Privacy Policy

At Dreams Co® Pajamas, Clothing, Nightgowns, Robes (“Dreams Co“), we take your privacy seriously. This privacy policy describes how we collect, use, and protect your personal information when you visit our website or make purchases from us.

What Information We Collect

We collect personal information you provide directly to us. This includes:

Contact details such as your name, email address, phone number, and postal address when you create an account, make a purchase, contact us with questions, request information, or participate in surveys or contests.
Payment information such as your credit/debit card number, expiration date, CVC code, and billing address when you make a purchase. This is processed by secure third-party payment processors and we do not store full credit card details on our servers.
Account details such as purchases, order history, saved items, and profile information connected to your account with us.
Communications such as when you contact us directly by phone, email, contact form, social media, review, survey, or other communications.

We may automatically collect certain website usage information. When you visit our site, we may automatically receive:

Log data such as your IP address, access dates and times, browser type and language, and referring website addresses.
Device information such as your operating system version, device type, system and performance information, and mobile network carrier.
Location data such as approximate location derived from your IP address.
Usage data such as pages visited, links clicked, files downloaded, and other user actions on our website.
Cookie data from tracking technologies like browser cookies and web beacons. You can control these tracking technologies through your browser settings.

We obtain information from third-party sources. This includes:

Social networks if you interact with us through Facebook, Instagram, Twitter, Google, or other social media sites. We may collect public information you share there related to liking, sharing, or following our pages and content.
Business partners who provide or co-sponsor promotions, events, contests, surveys, focus groups, or market research. Partners are required to use your information only for authorized purposes.
Marketing providers who help deliver and personalize our advertising across various channels like email, social media, and digital ads. We may have basic demographic and preference data to help serve relevant advertisements.
Data resellers and public databases that provide supplemental contact, demographic, preference, and other information which we use to better understand our customers and improve our services.
Law enforcement agencies or legal proceedings if compelled by subpoena, court order, or as otherwise required by law to provide information. We will notify affected users when possible unless legally prohibited.

How We Use Your Information

We use your personal information to operate our business activities and provide services to you. These include:

Process and fulfill orders for purchases, shipping, returns, refunds, and related customer service.
Create and manage your account including registration, authentication, associated purchases, and contacting you about account changes.
Send product updates, order confirmations, invoices, shipping confirmations, and other transactional or relationship messages.
Respond to comments, questions, requests, and customer support needs.
Communicate about promotions, new products, services, newsletters, surveys, contents, events and other marketing activities. You can control promotional contacts in your account settings or by using the unsubscribe links in emails.
Personalize your experience with more relevant content, product recommendations, ads, and offers aligned with your interests and purchase history.
Conduct analytics to analyze and measure audience engagement, website performance, user experiences, marketing ROI, and other reports that allow us to improve our services.
Protect from fraud, spam, abuse, security risks, and enforce our terms of service. This may include IP matching, device fingerprinting, blocking suspicious activity, and investigating reports of compromise.
Comply with legal requirements including product recalls, registration and warranty requirements, identification under financial or taxation laws, and other purposes required by law.

Where required by law, we will ask your consent before collecting or using your personal information for purposes beyond what is listed here. You can withdraw your consent anytime by contacting us.

How We Share Your Information

We share your personal information in limited circumstances, and with appropriate safeguards on your privacy:

Service providers who assist us in operating our website, marketing and advertising services, conducting surveys, processing payments, fulfilling orders, analytics, customer service, or other activities necessary for our legitimate business purposes. Providers are given limited access only to what is reasonably necessary to perform these tasks on our behalf, and are required to protect and secure your data.
Business transfers as part of a corporate sale, merger, acquisition, dissolution, or similar event. Your information will typically be transferred as part of our business assets and remain subject to this privacy policy.
Law enforcement agencies, courts, or other authorities if compelled by subpoena, court order, or required by law to provide information. We will notify affected users whenever possible unless legally prohibited.
To protect rights, property, life, health, security and safety when we have a good faith belief that disclosure is necessary or appropriate.
With aggregated or anonymized data that does not directly identify you. We may share this information with any third parties for legitimate business purposes.

Other than the above, we do not share, sell, rent, or trade your personal information with any third parties without your consent. When you authorize a third party service in your account settings to access your information, you understand some data may be transferred automatically to support that integration.

Your Choices and Rights

You have the following controls available around your personal information:

Access and update your account information by logging into your account and editing your profile data.
Unsubscribe from marketing communications by following the ‘unsubscribe’ link located at the bottom of all our emails, updating your email preferences in your account settings, or by contacting us. This will not stop service or order confirmation emails.
Delete your account and personal information by emailing us and requesting account deletion. We may retain some transaction history for accounting purposes or to comply with legal obligations.
Obtain a copy of your personal data by contacting us and requesting an export of your information. For security purposes, we may first verify your identity before releasing any information.
Restrict or object to our data processing by requesting changes to how we collect, use, or share your personal information. We will honor all valid requests according to applicable law. This does not include mandatory processing tied to orders, fraud prevention, legal compliance, or other essential purposes where we are unable to offer such choice.
Complain to an EU data protection authority if you feel your EU data privacy rights have been infringed.
Do Not Track requests from your browser tell us you do not wish to be tracked. We do not process or respond to Do Not Track signals at this time.

We will promptly honor all valid requests, choices, and consent decisions related to your personal information.

Data Security and Retention

We employ appropriate physical, technical, and administrative safeguards to protect your personal information. This includes limiting access through need-to-know, locked storage, network security, and other precautions.

We retain personal information only as long as needed for business, tax, or legal purposes, then it is anonymized, aggregated, or securely destroyed. Retention periods vary based on the type of data and purpose for collection. You can request details on retention periods for your personal information by contacting us.

While we follow generally accepted standards to protect your data, no security method is 100% secure. We cannot guarantee the absolute security of your information, or that data loss will not occur.

International Data Transfers

We are headquartered in the United States and have service providers in other countries. Your personal information may be transferred to the U.S., Europe, Asia, or other locations outside your country of residence. All locations observe adequate levels of data protection for international data transfers. You hereby consent to the transfer of your data to these locations.

Children’s Privacy

Our website and products are meant for adult users over the age of 18. We do not knowingly collect personal data from children under the age of 13 without parental consent. If you believe we may have collected information from a child under 13, please contact us immediately so we can delete this data.

Changes to this Policy

We may occasionally update this privacy policy to comply with law or reflect updates to our business practices. We will notify you of any material changes by posting notice on this website prior to the changes taking effect. Your continued use of our website constitutes acceptance of the amended terms.

This policy was last updated on July 1, 2022.

How to Contact Us

If you have any questions about this privacy policy or your personal information, please contact us at [email protected].

California Privacy Rights

California residents may request a list of third parties we share personal information with for marketing purposes under CCPA. Contact us via email or phone with ‘California Privacy Rights’ in the subject line and provide your name and mailing address. We will respond within 30 days as required by law.

Under the California Consumer Privacy Act (CCPA), California residents have certain rights with respect to their personal information, including:

The right to know what personal data is collected, used, shared or sold.
The right to request deletion of personal data.
The right to opt-out of sale of personal information.
The right to non-discrimination for exercising CCPA rights.

We do not sell your personal information as defined by CCPA. We may share information with third parties for business purposes as outlined in ‘How We Share Your Information’. You may submit requests related to your California privacy rights by contacting us. Please provide your name and mailing address so we can verify your California residency.

GDPR Data Protection Rights

If you reside in the European Economic Area (EEA), United Kingdom, or Switzerland, you have certain data protection rights under the General Data Protection Regulation (GDPR). These include:

The right to access your personal data like name, email, user ID, location and personal description, and to correct, update or delete any inaccurate data.
The right to restrict or object to our processing if we use your data unlawfully or have a legitimate interest to process your data. You can object at any time to processing based on legitimate business interests.
The right to receive your personal data in a readable format and transmit it to another controller (“data portability”). This applies to automated processing based on consent or contract.
The right to have your data erased in certain circumstances if we have no compelling reason to process it. This includes account closure, withdrawing consent, or objecting to direct marketing.
The right to lodge a complaint with your national data protection authority if you believe we are misusing your data or violating your rights.
The right to withdraw consent for using your personal data. Note this does not affect past processing, and we may have other legal grounds for continuing certain processing activities like recording completed transactions.

All requests related to your EU rights must be directed to us in writing. We will honor all valid requests in compliance with GDPR requirements.