Privacy Policy

At Door of Dreams we respect your privacy and are committed to protecting your personal data. This Privacy Policy explains what information we collect when you use our website, how we use it, with whom we share it and what rights you have over it. Please read it carefully. If you have any questions, contact us at [email protected].

The data controller responsible for processing your personal data through this website is the operator of Door of Dreams. Full legal identification details will be provided where required by applicable law and on all invoices and contractual documents. For any privacy-related matter, contact us at [email protected].

• Account data — name and email address when you create an account.
• Order data — shipping address and payment reference required to fulfil your order.
• Usage data — pages visited, test results, interactions and preferences, collected in a privacy-conscious manner.
• Communications — messages you send us via email or contact forms.

We process your data only where we have a valid legal basis to do so:

• Performance of a contract — to process your orders, manage your account and send transactional emails such as order confirmations and shipping notices.
• Legal obligation — to retain billing and tax records as required by applicable accounting and fiscal legislation.
• Legitimate interests — to operate and improve the website, prevent fraud and ensure security. Analytics data is collected in a privacy-conscious manner and configured to minimise personal identification.
• Consent — to send you optional newsletters and Dream Guide updates. You may withdraw your consent at any time without affecting the lawfulness of processing carried out before withdrawal.

• To process and fulfil your orders and manage returns or enquiries.
• To manage your account and authenticate your sessions securely.
• To send transactional emails related to your orders.
• To improve our products, services and website experience.
• To detect and prevent fraud and protect the security of the site.
• To send newsletters and Dream Guide updates — only with your explicit prior consent.

• Order and billing data — retained for the period required under applicable tax and accounting legislation.
• Account data — retained while your account is active and deleted within 30 days of a verified account deletion request, except where retention is required by law.
• Analytics data — collected in aggregated or pseudonymised form; retention periods are determined by the respective analytics provider and configured to minimise the storage of identifiable data.
• Marketing consent records — retained until you withdraw consent, as required to demonstrate compliance.

We do not sell your personal data. We share it only with the processors strictly necessary to operate our services, each bound by a data processing agreement compliant with GDPR Article 28:

• Stripe, Inc. (USA) — secure payment processing. Personal data transferred to the United States is protected by Standard Contractual Clauses (SCCs) approved by the European Commission.
• Shipping partners — recipient name and address for order fulfilment only.
• Hosting and infrastructure providers — located within the EU/EEA or operating under appropriate international data transfer safeguards.
• Analytics providers — such as Google Analytics and Microsoft Clarity, where applicable, under Standard Contractual Clauses. For details of the specific cookies and tracking technologies used, see our Cookie Policy.
• Email delivery providers — used exclusively to dispatch transactional and, where applicable, marketing emails.

Where data is transferred outside the EU/EEA, we ensure that appropriate safeguards are in place in accordance with applicable data protection law.

We implement appropriate technical and organisational measures designed to protect your personal data against unauthorised access, disclosure, alteration and destruction. These measures are reviewed and updated regularly to reflect current best practices. Payment information is processed securely by Stripe. Door of Dreams does not store complete payment card numbers or card security codes.

This website uses cookies and similar technologies for functionality, security and analytics. Some of these are essential to the operation of the site; others are activated only with your consent. For a full description of the cookies we use, the third-party services involved and how to manage your preferences, please read our Cookie Policy.

Our website and services are intended for adults. We do not knowingly collect personal data from minors. If you believe we have inadvertently collected data relating to a minor, please contact us at [email protected] and we will delete it without undue delay.

We do not use your personal data to make solely automated decisions that produce legal or similarly significant effects on you. Any personalisation or recommendations on this site — including dream interpretation assistance and content suggestions — are provided as tools for personal reflection and do not produce binding outcomes.

Depending on your location and applicable law, you may have the following rights in relation to your personal data:

• Access — obtain a copy of the personal data we hold about you.
• Rectification — request correction of inaccurate or incomplete data.
• Erasure — request deletion of your data, subject to legal retention obligations.
• Restriction — ask us to limit how we use your data in certain circumstances.
• Portability — receive your data in a structured, commonly used, machine-readable format.
• Objection — object to processing based on legitimate interests.
• Withdrawal of consent — withdraw consent for marketing at any time, without affecting prior processing.
• Complaint — lodge a complaint with the data protection authority in your country of residence.

To exercise any of these rights, email [email protected] with a clear description of your request. We will respond within the deadlines established by applicable data protection legislation — ordinarily within one calendar month.

For any question, concern or request relating to this Privacy Policy or the handling of your personal data, please contact us at [email protected]. We encourage you to contact us first so that we can resolve any privacy concern directly. We are committed to responding promptly and transparently.

We may update this Privacy Policy from time to time to reflect changes in our practices, the services we use or applicable legal requirements. The latest version will always be published on this page together with its effective date. We encourage you to review this policy periodically. Where changes are material, we will take reasonable steps to bring them to your attention.