1. Data Controller and Scope

The website www.dreamweavehome.com (the “Site”) is operated by dreamweavehome.com, a commercial entity registered in México. For the purposes of applicable data protection legislation, the Company acts as the Data Controller. This policy delineates how personal information is collected, utilised, and protected when you engage with our services.

2. Information We Collect

We collect information necessary to facilitate the procurement and delivery of goods. This includes:

  • Identity Data: Full name and title.
  • Contact Data: Delivery address, billing address, email address, and telephone number.
  • Transaction Data: Details regarding the specific items ordered and the history of transactions.
  • Technical Data: IP address, browser type, and usage statistics collected via standard analytical protocols.

3. Purpose of Processing

Your data is processed based on the following legal grounds:

  • Contractual Necessity: To manage orders, arrange logistics, and provide customer support.
  • Legal Obligation: To comply with fiscal, taxation, and statutory reporting requirements in México, the EU, and the US.
  • Legitimate Interests: To maintain communication regarding order status and internal business administration.

4. Payment Processing and Stripe

Financial transactions on this Site are handled exclusively through our third-party payment processor, Stripe.

  • When you proceed to checkout, your payment credentials (such as credit card details) are provided directly to Stripe.
  • dreamweavehome.com does not store or have access to your full payment card information.
  • Stripe processes this data in accordance with their own privacy standards and PCI-DSS requirements to facilitate a professional and compliant transaction environment.

5. Data Retention

We retain personal data only for as long as is strictly necessary to fulfil the purposes for which it was collected, including the satisfaction of any legal, accounting, or reporting requirements.

  • Transaction Records: In accordance with Mexican commercial law and EU/US tax regulations, transaction-related data is retained for a period of six (6) to ten (10) years from the date of the transaction.
  • Communication Records: General enquiries are retained for up to two (2) years to ensure continuity of service.
  • Upon the expiry of the relevant retention period, data is securely deleted or anonymised so it can no longer be associated with an individual.

6. International Data Transfers

As a global operation, your information may be processed in México and accessed by logistics partners in the United States and the European Union. We implement industry-standard contractual clauses to ensure that your data receives a level of protection equivalent to that required under GDPR and CCPA, regardless of the geographical location of processing.

7. Your Statutory Rights

Depending on your jurisdiction, you possess specific rights regarding your personal data:

  • EU Residents (GDPR): The right to access, rectify, or erase your data, and the right to data portability or to object to processing.
  • US Residents (CCPA/CPRA): The right to know what data is collected, the right to request deletion, and the right to opt-out of the sale of personal information (Note: We do not sell user data).
  • Mexican Residents (ARCO Rights): The right to Access, Rectification, Cancellation, and Opposition as per the LFPDPPP.

To exercise these rights, please contact our Data Privacy Officer using the details provided below.

8. Data Security

We employ robust administrative and technical measures designed to protect personal information against unauthorised access, alteration, or disclosure. These measures are reviewed periodically to maintain alignment with evolving industry standards. Please note that while we strive to use commercially acceptable means to protect your information, no method of transmission over the internet is ever entirely impervious to external interference.

9. Third-Party Disclosures

We do not disclose your personal data to external parties except for:

  • Logistics Partners: To facilitate the physical delivery of your order.
  • Payment Authorities: Specifically Stripe, for the purpose of secure transaction fulfilment.
  • Legal Authorities: Where mandated by law or to protect the legal rights of the Company.

10. Contact Information

For enquiries regarding this Privacy Policy or the management of your personal data, please contact:

dreamweavehome.com Address: José López Portillo 685, Emiliano Zapata Nte., 27445 Matamoros, Coah., Mexico Email: dropshipping.co@dreamweavehome.com Telephone: +52 8715509822