Who we are
Jordan Regan, trading as Paradise Dream Center, is the data controller for the personal information described here.
Paradise Dream Center, Poole PO Box
hello@paradisedreamcenter.com
What we collect, why, and on what basis
| What | Why | Lawful basis |
|---|---|---|
| Name, email, delivery address | To take and deliver your order | Performance of our contract |
| What you bought, and what you paid | Accounting and tax records | Legal obligation |
| Account details and favourites | To run your account, if you make one | Performance of our contract |
| Sign-in records, IP addresses | Keeping the shop secure, preventing fraud | Our legitimate interests |
| A record of emails we sent you | Proving we sent your confirmation | Our legitimate interests |
Where we rely on legitimate interests, our interest is in running a shop that is not defrauded and can answer “did you send it?”. We have considered your interests and use the least information that achieves it.
We never see your card number. It goes from your browser to Stripe. We receive a payment reference and the last four digits, and nothing else.
Giving us your name and address is necessary to form the contract — we cannot deliver an order without them. An account is optional.
We do not use your information for marketing, we do not sell it, and we make no automated decisions that produce legal effects for you.
Who else receives it
- Stripe — to take payment. Stripe processes some of this on our instructions, but for fraud prevention and its own legal obligations Stripe acts as an independent controller in its own right. Its own privacy policy governs that processing.
- Resend — to send your order emails. Hosted in Ireland.
- Our delivery carrier — your name and address, so the parcel arrives.
- Our hosting and database providers — they hold the data on our behalf and act only on our instructions.
We may also disclose information where the law requires it. We do not transfer your information outside the UK or the EEA except through Stripe, which does so under the safeguards set out in its own terms.
How long we keep it
- Order and payment records: 6 years. HMRC requires business records to be kept, so this is not something we can shorten on request.
- Delivery addresses: 2 years after the order completes, then removed from the record.
- Accounts: 3 years after your last visit, unless you close it sooner.
- Security records: 2 years.
- Server logs: 90 days.
Your rights
You can ask us to:
- give you a copy of what we hold about you;
- correct anything that is wrong;
- delete it;
- restrict how we use it, or object to us using it;
- give you a portable copy to take elsewhere.
If you have an account, the first and third are buttons on your account page. Otherwise email hello@paradisedreamcenter.com. We will respond within one month and we do not charge.
One limit on deletion. Closing your account removes your name, email address and delivery addresses. It cannot remove the order totals and payment references, because we are required to keep those for 6 years — but they are kept with nothing in them that identifies you.
Cookies
We set only cookies that are strictly necessary, which is why you have not been asked to consent to any. They are listed on the cookies page.
Complaining
Please tell us first at hello@paradisedreamcenter.com and we will try to put it right. You also have the right to complain to the Information Commissioner's Office at any time — ico.org.uk/make-a-complaint, or 0303 123 1113.