DreamCloud Website Privacy Policy
Effective Date: May 8th, 2019
Dreamcloud (“Dreamcloud”, “we”, “us”, or “our”), owned and operated by Nectar Sleep Ltd, recognizes the importance of privacy. In this Privacy Policy, we describe how we collect, use, and disclose information that we obtain about users of our website www.dreamcloudsleep.co.uk (the “Site”) and the products and services available through our Site (collectively, the Site, and the services available through it, are the “Services”). By using any of our Services, you agree that any information that we collect from or about you through our Services, including personal information, anonymous information, and aggregate information, will be handled as described in this Privacy Policy. Your use of our Services, and any dispute over privacy, is subject to this Privacy Policy and any other applicable agreements between you and DreamCloud, such as our Terms of Use, including any applicable limitations on damages and the resolution of disputes. Please read the following carefully to understand our views and practices regarding your personal data and how we will treat it. By engaging with our Site you acknowledge you have read and understood this privacy policy. For the purposes of European Economic Area data protection law, (the “Data Protection Law”), the data controller is: Nectar Sleep Ltd, email address hello@dreamcloudsleep.co.uk
Information We Collect
We collect information about you directly from you, from third parties, and automatically through your use of our Services. We may combine information collected from or about you from these various sources. Information We Collect Directly From You We may collect information about you directly from you. For example, if you purchase a product or service, we will collect your name, billing and shipping address, email address, telephone number, and payment card information. We will also collect any other information that you provide to us through our Services. For example, if you chat with us through our Site, we will collect you’re the contents of any messages you send us; if you elect to tell us how you sleep we will collect that information (e.g., sleeps with – myself and wife and kids); if you sign up to receive emails from us, we will collect your email address; and if you complete a survey on our Site, we will collect your responses to the survey.
Information We Collect About You from Third Parties
We may also collect information about you from third parties. For example, if your friend refers you to our Services, then we may collect information such as your email address from your friend.
Information We Collect Automatically Through Our Services
We automatically collect information about you through your use of our Services, including, without limitation your IP address, location, browser type, domain name, the website that led you to our Services, the website to which you go after leaving our Services, the dates and times you access our Services, and the links you click and your other activities within the Services. Please see our Cookies and Other Tracking Mechanisms section below for more information. We may combine information we collect automatically with information we collect directly from or from third parties.
The Legal Bases We Rely On:
The law on data protection sets out a number of different reasons for which we may collect and process your personal data in certain circumstances, including:
We can collect and process your data with your consent.
For example, if you have given your consent to receiving to receiving marketing material from us at the point we collected your information.
◦We need your personal data to comply with our contractual obligations.
For example, where you have provided us with your email address to receive our services, we will use this information in order to effectively deliver and communicate our services.
For example, where you have provided a delivery address so we can deliver your order.
◦If the law requires us to, we may need to collect and process your data.
For example, we can pass on details of people involved in fraud or other criminal activity affecting us to applicable law enforcement.
◦We may require your data to pursue our legitimate interests in a way which might reasonably be expected as part of running our business and which does not materially impact your rights, freedom or interests.
For example, it is in our legitimate interests to ensure that content from our Services is presented in the most effective manner for you and your computer and we provide you with the information, products and services that you request from us.
User Content
Through our third party review providers Yotpo and Trust Pilot, we invite you to post content on our Services, including your ratings, reviews, comments, and any other information that you would like to be available on our Services. If you post content all of the information that you post will be publicly available, and DreamCloud cannot prevent such information from being used in a manner that may violate this Privacy Policy, the law, or your personal privacy. For information about how Yotpo and Trust Pilot uses and processes your personal data please see Yotpo and Trust Pilot’s privacy policy.
How We Use Your Information
We may use your information, including personal information and user content, for the following purposes:
Providing and Improving Our Services.
To provide and maintain our Services; to improve our Services; to develop new features, products, or services; to perform technical operations, such as updating software; and for other customer service and support purposes.
To analyze how you interact with our Services; to monitor and analyze usage and activity trends; and for other research, analytical, and statistical purposes.
- Protecting Rights and Interests.
To protect the safety, rights, property, or security of DreamCloud, the Services, any third party, or the general public; to detect, prevent, or otherwise address fraud, security, or technical issues; to prevent or stop activity which DreamCloud, in its sole discretion, may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity; to use as evidence in litigation; and to enforce this Privacy Policy or our Terms of Use.
To comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; to respond to a subpoena, warrant, court order, or other legal process; or as part of an investigation or request, whether formal or informal, from law enforcement or a governmental authority.
Our Promotional Updates and Communications
Where permitted by one of the legal bases above, we will use your personal information for marketing analysis and to provide you with promotional update communications and with news and newsletters, special offers, promotions, and other information we think may interest you; and for other informational, marketing, or promotional purposes by email, SMS and letter about our Services and those of carefully selected third parties.
Accessing, Modifying, or Deleting Your Personal Information.
You may access, modify, or delete the personal information that you have provided to us by emailing us at hello@dreamcloudsleep.co.uk with what you would like updated. Please note that we may retain certain information about you as required by law or as permitted by law for legitimate business purposes. For example, if you request that we delete your information but we believe that you have violated our Terms of Use we may retain information about you in order to attempt to resolve the issue before deleting it. Opting out of Marketing Emails. We may send periodic promotional emails to you. You may opt out of such communications by following the opt-out instructions contained in the email or emailing us at hello@dreamcloudsleep.co.uk. Please note that it may take up to ten (10) business days for us to process opt-out requests.
Where Your Information Is Stored
The data that we collect from you may be transferred, and stored at, destinations outside the European Economic Area (“EEA”) that is not subject to equivalent Data Protection Law. For our purposes, the information we collect is processed and stored on secure AWS servers located in the United States. We may transfer your personal information outside the EEA to the USA:
- In order to store it.
- In order to enable us to provide goods or services to you and fulfill our contract with you. This includes order fulfillment, processing of payment details, and the provision of support services.
- Where we are legally required to do so.
- In order to facilitate the operation of our group of businesses, where it is in our legitimate interests and we have concluded these are not overridden by your rights.
Where your information is transferred outside the EEA, we will take all steps reasonably necessary to ensure that your data is subject to appropriate safeguards, such as relying on a recognised legal adequacy mechanism, such entering into model clauses and that it is treated securely and in accordance with this privacy policy
How Long We Keep Your Information
We retain personal data for as long as is necessary to fulfill the transactions you have requested, for key business requirements such as marketing or for essential purposes such as complying with our legal obligations, resolving disputes and enforcing our agreements. The criteria we use for determining retention periods for different categories of data will vary but may include:
- how long we need to keep personal data to provide our services and operate our business, for example improving the performance of our Sites or maintaining appropriate financial or business records);
- the expectations of our customers, for example our customers may expect that their registration details will be retained for a certain period should they choose to return to our Sites;
- whether we are subject to legal, regulatory or contractual obligations to retain the personal data, for example mandatory retention requirements for tax reporting purposes; and
- the sensitivity of the personal data we are handling, for example were we to collect more sensitive personal data we would expect to hold it for shorter periods.
How We Disclose Your Information
We may disclose your information, including personal information and user content, as described to you at the time of collection or disclosure or as follows: - DreamCloud Users.
We may disclose your information to other DreamCloud users. For example, if you post review to our Site, we will display your review, and other information to all visitors to our Site.
We may disclose your information to current or future affiliates or subsidiaries for research, marketing, and other purposes consistent with this Privacy Policy.
We may disclose your information to our vendors, service providers, agents, or others who perform functions on our behalf. For example, we may disclose your information to third-party service providers to process payments on our behalf.
We may disclose your information to another entity in connection with, including during negotiations of, an acquisition or merger, sale or transfer of a business unit or assets, bankruptcy proceeding, or as part of any other similar business transfer.
- Protecting Rights and Interests.
We may disclose your information to protect the safety, rights, property, or security of DreamCloud, the Services, any third party, or the general public; to detect, prevent, or otherwise address fraud, security, or technical issues; to prevent or stop activity which DreamCloud, in its sole discretion, may consider to be, or to pose a risk of being, an illegal, unethical, or legally actionable activity; to use as evidence in litigation; and to enforce this Privacy Policy or our Terms of Use.
We may disclose your information to comply with applicable legal or regulatory obligations, including as part of a judicial proceeding; in response to a subpoena, warrant, court order, or other legal process; or as part of an investigation or request, whether formal or informal, from law enforcement or a government official.
- Aggregate and De-Identified Information.
We may disclose aggregate, anonymous, or de-identified information about users for marketing, advertising, research, compliance, or other purposes.
Cookies and Other Tracking Mechanisms
We and our service providers use cookies and other tracking mechanisms to track information about your use of our Services. We or our service providers may combine this information with other information, including personal information, we collect about you. Cookies. Cookies are alphanumeric identifiers that we transfer to your computer’s hard drive through your web browser for record-keeping purposes. Some cookies allow us to make it easier for you to navigate our Services, while others are used to enable a faster log-in process or to allow us to track your activities while using our Services. Most web browsers automatically accept cookies, but if you prefer, you can edit your browser options to block them in the future. The Help portion of the toolbar on most browsers will tell you how to prevent your computer from accepting new cookies, how to have the browser notify you when you receive a new cookie, or how to disable cookies altogether. Visitors to our Services who disable cookies will be able to browse certain areas of the Services, but some features may not function (e.g., you may not be able to stay logged into your account). Clear GIFs, pixel tags and other technologies. Clear GIFs are tiny graphics with a unique identifier, similar in function to cookies. In contrast to cookies, which are stored on your computer’s hard drive, clear GIFs are embedded invisibly on web pages. We may use clear GIFs (also referred to as web beacons, web bugs or pixel tags), in connection with our Services to, among other things, track the activities users of our Services, help us manage content, and compile statistics about usage of our Services. We and our third party service providers also use clear GIFs in HTML emails to our customers, to help us track email response rates, identify when our emails are viewed, and track whether our emails are forwarded. The Cookies We Set Below you’ll find the cookies and other technologies that we set when you visit our Site and their purpose. To help you better understand why we’re setting them, we’ve used the categories and definitions set by the International Chamber of Commerce (“ICC”):
cookies that enable the services that you have specifically asked or paid for;
cookies that collect information on how visitors use Our Site including the pages visited and most frequented as well as the sources of our traffic. They are used to help us improve how the site works;
cookies that help us remember the choices you have made so we can provide you with a more personalised experience; and
cookies used to deliver more relevant ads, and to make sure you don’t see the same adverts over and over again.
Check your eligibility