK supervisory authority for data protection issues.
14. Updates to our privacy notice
We may make changes to this Privacy Notice from time to time. We will publish on our website any new version of this Notice.
15. Contact information
Please contact us with any questions, comments and requests regarding this Privacy Notice.