Personal data protection
Privacy Policy
Last updated: 27 April 2026
At Dream Fulfilled, we respect the privacy of the people who visit our website, place orders or contact us.
This policy explains what personal data we may process, what we use it for, the legal basis for processing, who it may be shared with and how you can exercise your rights.
1. Data controller
In compliance with Regulation (EU) 2016/679 General Data Protection Regulation and Spanish Organic Law 3/2018 on Personal Data Protection and guarantee of digital rights, the following data controller details are provided:
Controller: Inmaculada Blasco de Federico
Trading name: Dream Fulfilled
Tax ID / NIF: ES20160277H
Legal / business address: Calle Iglesia 21A 46162 Andilla
Contact email: admin@dreamfulfilled.eu
Website: https://dreamfulfilled.eu
Activity: creation and online sale of handmade wooden and macramé items.
No Data Protection Officer has been appointed, as it is not mandatory for this activity. For any matter related to privacy or personal data protection, you can contact us at admin@dreamfulfilled.eu.
2. Personal data we may process
We may process different types of personal data depending on your relationship with Dream Fulfilled:
- Identification and contact details: name, surname, email address, phone number, postal address and details needed to answer enquiries or manage orders.
- Purchase details: products purchased, order number, amounts, chosen payment method, shipping address, billing address and order-related incidents.
- Payment details: information necessary to manage payments through secure gateways such as Redsys, Bizum through Redsys, PayPal and/or the corresponding banking entity. Dream Fulfilled does not store full bank card details, banking passwords or payment credentials.
- Browsing data: IP address, cookie identifiers, device, browser, pages visited and similar data, according to the cookie settings and applicable consent.
- Customer service data: information included in messages, enquiries, requests, complaints, photographs sent to assess incidents or any data voluntarily provided when contacting us.
- Commercial communication data: email address and subscription preferences, when the user has given consent or another applicable legal basis exists.
3. How we obtain data
Personal data may be obtained through:
- Contact or customer service forms.
- Checkout process and customer account creation, where applicable.
- Communications by email, WhatsApp or other contact methods indicated on the website.
- Subscription to commercial communications or newsletter, if available.
- Browsing the website and using cookies or similar technologies, according to the settings chosen by the user.
4. Purposes and legal basis for processing
We process personal data for the following purposes:
| Purpose | Legal basis |
|---|---|
| Managing orders, payments, shipping, invoicing, after-sales support, returns, refunds and incidents. | Performance of a contract or pre-contractual measures. |
| Responding to enquiries, messages or requests sent by the user. | User consent and/or legitimate interest in responding to the request received. |
| Managing payments through Redsys, Bizum via Redsys, PayPal, bank transfer and the corresponding banking entity. | Performance of the purchase contract and, where applicable, compliance with legal obligations. |
| Managing shipments through transport companies, Correos or national postal operators in the destination country. | Performance of the purchase contract. |
| Complying with tax, accounting, legal and administrative obligations. | Compliance with legal obligations. |
| Preventing fraud, misuse, unauthorised access or security issues. | Legitimate interest and, where applicable, compliance with legal obligations. |
| Sending commercial communications, news or promotions. | User consent or previous relationship in accordance with applicable regulations. |
| Analysing website use and improving content, browsing and shopping experience. | User consent when analytics cookies or non-essential tools are used. |
| Measuring campaigns, interactions or social media content when tools such as Meta, Pinterest or similar are enabled. | User consent through the cookie panel, where applicable. |
5. Data retention
Personal data will be kept for as long as necessary to fulfil the purpose for which it was collected and, afterwards, for the legally required periods or for the time necessary to deal with possible liabilities.
- Order, invoicing and tax obligation data: for the periods required by applicable tax, accounting and commercial regulations.
- Customer service and enquiry data: for the time necessary to answer the request and, where applicable, for the time necessary to handle possible incidents or claims.
- Commercial communication data: until the user withdraws consent or unsubscribes.
- Cookie-related data: as indicated in the Cookie Policy and the consent settings chosen by the user.
When data is no longer necessary, it will be deleted or blocked in accordance with applicable regulations.
6. Data recipients
Personal data may be communicated to or processed by third parties when necessary to provide the service, manage the online shop or comply with legal obligations.
- Transport companies, Correos and postal operators: to manage delivery and tracking of orders.
- Secure payment gateways and providers: Redsys, Bizum through Redsys, PayPal and/or the corresponding banking entity, to manage order payments.
- Technology service providers: web hosting, maintenance, security, email, technical support or tools necessary for the operation of the shop.
- Advisors, administration or public authorities: when necessary to comply with tax, accounting, legal or administrative obligations.
- Commercial communication tools: only when consent or another applicable legal basis exists.
- Analytics, marketing or social media tools: Google Analytics, Meta, Pinterest or similar services, only when active and according to the relevant cookie consent.
We do not sell personal data to third parties.
7. International data transfers
Some technology, payment, analytics, marketing or social media providers may process data outside the European Economic Area.
Where international data transfers take place, they will be carried out in accordance with the safeguards provided by data protection regulations, such as adequacy decisions, standard contractual clauses or other legally valid mechanisms.
The use of certain analytics, marketing or social media tools will depend on the configuration active at any given time and on the consent given by the user where necessary.
8. User rights
The user may exercise the following data protection rights:
- Access: to know what personal data we process.
- Rectification: to request the correction of inaccurate or incomplete data.
- Erasure: to request deletion of data where legally possible.
- Objection: to object to certain processing activities in the cases provided by law.
- Restriction of processing: to request that data processing be limited in certain circumstances.
- Portability: to receive the data in a structured format and transmit it to another controller where applicable.
- Withdrawal of consent: to withdraw consent at any time, without affecting the lawfulness of processing carried out before withdrawal.
To exercise these rights, the user may send a request to admin@dreamfulfilled.eu, indicating the right they wish to exercise and providing the information necessary to identify the request.
If the user considers that the processing of their data does not comply with the regulations, they may lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.
9. Data security
Dream Fulfilled applies appropriate technical and organisational measures to protect personal data against loss, misuse, unauthorised access, alteration or improper disclosure.
However, no system connected to the Internet can guarantee absolute security. Therefore, it is also important that the user uses secure passwords, keeps their devices protected and does not share access details with third parties.
10. Minors’ data
This website is not aimed at minors. To make purchases on dreamfulfilled.eu, the user must be of legal age and have sufficient legal capacity to enter into contracts.
If Dream Fulfilled detects that it has received personal data from a minor without valid authorisation, it will take reasonable steps to delete it where appropriate.
11. Cookies and similar technologies
Dream Fulfilled uses technical cookies necessary for the operation of the shop and, when the user gives consent, preference, analytics, marketing or social media cookies.
The user can accept, reject or configure non-essential cookies through the cookie management panel available on the website.
Full information is available in the Cookie Policy.
12. Changes to this policy
Dream Fulfilled may update this Privacy Policy when necessary due to legal, technical or operational changes, or changes in the services used on the website.
We recommend reviewing this policy periodically to know the version in force at any given time.
