Data Protection & GDPR
As part of running our business, Pretty Dreams collects necessary data from anyone that contacts us to manage its order processing, deliver orders and maintain accounts and records. We only hold information for advertising, marketing and public relations in connection with our core business; this may include past, existing customers and/or suppliers.
Pretty Dreams only processes personal data for core business purposes and is registered with the Information Commissioner’s Office (ICO).
GDPR Privacy Notice
Our contact details:
- Name: Pretty Dreams
- Phone Number: 01635 866723
- E-mail: info@prettydreams.co.uk
- Address: Pretty Dreams, 30 Winston Way, Thatcham, Berkshire, RG19 3TY
What type of information do we have:
We currently collect and process the following information:
- name, address and contact details of customers;
- email addresses for customers;
Although we take and process payments online, we do not store your card details.
How we get the information and why we have it:
The personal information we process is provided to us directly by you when you contact us. Under the General Data Protection Regulation (GDPR), the lawful bases we rely on for processing this information are:
- Your consent. (You are able to remove your consent at any time. You can do this by contacting us using the details above.)
- We have a contractual duty.
- We have a legitimate interest.
What we do with the information we have:
We use the data provided to discuss ideas for jewellery items and to process orders to delivery. In the unlikely event of a fault or repair being necessary we retain the information so that we can process this efficiently.
How we store your information:
The security of your data is important to us.
- We run our website and store data using a 256-bit encrypted SSL, renewed every 90 days to prevent phishing and site hijacking.
- The website is protected by a firewall, regular deep virus and malware checking and active protection with human monitoring.
- We use a system that backs up data on a daily basis.
Your data protection rights:
Under data protection law, you have rights including:
- Your right of access – You have the right to ask us for copies of your personal information.
- Your right to rectification – You have the right to ask us to rectify information you think is inaccurate. You also have the right to ask us to complete information you think is incomplete.
- Your right to erasure – You have the right to ask us to erase your personal information in certain circumstances.
- Your right to restriction of processing – You have the right to ask us to restrict the processing of your information in certain circumstances.
- Your right to object to processing – You have the right to object to the processing of your personal data in certain circumstances.
- our right to data portability – You have the right to ask that we transfer the information you gave us to another organisation, or to you, in certain circumstances.
You are not required to pay any charge for exercising your rights. If you make a request, we have one month to respond to you.
Please contact us using the details above if you wish to make a request.
How to complain:
You can also complain to the ICO if you are unhappy with how we have used your data. You can contact the ICO by writing to the Information Commissioner’s Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF or by telephone at 0303 123 1113.
Last updated: 9 December 2024