Herbs of Dreama
Herbs of Dreama
0
Menu

PRIVACY POLICY

Last updated: 10 November 2026

This Privacy Notice for Teresa Peintner / Herbs of Dreama (“we,” “us,” or “our”) describes how and why we may access, collect, store, use and share (“process”) your personal information when you use our services (“Services”), including when you:

Questions or concerns?

Reading this Privacy Notice will help you understand your privacy rights and choices. We are responsible for determining how your personal information is processed.

If you have any questions or concerns, please contact us via the contact page.

SUMMARY OF KEY POINTS

This summary provides an overview of our Privacy Notice. More detailed information can be found in the sections below.

What personal information do we process?

When you visit, use or navigate our Services, we may process personal information depending on how you interact with us, the choices you make and the products or features you use. This may include your name, email address, shipping information, order details and technical information.

Do we process sensitive personal information?

We do not intentionally request sensitive personal information, such as health information, through our standard shopping and checkout processes. If you voluntarily provide sensitive information when contacting us, we will handle it in accordance with applicable data protection laws.

Do we collect information from third parties?

We may receive limited information from third-party service providers, including payment processors, shipping partners and other services necessary to fulfil your orders and operate our website.

How do we process your information?

We process your information to provide, improve and administer our Services, fulfil purchases, communicate with you, maintain website security, prevent fraud and comply with legal obligations. We may also process information for marketing purposes where permitted by law.

With whom do we share personal information?

We may share necessary personal information with trusted third parties, including payment processors, shipping providers, website hosting services and email marketing platforms.

How do we keep your information safe?

We use appropriate technical and organisational security measures to protect personal information. However, no method of electronic transmission or storage can be guaranteed to be completely secure.

What are your privacy rights?

Depending on your location and applicable privacy laws, you may have rights to access, correct, delete or restrict the processing of your personal information.

How can you exercise your rights?

You may contact us to submit a privacy-related request. We will review and respond to your request in accordance with applicable law.


TABLE OF CONTENTS

  1. What Information Do We Collect?

  2. How Do We Process Your Information?

  3. What Legal Bases Do We Rely On?

  4. When and With Whom Do We Share Your Personal Information?

  5. Do We Use Cookies and Other Tracking Technologies?

  6. How Long Do We Keep Your Information?

  7. How Do We Keep Your Information Safe?

  8. What Are Your Privacy Rights?

  9. Controls for Do-Not-Track Features

  10. Do United States Residents Have Specific Privacy Rights?

  11. Do Other Regions Have Specific Privacy Rights?

  12. International Data Transfers

  13. Do We Make Updates to This Notice?

  14. How Can You Contact Us About This Notice?

  15. How Can You Review, Update or Delete Your Information?


1. WHAT INFORMATION DO WE COLLECT?

Personal information you disclose to us

In Short: We collect personal information that you voluntarily provide to us.

We collect personal information when you place an order, create a customer account, subscribe to our newsletter, contact us or otherwise interact with our Services.

The personal information we may collect includes:

The information collected depends on how you interact with our website and which features you choose to use.

Sensitive information

We do not intentionally collect sensitive personal information through our ordinary shopping and checkout processes.

We ask customers not to submit unnecessary medical or other sensitive information through our contact forms or customer service channels.

If such information is voluntarily provided, we will process it only where we have an appropriate legal basis and, where required, an additional condition under applicable data protection law.

Payment data

When you purchase products through our website, certain information is necessary to process your payment.

Payments are handled through [PAYMENT PROVIDER — e.g. Stripe, PayPal or WooPayments].

Depending on the payment method selected, your payment provider may collect and process your payment card details, billing information and other information necessary to authorise and complete the transaction.

We do not intentionally store complete payment card numbers or card security codes on our website.

For more information, please refer to the privacy policy of the payment provider you use at checkout.

Information automatically collected

In Short: Certain technical information may be collected automatically when you visit our website.

This may include:

Log and usage data

Our website or hosting provider may automatically collect information about your interactions with our Services, including your IP address, browser type, referring pages, access times, pages viewed, error reports and website activity.

Device data

We may collect technical information about the device used to access our website, such as operating system, device type, browser configuration and language preferences.

Location information

We may use general location information derived from your IP address or shipping details to display relevant shipping options, calculate delivery costs, support fraud prevention and manage international orders.

We do not intentionally collect precise GPS location information unless a specific website feature requires it and the relevant permissions are obtained.

Cookies and similar technologies

Our website may use cookies and similar technologies to maintain shopping cart functionality, remember preferences, support checkout processes and, where enabled, analyse website activity.

Further details are provided in Section 5.


2. HOW DO WE PROCESS YOUR INFORMATION?

In Short: We process personal information to provide our Services, fulfil orders, communicate with customers, operate our business and comply with applicable laws.

We may process personal information for the following purposes:

To facilitate purchases and fulfil orders

We process your name, contact details, billing information, shipping address and order information to process payments, prepare orders, arrange delivery and communicate order updates.

To manage customer accounts

If account registration is available, we may process your information to create, maintain and manage your customer account.

To provide customer support

We use information you provide when contacting us to respond to enquiries, resolve issues, manage complaints and assist with returns or refunds.

To send administrative communications

We may send order confirmations, shipping updates, account notifications, changes to our terms or other essential service-related communications.

To send marketing and promotional communications

Where permitted by applicable law, we may send newsletters, product updates, special offers and information about our botanical products.

You may unsubscribe from marketing communications at any time.

To improve our website and Services

We may use technical and analytical information to understand website performance, identify technical problems and improve the shopping experience.

To maintain security and prevent fraud

We may process information necessary to detect suspicious activity, prevent unauthorised transactions and protect our website and customers.

To comply with legal obligations

We may retain or disclose information where necessary to comply with accounting, taxation, consumer protection, product safety and other applicable legal requirements.

To protect individuals’ vital interests

In exceptional circumstances, we may process information when necessary to protect the vital interests of an individual, where permitted by law.


3. WHAT LEGAL BASES DO WE RELY ON TO PROCESS YOUR PERSONAL INFORMATION?

In Short: We process your personal information only where we have a valid legal basis under applicable data protection laws.

Where the EU GDPR or UK GDPR applies, we may rely on the following legal bases:

Consent

We may process personal information where you have given your consent for a specific purpose.

This may include subscribing to marketing emails or accepting non-essential cookies.

You may withdraw your consent at any time.

Performance of a contract

We may process personal information where necessary to enter into or fulfil a contract with you.

For example, when you purchase a product, we need certain information to process your payment, prepare your order and arrange delivery.

Legitimate interests

We may process information where necessary for our legitimate business interests, provided these interests are not overridden by your rights and freedoms.

This may include:

Legal obligations

We may process and retain personal information where necessary to comply with applicable laws, including tax, accounting, consumer protection and product safety obligations.

Vital interests

In limited circumstances, we may process information where necessary to protect someone’s life or physical safety.

Where the law requires consent for a particular activity, we will not rely on legitimate interests as a substitute.


4. WHEN AND WITH WHOM DO WE SHARE YOUR PERSONAL INFORMATION?

In Short: We may share personal information with selected third parties when necessary to operate our business, fulfil orders or comply with legal requirements.

We may share information with the following categories of service providers:

Payment processing providers

Our payment providers process transaction-related information to authorise payments, prevent fraud and manage refunds.

Provider: [PAYMENT PROVIDER]

Shipping and fulfilment providers

We may share names, delivery addresses, telephone numbers where necessary and order information with courier companies and fulfilment partners.

As we may dispatch products from Italy and the United Kingdom, relevant information may be shared with fulfilment partners operating in those countries.

Website hosting and technology providers

Our website operates using WordPress and WooCommerce.

Our hosting provider and relevant technical service providers may process certain information necessary to maintain website functionality, security and performance.

Hosting provider: [HOSTING PROVIDER]

Email marketing providers

If you subscribe to our newsletter, your email address and subscription preferences may be processed by our chosen email marketing service.

Email marketing provider: [EMAIL MARKETING PROVIDER]

Analytics and advertising providers

If enabled, we may use analytics or advertising services to understand website activity, measure campaign performance or promote our products.

These services may process information through cookies or similar technologies, subject to applicable consent requirements.

Providers, if used: [ANALYTICS / ADVERTISING PROVIDERS]

Legal and professional advisers

We may disclose information to accountants, legal advisers or other professional service providers where necessary for legitimate business or legal purposes.

Legal authorities

We may disclose personal information where required by applicable law, a valid legal request or a competent regulatory authority.

Business transfers

We may share or transfer personal information in connection with a merger, acquisition, restructuring or sale of all or part of our business, subject to applicable legal requirements.

We do not sell customer personal information to data brokers.


5. DO WE USE COOKIES AND OTHER TRACKING TECHNOLOGIES?

In Short: We use cookies and similar technologies to support essential website functions and may use additional technologies for analytics or marketing.

Cookies are small text files that websites store on your device to remember certain information.

Essential cookies

These cookies are necessary for the operation of our online shop.

They may be used to:

Because these cookies are necessary for the website to function, they may not require consent under applicable cookie laws.

Analytics cookies

If analytics services are enabled, we may use cookies to understand how visitors interact with our website.

This information may help us identify popular pages, improve website usability and understand general website performance.

Marketing and advertising cookies

If advertising technologies are enabled, we may use cookies, pixels or similar technologies to measure advertising performance and provide relevant promotional content.

This may include services associated with social media advertising.

Non-essential cookies and tracking technologies will be used only where permitted by law and, where required, after you have provided consent.

Managing your cookie preferences

You can manage or withdraw your cookie preferences through [COOKIE SETTINGS LINK].

You may also manage cookies through your browser settings.

Disabling certain essential cookies may affect the functionality of our website or checkout.

For further information, please refer to our [COOKIE POLICY, IF SEPARATE].


6. HOW LONG DO WE KEEP YOUR INFORMATION?

In Short: We retain personal information only for as long as necessary for the purposes described in this Privacy Notice, unless a longer period is required or permitted by law.

Retention periods depend on the type of information and the reason it was collected.

Order and transaction records

We retain relevant order and transaction information for the applicable accounting, taxation, product traceability and legal recordkeeping periods.

Customer account information

Where customer accounts are available, account information may be retained while the account remains active and for any additional period required for legitimate business or legal purposes.

Customer enquiries

Customer service messages and contact form submissions are retained for [RETENTION PERIOD], unless a longer period is necessary to resolve a dispute or comply with legal obligations.

Newsletter subscriptions

Newsletter information is retained while you remain subscribed, or for another period where we have a valid legal reason to keep the information.

If you unsubscribe, we may retain limited information necessary to record and respect your preference.

Analytics information

Where analytics services are used, data is retained according to the configured retention periods and applicable service-provider arrangements.

When personal information is no longer required, we will delete or anonymise it securely, unless continued retention is necessary under applicable law.


7. HOW DO WE KEEP YOUR INFORMATION SAFE?

In Short: We use appropriate technical and organisational measures designed to protect personal information.

Depending on our systems and service providers, these measures may include:

Despite these measures, no electronic transmission or storage system can be guaranteed to be completely secure.

If we become aware of a personal data breach, we will assess the incident and take appropriate action, including notifying relevant supervisory authorities and affected individuals where required by law.


8. WHAT ARE YOUR PRIVACY RIGHTS?

In Short: Depending on your location, you may have certain rights regarding the personal information we process.

If you are located in the European Economic Area (EEA) or United Kingdom, applicable privacy laws may provide you with the following rights:

Right of access

You may request confirmation of whether we process your personal information and ask for a copy of that information.

Right to rectification

You may request that inaccurate or incomplete personal information be corrected.

Right to erasure

You may request the deletion of your personal information where applicable legal conditions are met.

Right to restrict processing

You may request that we restrict the processing of your information in certain circumstances.

Right to data portability

Where applicable, you may request to receive certain personal information in a structured, commonly used and machine-readable format.

Right to object

You may object to certain processing activities, including processing based on legitimate interests.

You have the right to object to direct marketing at any time.

Rights relating to automated decision-making

Where applicable, you may have rights in relation to decisions made solely through automated processing that produce legal or similarly significant effects.

Withdrawing your consent

Where we rely on consent, you may withdraw that consent at any time.

Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal.

Exercising your rights

To exercise any of these rights, please contact us at:

[CONTACT EMAIL]

We will consider and respond to your request in accordance with applicable law.

Right to complain

If you are located in the EEA or UK and believe that your personal information has been processed unlawfully, you may lodge a complaint with the relevant data protection authority.

For Italy, the supervisory authority is the Garante per la protezione dei dati personali.

For the United Kingdom, the supervisory authority is the Information Commissioner’s Office (ICO).


9. CONTROLS FOR DO-NOT-TRACK FEATURES

Some web browsers and mobile devices offer Do-Not-Track (DNT) settings that allow users to express preferences about online tracking.

The interpretation and technical implementation of these signals may differ between browsers and services.

Our website’s response to browser-based privacy signals depends on the technologies and consent management tools in use.

Regardless of these settings, we aim to respect applicable consent and privacy requirements.

You can manage applicable tracking preferences through our website’s cookie settings.


10. DO UNITED STATES RESIDENTS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Residents of certain US states may have additional privacy rights under applicable state laws.

Depending on the state in which you reside and whether the relevant law applies to our business, you may have rights to:

The availability and scope of these rights vary by jurisdiction.

We may collect categories of information such as identifiers, contact details, commercial information and internet activity information, as described in Section 1.

We do not intentionally collect biometric information or other sensitive categories of personal information through our standard online checkout.

If we use advertising technologies that constitute a sale or sharing of personal information under an applicable US state privacy law, we will provide any legally required notices and opt-out mechanisms.

To submit a privacy request, please contact:

[CONTACT EMAIL]

We may need to verify your identity before fulfilling certain requests.

If you are entitled to appeal a decision concerning your privacy rights under applicable law, you may contact us using the same email address.


11. DO OTHER REGIONS HAVE SPECIFIC PRIVACY RIGHTS?

In Short: Depending on your country of residence, additional privacy protections may apply.

Our online shop is primarily intended to serve customers in the United Kingdom and European Union.

However, individuals in other jurisdictions may have privacy rights under their local laws where those laws apply to our activities.

These may include rights to request access to, correction of or deletion of personal information.

We will review privacy requests in accordance with the laws applicable to the relevant processing activity.

For questions about your rights, please contact [CONTACT EMAIL].


12. INTERNATIONAL DATA TRANSFERS

In Short: Personal information may be processed in countries outside your country of residence.

As our business may operate between Italy and the United Kingdom, information relating to orders, deliveries and customer enquiries may be processed in both countries.

We may also use third-party technology providers whose infrastructure or personnel are located in other countries.

Where personal information is transferred internationally and data protection laws require specific safeguards, we rely on a legally recognised transfer mechanism.

These may include:

The safeguards used depend on the destination, provider and nature of the transfer.

You may contact us at [CONTACT EMAIL] for further information about relevant international data transfers.


13. DO WE MAKE UPDATES TO THIS NOTICE?

In Short: Yes, we may update this Privacy Notice when necessary.

We may revise this Privacy Notice to reflect changes in our business, website functionality, service providers or legal obligations.

The updated version will be identified by the “Last updated” date at the beginning of this Notice.

Where required by applicable law, we will provide additional notice of material changes.

We encourage you to review this Privacy Notice periodically.


14. HOW CAN YOU CONTACT US ABOUT THIS NOTICE?

If you have questions, concerns or requests relating to this Privacy Notice or our processing of personal information, you may contact us at:

[BRAND NAME]

Legal business name: [LEGAL BUSINESS NAME]

Email: [CONTACT EMAIL]

Website: [WEBSITE URL]

Business address: [REGISTERED BUSINESS ADDRESS]

Where applicable, details of any legally required data protection representative or Data Protection Officer will also be provided here.


15. HOW CAN YOU REVIEW, UPDATE OR DELETE THE DATA WE COLLECT FROM YOU?

Depending on applicable law, you may request to review, correct, update, restrict or delete certain personal information that we hold about you.

To submit a request, please contact us.

Please describe the nature of your request so that we can identify the relevant information.

We may request additional information where necessary to verify your identity and protect your personal information against unauthorised disclosure.

We will respond within the time limits required by applicable data protection laws.

Certain information may need to be retained despite a deletion request where necessary to comply with legal obligations, resolve disputes or establish, exercise or defend legal claims.

We are committed to respecting your privacy and handling your personal information responsibly.