Privacy policy

This Privacy Policy explains how I collect, use, and share your personal information when you purchase an item, contact me, or use my services, in compliance with applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR), the EU General Data Protection Regulation (GDPR), and the United States privacy laws.

This policy does not apply to third-party practices that I do not own or control.

Information I Collect

To fulfill your order, I collect the following information:

  • Personal Identifiers: Name, email address, postal address

  • Payment Information: Processed securely through third-party providers (I do not store credit card details)

  • Order Details: Products purchased and custom requests

  • Optional Information: Additional details you provide for a custom order

Why I Collect Your Information & How I Use It

I collect and process your personal data on the following legal bases:

  • Contractual necessity: To fulfill your order, process payments, provide customer support, and deliver your items.

  • Legitimate interests: To improve my services and for internal business analysis.

  • Legal obligations: To comply with tax, accounting, and other regulatory requirements.

  • Consent: For marketing communications, which you can opt out of at any time.

Information Sharing & Disclosure

Your information is shared only when necessary:

  • Service providers: Trusted third parties (e.g., delivery companies, payment processors) receive only the data required to perform their services.

  • Business transfers: If I sell or merge my business, your data may be transferred where legally permitted.

  • Legal compliance: I may disclose your information when required to comply with legal obligations, prevent fraud, or protect my rights and the safety of others.

Data Retention

I retain your data for as long as necessary to fulfill your order and comply with legal obligations. Generally, this is four (4) years, unless a longer retention period is required by law.

Your Rights

Depending on your location, you may have the following rights under UK GDPR, EU GDPR, and applicable US privacy laws:

  • Access: Request a copy of your personal data.

  • Correction: Update or correct any inaccuracies in your data.

  • Deletion: Request deletion of your data, unless legally required to retain it.

  • Restriction: Ask to limit how your data is used.

  • Objection: Object to certain processing activities, including marketing.

  • Data portability: Request transfer of your data to another service provider where applicable.

  • Complaint: Lodge a complaint with a data protection authority if you believe your data is misused.

For UK and EU residents, complaints can be filed with the Information Commissioner's Office (ICO) in the UK or your local EU data protection authority.

How to Contact Me

For data protection inquiries, please contact me:

Jeanne Eden
Daydream Paper Studio LLC
Email: hello@daydreampaperstudio.com

If you have any concerns about how I handle your data, please reach out so we can address your concerns promptly.