Good Dream Design
(“we,” “us,” or “our”) collects, uses, and protects your personal data when you use our website,
gooddreamdesign.uk, and purchase products from us.
1. Who We Are
We are the Data Controller responsible for processing your personal data.
- Our Company Name: Good Dream Design Limited
- Our Business Address: Unit 403 Screenworks 22 Highbury Grove, C/O Dirench Partners Limited, London, England, N5 2ER
- Contact Email: info@gooddreamdesign.uk
2. The Data We Collect About You
We may collect, use, store, and transfer different kinds of personal data about you, which we have grouped together as follows:
- Identity Data: Name, surname, title.
- Contact Data: Billing address, delivery address, email address, and telephone numbers.
- Financial Data: Payment card details (though payment processing is handled by our third-party provider, e.g.,Shopify,PayPal,Stripe). We do not store full payment card details.
- Transaction Data: Details about payments to and from you, and other details of products you have purchased from us.
- Technical Data: Internet protocol (IP) address, browser type and version, time zone setting, operating system and platform, and other technology on the devices you use to access this website.
- Profile Data: Your username and password, purchases made by you, your preferences, feedback, and survey responses.
- Usage Data: Information about how you use our website, products, and services.
- Marketing and Communications Data: Your preferences in receiving marketing from us and our third parties.
3. How We Collect Your Data
We use different methods to collect data from and about you, including:
- Direct Interactions: You give us your Identity, Contact, and Financial Data by filling in forms or by corresponding with us by post, phone, email, or otherwise. This includes data you provide when you:
- Place an order for our products.
- Create an account on our website.
- Subscribe to our newsletter.
- Provide custom artwork for personalized products.
- Automated Technologies or Interactions: As you interact with our website, we automatically collect Technical Data and Usage Data using cookies and other similar technologies.
4. How We Use Your Personal Data (Lawful Basis)
Under GDPR, we must have a lawful basis for processing your personal data. We will use your personal data only when the law allows us to, most commonly in the following circumstances:
| Purpose of Data Use | Lawful Basis for Processing (GDPR) |
| To register you as a new customer. | Performance of a Contract with you. |
| To process and deliver your order, including managing payments, fees, and charges. | Performance of a Contract with you. |
| To manage our relationship with you, including customer service and support. | Performance of a Contract and necessary for our Legitimate Interests (to keep our records updated and study how customers use our products). |
| To send you marketing communications about similar products (if you consented or did not opt-out during a previous sale). | Your Consent or necessary for our Legitimate Interests (to develop our products and grow our business). |
| To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance). | Necessary for our Legitimate Interests (for running our business, network security, and to prevent fraud). |
Export to Sheets
5. Data Security
We have put in place appropriate security measures to prevent your personal data from being accidentally lost, used, or accessed in an unauthorised way. We also limit access to your personal data to those employees, agents, contractors, and other third parties who have a business need to know.
6. Data Retention
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purposes of satisfying any legal, accounting, or reporting requirements.
7. Your Legal Rights (GDPR Rights)
Under certain circumstances, you have rights under data protection laws in relation to your personal data. These include the right to:
- Request access to your personal data (commonly known as a “data subject access request”).
- Request correction of the personal data that we hold about you.
- Request erasure of your personal data (known as the “right to be forgotten”).
- Object to processing of your personal data where we are relying on a legitimate interest.
- Withdraw consent at any time where we are relying on consent to process your personal data (e.g., for marketing).
If you wish to exercise any of these rights, please contact us at
.
8. Changes to the Privacy Policy
We keep our Privacy Policy under regular review. This version was last updated on
11/10/2025