Privacy Policy UPDATE

Welcome to the Love to Dream™ Privacy Notice

This information has been produced to help you understand everything you need to know about the way Love to Dream™ collects, uses, and shares personal data, what your legal rights are and how to exercise them.

We hope you'll take some time to read this document; we've tried to keep it all as simple as possible and to avoid jargon, and we'll make our best efforts to keep you informed if there are any changes to the way we process your personal data in the future.

Love to Dream™ takes its responsibility for protecting your data very seriously and we do advise you get to know our practices. If there's anything here you don't understand, or if you want to ask any questions, please feel free to contact us.

Who is the Data Controller?

We are Love To Dream Limited, trading as Love to Dream™.

Registered address: 16 Great Queen Street, Covent Garden, London. WC2B 5AH

Registration number: 13120272

In this document Love to Dream™ may be referred to as "we", "us", or "our".

What kinds of Personal Data does Love to Dream™ Process?

Love to Dream™ collects personal data for various purposes; with that in mind we have created a list of the types of personal data that we may collect, either directly from yourself or from other sources, in order to achieve those purposes.

The kinds of personal data we may collect include:

What are the reasons Love to Dream™ collects Personal Data?

Legal Obligations

Love to Dream™ uses personal data firstly to fulfil any contractual obligations that exist between us and yourself. Where we request personal data be provided to enter into, or meet the terms of any such contract, you will be required to provide the relevant personal data or we will not be able to deliver the goods or services you want. In such cases the lawful basis of us processing the personal data is that it is necessary for the performance of a contract.

We are required by law to process personal data for purposes relating to our legal obligations, these include:

• To provide for our financial commitments, or to relevant financial authorities.
• To comply with regulatory requirements and any self-regulatory schemes.
• To carry out required business operations and due diligence.
• To cooperate with relevant authorities for reporting criminal activity, or to detect and prevent fraud.
• To investigate any insurance claims, claims of unfair dismissal, claims of any kind of harassment or of discrimination, or any other claim whereby the organisation may have to defend itself.

Consent

Love to Dream™ may process Personal Data for the following purposes where it has received consent to do so:

• Sending information about products and services of ours that we think you might like through online signup (see further the first paragraph of the 'Direct Marketing' section below).

You may withdraw your consent for us to process your personal data for these purposes at any time; after a withdrawal of consent request is received, we may have to contact you to verify the request.

Withdrawing your consent for us to process your personal data will not affect the lawfulness of the processing beforehand.

If you are under the age of 13, you must have permission from your parents or guardians to use our online services. This is called 'parental consent'.

If we find out that any person under the age of 13 is using our services without the proper parental consent, we may have to stop that service; this might include deleting your accounts and any data that you have added to them.

Separately, as part of providing our products and services, we collect certain information about your child (such as their date of birth or due date, and where applicable their name) that you, as the account holder, choose to provide to us. We use this information to personalise your experience, such as recommending age-appropriate products and content, and it is protected in the same way as your own personal information.

Legitimate Interests

Love to Dream™ may process Personal Data for any of the following purposes, which are considered to be within our legitimate business interests:

• To provide goods and services where it has been requested,
• To inform customers of goods and services we provide or offers that may interest them (see further the second paragraph of 'Direct Marketing' section below),
• To send notification on subjects to individuals who have asked to be kept informed,
• To improve the quality of the services we offer, and to better understand customers' needs by requesting feedback, or reviews of the services provided, or sending survey forms,
• To send notifications of any changes to the goods and/or services provided that may affect people,
• To understand the scale of the customer base; for statistical analysis and market research,
• To recognise when people re-engage with our organisation,
• To allow the organisation to support and maintain our products in active service,
• To improve the organisation's website so content is delivered more efficiently,
• To enhance the security measures in place that protect data we are responsible for,
• To protect the organisation's assets,
• To participate in free prize draws or competitions,
• To use automated tools to help us understand and predict things like your likely value as a customer or when you might next make a purchase, so we can run more relevant marketing.

Where does Love to Dream™ obtain Personal Data from?

We will collect personal data directly from you in various ways. This could include when you complete an online form, enter a competition, for promotions or if you provide the data directly to a representative of Love to Dream™.

We may also gather personal data by any of the following methods:

• From technical functionality that gathers data automatically from computer equipment when people visit our online platforms.
• From platforms that make use of device settings that allow geographical location tracking, such as IP address mapping, WiFi, GPS signals and cell tower positioning.

Love to Dream™ and Direct Marketing

We may also send you SMS and/or email marketing messages, but only where you have consented to receiving these. You may also opt-out of receiving these at any time. For SMS messages, you can do so either by texting the single keyword command STOP to Love to Dream or clicking the unsubscribe link (where available) in any SMS to cancel. You'll receive a one-time opt-out confirmation SMS. For other messages, you can do so by following the unsubscribe link included in the marketing message or by contacting us.

Where we are allowed under applicable privacy laws, we may also send you any direct marketing messages without your opt-in consent in relation to Love to Dream™ products which are similar to those which you have already purchased, used or interacted with. This is known as 'soft consent'. You can always opt-out of receiving these marketing messages at any time by following the unsubscribe link included in the marketing message or by contacting us.

Who will Love to Dream™ share your Personal Data with?

To achieve the above stated purposes for which we process your personal data, we may have to share your personal data with certain third parties. We shall make all reasonable efforts to ensure that any third party we share your personal data with is also compliant with data protection law.

The kinds of third parties we may share your personal data with include other members of our corporate group, and organisations where it is necessary to provide goods or services or set up various resources. Do we share information with third parties? Apart from data shared with Google Analytics, social media interfaces and cookies as outlined above, Beyond the analytics, advertising and audience-matching partners, social media interfaces and cookies described above, examples of third-party service providers include:

1. Trading Platform: ecommerce website platform, primarily, Drupal CommerceShopify.
2. IT service providers: who support our website and business systems, primarily, Workato, NetSuite, Freshdesk & Patchworks.
3. Payment Providers: payment processing providers, primarily, PayPal & Adyen.
4. Logistics & Carriers: postal delivery service provider, primarily, Royal Mail for UK.
5. Review Platform: user-generated content marketing platform, primarily, Yotpo.
6. Email support: marketing and communication platforms for surveys or electronic marketing messages from us, primarily, DotDigital, MailChimp. (removed, no longer used)
7. AirRobe: marketplace for pre-loved clothing (we will only share your data with AirRobe if you provide your consent).
8. Rakuten Advertising: affiliate partner, digital marketing/targeting.
9. Klaviyo: email and SMS platform (we will only share your data with Klaviyo if you provide your consent). Klaviyo: email and SMS platform. Your information (such as contact details, order history and website activity) is shared with Klaviyo as part of our standard business systems, to communicate with you and manage your customer relationship. Where you've given consent, we and Klaviyo may also use this information to send you marketing messages, and to share limited information (such as a matched or hashed email address) with advertising platforms so relevant advertising can be shown to you or similar audiences.
10. We also work with additional analytics, personalisation and marketing partners, integrated through our ecommerce platform and Klaviyo, to help us understand and improve the shopping experience.

Where will Love to Dream™ store your Personal Data?

As a part of our standard business practices, we may transfer your personal data to organisations based in countries that have not been granted an adequacy decision under the General Data Protection Regulation.

Where data is transferred between Love to Dream™'s own sites (or between a group of companies engaged in a joint economic activity), we shall maintain Binding Corporate Rules (BCR) that apply to every member organisation concerned.

These BCRs shall ensure that every party involved that we share your personal data with has a similar standard of data protection compliance in place.

How long will Love to Dream™ keep your Personal Data?

We will keep your personal data only for as long as required to achieve the purposes for which it was collected, in line with this privacy notice.

The following criteria are what determine the period for which we will keep your personal data:

• Until we are no longer required to do so to comply with regulatory requirements or financial obligations.
• Until we are no longer required to do so by any law we are subject to.
• Until all purposes for which the data was originally gathered have become irrelevant or obsolete.

What Does Love to Dream™ Collect Through Our Mobile App?

If you use our mobile app, everything described above applies equally, including your child's date of birth or due date and, where you choose to provide it, their name. We do not collect your child's gender.

To deliver push notifications, we collect a device identifier or push token that allows us to send these to you. You can turn push notifications on or off at any time in your device settings.

Our mobile app uses its own separate analytics tools to help us understand app usage and improve the app experience, kept separate from the analytics described above.

Your Rights, Our Responsibility

There are several rights granted to you immediately upon providing us with your personal information; some of these are mentioned above. We'd like you to know that at Love to Dream™ we take your rights seriously and will always conduct ourselves in a way that is considerate of our responsibility to serve your legal rights.

The Right of Access

This grants you the right to confirm whether or not your personal data is being processed, and to be provided with relevant details of what those processing operations are and what personal data of yours is being processed. If you would like access to the personal data we have about you, we ask that you contact us using the details below.

The Right to Rectification

If you notice that the data we have about you is inaccurate or incomplete, you may request we rectify the mistake. We will make every effort to respond to requests of this type immediately.

The Right to Erasure

Otherwise known as the 'right to be forgotten', this gives you the right to request your personal data be deleted. This is not an absolute right; if you were to request that we erase your personal data, we would erase as much of that data as we could but may have to retain some information if it is necessary. Where we have received a request for personal data to be erased, if it is necessary for us to retain some of that information we shall ensure that the remaining data is used only when and where it is absolutely necessary.