PRIVACY POLICY

Last updated: [Add Date]

This Privacy Policy explains how In Your Dreams (“we”, “our”, “us”) collects, uses, and protects your personal information when you visit our website, interact with us, or use our services. We are committed to respecting your privacy and complying with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all applicable laws.

By using our website, you agree to the terms of this Privacy Policy.


1. WHO WE ARE

In Your Dreams

[Add company registered name if different]

[Add company number]

[Add registered address]

Email: [Add contact email]

If you have any questions about how your data is used, you can contact us at any time.

2. THE INFORMATION WE COLLECT

We may collect and process the following types of personal data:

A. Information you provide directly

  • Name
  • Email address
  • Phone number
  • Company name
  • Message details submitted through contact forms
  • Newsletter sign-ups
  • Booking or project enquiries

B. Automatically collected information

When you visit our website, we may automatically collect:

  • IP address
  • Browser type and version
  • Device information
  • Pages viewed
  • Time spent on site
  • Referring website

This information is collected through cookies and similar technologies. See our Cookie Policy for details.

C. Information from third parties

If you interact with us through social media platforms (e.g., Instagram, TikTok), we may receive certain profile information in accordance with their privacy settings.

3. HOW WE USE YOUR INFORMATION

We use your personal data for the following purposes:

  • To respond to enquiries or contact form submissions
  • To provide services, quotations, and project communication
  • To send marketing emails (only if you have opted in)
  • To improve and optimise our website
  • To analyse site performance and user behaviour
  • To manage client relationships
  • To comply with legal obligations
4. LEGAL BASES FOR PROCESSING

We rely on the following legal bases under GDPR:

  • Consent — when you opt in to marketing communications
  • Contract — when processing your information is necessary for providing services or responding to enquiries
  • Legitimate interests — for analytics, site optimisation, and website security
  • Legal obligation — when required to retain certain records for compliance reasons
5. HOW WE SHARE YOUR INFORMATION

We may share your personal data with trusted third-party providers that help us operate our business, including:

  • Webflow (website hosting)
  • Google Analytics or similar analytics tools
  • Email marketing platforms (e.g., Mailchimp, Klaviyo)
  • Payment processors (if applicable)
  • Cloud storage or CRM providers

We do not sell your data.

Where our third-party providers transfer data outside the UK, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

6. DATA RETENTION

We keep your personal data only for as long as necessary to fulfil the purposes set out in this policy, including:

  • Enquiry data: up to 24 months
  • Client/project records: up to 7 years (for legal and tax compliance)
  • Newsletter data: until you unsubscribe

You can request deletion of your data at any time.

7. YOUR RIGHTS (UK GDPR)

You have the right to:

  • Access the personal data we hold about you
  • Request correction of inaccurate information
  • Request deletion (“right to be forgotten”)
  • Object to or restrict processing
  • Withdraw consent at any time
  • Request transfer of your data

To exercise any of these rights, contact us at [Add contact email].

If you are unhappy with how your data is handled, you can lodge a complaint with the Information Commissioner’s Office (ICO).

8. COOKIES

We use cookies to improve your browsing experience, analyse website traffic, and support marketing features. You can manage cookie preferences through our cookie banner.

More details can be found in our Cookie Policy.

9. SECURITY

We take appropriate technical and organisational measures to protect your data, including:

  • SSL encryption
  • Access controls
  • Secure hosting infrastructure

However, no online data transmission is completely secure.

10. Links to Other Websites

Our website may contain links to third-party websites. We are not responsible for their privacy practices, so please review their policies separately.

11. Changes to This Policy

We may update this policy occasionally. The latest version will always be available on this page.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, contact us at:

[Insert your email address]