Last Updated: 10 March 2025

1. Introduction
Welcome to DREAMSPUN STITCHES ("Company," "we," "our," or "us"). This Privacy Policy explains how we collect, use, and protect your personal information when you visit our website dreamspunstitches.com ("Website") and purchase our products or services. We comply with the General Data Protection Regulation (GDPR), the California Consumer Privacy Act (CCPA), and other applicable global privacy laws.

2. Contact Information

• Business Name: DREAMSPUN STITCHES

• Entity Name: GILLESPIE, EMILY ROSE

• ABN: 19 384 052 619

• Hosting Provider: LIGHTCRAFT GROUP PTY LTD (AWS Sydney, Australia)

• Email: [email protected]

• Address: Emily Gillespie C/O Pheasant Creek LPO, Pheasant Creek VIC 3757

3. Data We Collect
We collect and process the following types of personal data:

• Identity Information (e.g., name, email, phone number, billing and shipping address)

• Transaction Information (e.g., payment details, order history)

• Technical Data (e.g., IP address, browser type, operating system, referring website, usage details)

• Marketing Data (e.g., preferences for receiving communications, cookies, and tracking pixels)

We do not collect or store credit card details. Payments are processed securely by third-party payment providers.

4. How We Collect Your Data
We collect your data through:

• Direct interactions (e.g., when you create an account, place an order, or contact us)

• Automated technologies (e.g., cookies and analytics tools like Google Analytics, Meta Pixel, and Pinterest tracking)

• Third-party sources (e.g., payment processors and advertising networks)

5. How We Use Your Data
We process your data for the following purposes:

• To fulfill and manage orders, payments, and deliveries

• To improve our Website and customer experience

• To send promotional emails and marketing communications (with your consent)

• To comply with legal obligations and prevent fraud

6. Legal Bases for Processing (GDPR)
Under GDPR, we rely on the following legal bases:

• Performance of a contract (e.g., processing your orders)

• Legitimate interests (e.g., improving our Website and services)

• Consent (e.g., sending marketing emails)

• Legal compliance (e.g., tax and regulatory requirements)

7. Data Sharing & Third Parties
We share your data with:

• Hosting Provider: LIGHTCRAFT GROUP PTY LTD (AWS Sydney, Australia)

• Analytics & Advertising Providers: Google Analytics, Meta Pixel, Pinterest

• Payment Processors: STRIPE

• Shipping & Logistics Partners: Australia Post

We do not sell your personal data.

8. International Data Transfers
If you are located outside of Australia, your data may be transferred to and processed in Australia and other jurisdictions. We ensure that adequate safeguards are in place for such transfers.

9. Your Rights & Choices
Depending on your location, you have the following rights:

• GDPR (EU/UK): Right to access, correct, delete, restrict, and object to processing of your data; right to data portability; right to withdraw consent.

• CCPA (California, USA): Right to know, delete, and opt-out of the sale of personal data; right to non-discrimination.

• Other Global Rights: We honor similar rights under applicable laws.

To exercise your rights, contact us at [email protected].

10. Data Retention
We retain your personal data only for as long as necessary for business, legal, and compliance purposes.

11. Cookies & Tracking Technologies
We use cookies and tracking technologies to improve user experience and analyze Website traffic. You can manage your cookie preferences through your browser settings.

12. Security Measures
We implement security measures to protect your personal data, but no system is 100% secure. Always use strong passwords and protect your account information.

13. Updates to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on our Website.

14. Contact Us
If you have any questions about this Privacy Policy or your data rights, contact us at [email protected].