Privacy Policy

Effective date: 01/09/2026   Last updated:14/09/2026

Dream A Dress Agency Limited (“Dream A Dress”, “we”, “us” or “our”) respects your privacy and is committed to protecting your personal data. This policy explains how we collect, use, disclose and safeguard personal data when you visit or use our website, communicate with us through social media, purchase or enquire about our products or services, attend an appointment or event, or otherwise deal with our business.

1. Who we are and how to contact us

Dream A Dress Agency Limited is the controller responsible for the personal data covered by this policy.

· Company number: 17250020

· Registered office: Lakeside Cottage, Upwood Road, Ramsey Heights, PE26 2RY

· Trading address: Unit 2, St Marys Road, Ramsey, Huntingdon, PE26 2SW

· Privacy contact email: privacy@dreamadress.co.uk

· Telephone:07917 327 357

If you have questions about this policy or wish to exercise your data protection rights, please contact us using the details above. Please also tell us if your personal information changes so 

that our records remain accurate.

2. Personal data we collect

Depending on how you interact with us, we may collect:

· Identity and contact data: name, title, postal address, email address, telephone number and social media username.

· Transaction and payment data: orders, bookings, returns, refunds, amounts paid and limited payment-related information. Card payments are normally processed by our payment provider, and we do not retain full card details.

· Appointment, order and service data: event date, product preferences, measurements or sizing information, fitting notes, alteration requirements, delivery details and communications about your purchase or enquiry.

· Account and marketing data: account details, preferences, interests, competition entries, survey responses, mailing preferences and records of consent.

· Communications:emails, messages, reviews, telephone notes, social media comments, direct messages and customer-service history.

· Images and media: photographs, videos or testimonials you provide or that we create with your permission.

· Technical and usage data: IP address, browser and device information, cookie identifiers, website activity, referral source and interaction with our online content.

· Business contact data: information about suppliers, contractors, professional advisers and other business contacts.

We collect personal data directly from you, through our website and social media accounts, from payment, delivery, booking, analytics or advertising providers, and from publicly available sources where lawful. Please do not send us health or other sensitive information unless it is necessary for your request. If such information is needed—for example, an accessibility requirement relevant to an appointment—we will use it only where permitted by law and with appropriate safeguards.

3. How and why we use personal data

Under UK data protection law, we must have a lawful basis for using personal data. The bases most likely to apply are performance of a contract, compliance with a legal obligation, our legitimate interests, and consent. We may use personal data to:

· respond to enquiries, arrange appointments, fulfil orders, provide products or services, process payments, organise delivery or collection, and manage returns or complaints—because this is necessary to take steps at your request or perform our contract with you;

· operate and improve our website, social media presence, products, services and customer experience—based on our legitimate interests in running and developing our business;

· manage our relationship with you, maintain records, prevent fraud, protect our systems, establish or defend legal claims, and enforce our terms—based on our legitimate interests and, where applicable, legal obligations;

· comply with tax, accounting, consumer protection and other legal or regulatory requirements—because processing is necessary to meet our legal obligations;

· send marketing communications where you have consented, or where another lawful route permits us to contact you. You can opt out at any time;

· publish photographs, videos, reviews or testimonials for promotional purposes where we have your permission or another valid lawful basis; and

· analyse website and advertising performance using non-essential cookies or similar technologies where required consent has been obtained.

Where we rely on legitimate interests, we consider the effect on your rights and use personal data only where our interests are not overridden by your interests or fundamental rights. Where we rely on consent, you may withdraw it at any time without affecting earlier lawful processing.

4. Marketing

We may send you news, offers and updates if you have asked to receive them or if applicable law otherwise allows us to do so. You can unsubscribe using the option in a marketing message or by contacting us. We may still send non-marketing messages needed to service an enquiry, appointment, order or account.

5. Social media

If you interact with us through a social media platform, we may receive your username, profile information, messages, comments and engagement data in accordance with your settings and the platform’s rules. The platform also processes personal data for its own purposes and has its own privacy policy. Information you post publicly may be visible to others, so please avoid sharing personal or sensitive details in public comments. For private customer-service matters, contact us by direct message, email or telephone.

6. Sharing personal data

We may share personal data only where necessary with:

· website hosting, email, customer-management, appointment, analytics, advertising and IT service providers;

· payment processors, banks, delivery companies, alteration providers or other suppliers involved in fulfilling your request;

· accountants, insurers, legal advisers and other professional advisers;

· HM Revenue & Customs, regulators, law-enforcement bodies or other authorities where required by law; and

· a prospective buyer, seller or adviser in connection with a business sale, restructuring or transfer.

We require service providers acting on our behalf to protect personal data and use it only for agreed purposes. We do not sell personal data.

7. International transfers

Some service providers or social media platforms may process personal data outside the United Kingdom. Where this happens, we will use a lawful transfer mechanism, such as UK adequacy regulations or approved contractual safeguards, and take additional measures where required. You may contact us for further information about the safeguards relevant to your data.

8. Data retention

We keep personal data only for as long as reasonably necessary for the purpose collected, including to meet legal, accounting, tax, warranty, fraud-prevention and dispute-resolution requirements. Retention periods vary according to the type of record, our relationship with you, legal limitation periods and whether an issue is ongoing. When personal data is no longer required, we delete or anonymise it securely.

9. Security

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful loss, alteration, disclosure, access or destruction. Access is limited to people and providers with a business need, subject to confidentiality obligations. We maintain procedures for responding to suspected personal data breaches and will notify affected individuals and regulators where legally required.

10. Cookies and similar technologies

Our website may use cookies and similar technologies. Strictly necessary technologies support core functions and security. Analytics, personalisation or advertising technologies will be used only in accordance with applicable consent requirements. You can manage optional choices through our cookie banner or settings. Further details should be provided in our Cookie Policy: 

11. Children’s personal data

Our general website and social media content are not intended to collect personal data directly from children. Where a customer is under 18, a parent or guardian should normally make the booking or purchase and provide any necessary information. We will seek appropriate permission before using a child’s image or testimonial and will apply additional safeguards where required.

12. Your data protection rights

Depending on the circumstances, you may have the right to:

· request access to your personal data;

· ask us to correct inaccurate or incomplete data;

· request deletion of personal data;

· request restriction of processing;

· object to processing based on legitimate interests or to direct marketing;

· request transfer of data you provided in a portable format where applicable;

· withdraw consent at any time where processing relies on consent; and

· ask for human review of certain significant decisions made solely by automated means, if applicable.

To exercise a right, contact us using the details in section 1. We may need to verify your identity and clarify your request. We normally respond within one month, although the law permits an extension for complex or multiple requests. Rights may be subject to legal exemptions, and we will explain if we cannot comply fully.

13. Complaints

We would appreciate the opportunity to address your concern first. You also have the right to complain to the UK Information Commissioner’s Office, the supervisory authority for data protection matters. Current contact and complaint details are available from the Information Commissioner’s Office.

14. Changes to this policy

We may update this policy to reflect changes in our business, services or legal obligations. The latest version should be displayed on our website with the revised “last updated” date. We may provide additional notice where a change materially affects how we use personal data.