PRIVACY POLICY

Effective Date: 06/11/2025

Last Updated: 06/11/2025

1.      WHO WE ARE

dreams&cuddles ("we", "our", or "us") is a baby sleep consulting business is a baby sleep consulting service operated by IVM Partners Ltd, registered in Bulgaria. IVM Partners Ltd acts as the data controller responsible for processing your personal information under this Privacy Policy.

We are committed to protecting your privacy and processing your personal data responsibly, in accordance with applicable data protection laws, including the UK GDPR, EU GDPR and other privacy regulations.

2.      WHAT DATA WE COLLECT

We may collect and process the following types of personal data:

a) Contact Information

  • Name

  • Email address

  • Phone number

b) Client Information (during intake)

  • Child’s name or nickname (optional)

  • Child’s age, date of birth

  • Feeding habits

  • Sleep patterns

  • Health concerns (including medications)

  • Developmental or medical background

  • Family context (e.g. parenting style, goals, challenges)

  • Any voluntarily disclosed mental health information (e.g. PPA, PPD)

c) Payment Information

  • Payment is processed via Stripe. We do not store your card details.

d) Communication Records

  • Emails, messages, feedback, consultations notes

e) Website Usage Data

  • IP address, browser type, pages visited, time of visit (via analytics)

  • Cookies and tracking technologies (see Section 7)

3.      WHY WE COLLECT YOUR DATA (LEGAL BASIS)

We process your data for the following purposes:

  • To deliver the sleep consulting services you purchase (contractual basis)

  • To manage bookings, payments and communication (contractual basis)

  • To collect intake information for personalized sleep plans (consent)

  • To send newsletters and updates (consent)

  • To maintain business records (legitimate interest)

  • To improve our services and internal training (legitimate interest)

  • To comply with legal obligations

4.      SENSITIVE DATA

You may choose to provide health-related information concerning you or your child.
We process such data only with your explicit consent and solely to deliver safe, tailored sleep guidance.

You may withdraw consent for the processing of sensitive data at any time by contacting us.

5.      HOW WE STORE YOUR DATA

  • Intake forms: stored securely on Google Workspace (encrypted)

  • Bookings: managed via Calendly

  • Emails & records: stored securely in email and CRM systems

  • Payments: processed via Stripe (we do not store full card details)

6.      DATA RETENTION

  • Identifiable client data (names, emails, contact info): retained for up to 5 years after services conclude.

  • Sleep logs, anonymized intake data and case notes (without identifiers): may be retained indefinitely for professional development, research, and internal training.

  • You may request deletion of identifiable data at any time (see Section 9).

7.      COOKIES & TRACKING

Our website uses cookies and analytics tools to:

  • Analyse traffic and website usage

  • Improve site functionality

  • Facilitate potential advertising (if applicable in future)

We may use third-party services such as:

  • Google Analytics

  • Facebook Pixel / Meta Ads

  • Other marketing platforms

You will be informed via a cookie banner and may manage your preferences at any time.

8.      DATA SHARING

We do not sell your personal data.

We may share data with trusted service providers who help us operate, such as:

  • Stripe (payments)

  • Google Workspace (email, storage)

  • Calendly (scheduling)

  • Newsletter providers (email marketing)

  • Professional advisors (accounting, legal)

All processors are contractually bound to GDPR-compliant data processing agreements.

9.      YOUR RIGHTS

Under applicable data protection laws, you have the right to:

  • Access your data

  • Rectify inaccurate data

  • Request data erasure ("right to be forgotten")

  • Restrict processing

  • Object to processing

  • Withdraw consent at any time

  • Data portability (if applicable)

  • Lodge a complaint with the relevant data protection authority

To exercise any rights, contact: [Insert Contact Email].

10. INTERNATIONAL DATA TRANSFERS

Some service providers may store data outside the UK or EU. When transferring data internationally, we ensure appropriate safeguards, such as Standard Contractual Clauses, are in place.

11. CHILDREN'S PRIVACY

We do not knowingly collect data directly from children under 18. Any child-related information is provided by parents or legal guardians solely for the purpose of consulting services.

12. CHANGES TO THIS POLICY

We may update this Privacy Policy as our business evolves. Changes will be posted on our website, and we encourage you to review this page periodically.

13. CONTACT INFORMATION

If you have questions about this Privacy Policy, please contact:

dreams&cuddles

Email: iwant@dreamsandcuddles.com

Registered in: Bulgaria

Registered business address: Available upon request