Privacy Policy

Data controller

The controller of your personal data is BedDream. For questions about your personal data, write to office@beddream.eu.

What we collect

We collect only what you enter in the forms on this site:

• When you order: first and last name, phone, email, the delivery address with any extra details or the Econt office you chose, and the products in the order.
• When you order by phone: only the phone number and the products.
• When you create an account: first and last name, email, phone (optional), password, and your choice whether you want offers and news by email (off by default), with the date you agreed. The account also holds the delivery addresses you save and your order history.
• When you ask to be told about a sold-out product: only the email address and the product you asked about.
• On every visit the server receives your IP address and browser details, as with any website.

Purpose and legal basis

• To fulfil and deliver your order and contact you about it — contract (GDPR Art. 6(1)(b)).
• To run your account and the orders in it — contract (Art. 6(1)(b)).
• Offers and news by email, only if you asked for them with a box that is empty by default — consent (Art. 6(1)(a)). You can withdraw it at any time in your account, at “Offers and news” (Change, untick the box and save), or by writing to us; withdrawing does not affect the emails about your orders.
• To send you one email when the product you asked about is available again — at your request (Art. 6(1)(a)). The address is not used for marketing and you can ask us to delete it.
• To keep the accounting records for orders — legal obligation (Art. 6(1)(c)).
• To protect the site and the shop from abuse — legitimate interest (Art. 6(1)(f)).

How long we keep it

We keep data for as long as the purpose it was collected for requires, and as long as the law requires.

• Account: for as long as you have it. When you ask us to delete it, we delete it together with the saved addresses and your email choice; data the law obliges us to keep (see below) stays, detached from the account as far as possible.
• Orders: the name, phone, email and delivery address recorded with an order are part of the accounting document and are kept as long as the accounting law requires (as a rule up to 10 years).
• Offer requests: the name, email, phone, company, message and files are kept while we handle the request and until the period stated below ends; then we delete them. If the request becomes an order, the data is kept as order data.

Who receives it

We do not sell your data or use it for advertising. It goes only to:

• Econt Express — the courier that delivers the parcel: your name, phone and delivery address or office.
• Econt — when you choose delivery to an office, your browser loads the office list directly from Econt’s site (ee.econt.com), which therefore sees your IP address.
• The provider whose servers run this site.
• Public authorities — only where the law requires it.

Cookies and browser storage

This site uses no cookies. In your browser’s storage we keep only:

• a cart identifier, so the cart remembers what you added;
• a marker for a phone order you just sent, so it is not sent twice (cleared when you close the tab);
• the language and theme you chose;
• your answer to the cookie notice.

We have no cookies for analytics, advertising or tracking. Fonts and images load from our own site, and the map is a plain link to Google Maps, not an embedded map.

You can change your choice at any time from “Cookie settings” in the footer.

Your rights

You have the right:

• to know what data we hold about you and to get a copy;
• to correct inaccurate or incomplete data;
• to ask us to erase your data when it is no longer needed and the law does not require us to keep it;
• to ask us to restrict processing;
• to receive your data in a machine-readable format;
• to object to processing based on legitimate interest;
• to withdraw your consent to email offers at any time;
• to lodge a complaint with the Commission for Personal Data Protection (CPDP) — the supervisory authority in Bulgaria, www.cpdp.bg.

To use any of these rights, write to us or call. We reply within one month.

Deleting your account: for now an account cannot be deleted by itself from the “Account” page. Write to us or call from the email address of the account and we will delete it within one month. Orders the law obliges us to keep remain as accounting records.