Effective date: 31/08/2024

My Tree of Dreams ("we", "us", "our") is committed to protecting and respecting your privacy. This Privacy Policy, together with any other documents referred to herein, sets out the basis on which the personal data collected from you, or that you provide to us, will be processed. Please read the following carefully to understand our practices regarding your personal data and how we will treat it.

1. Data controller

For the purposes of the General Data Protection Regulation ("GDPR") and relevant Spanish data protection laws, Payhip Limited is the data controller for the personal data collected directly through the Payhip platform. My Tree of Dreams acts as the data controller only for the limited personal data that is provided to us by Payhip for the purpose of fulfilling your order, such as your email address and order details.

2. Legal basis for processing

Your data is processed under the following legal frameworks:

• GDPR (EU Regulation 2016/679)
• LOPD GDD (Spanish Organic Law 3/2018 on the Protection of Personal Data and the Guarantee of Digital Rights)
• LSSI (Law 34/2002 on Information Society Services and Electronic Commerce)

These legal frameworks ensure that your personal data is processed lawfully, fairly, and transparently.

3. Information we collect

We collect and process the following data about you:

• Personal data provided by you: This includes information such as your name, email address, and purchase details when you make a purchase through our store hosted on Payhip.
• Data collected by Payhip: Payhip collects additional data necessary for processing transactions and delivering digital products, such as IP addresses and payment details. For details on how Payhip collects and processes this data, please refer to Payhip’s Privacy Policy.

We do not collect or process any additional personal data beyond what is provided by Payhip.

4. Lawful basis for processing

We rely on the following legal bases for processing your personal data:

• Contractual obligation: To fulfill our obligations under the contract when you purchase a product from our store.
• Legal obligation: To comply with legal requirements under Spanish law, such as tax obligations.
• Legitimate interests: To manage and fulfill your orders, provided these interests are not overridden by your privacy rights.

5. Purposes of processing

Your personal data is processed for the following purposes:

• To fulfill orders: We use your personal data to process payments, deliver digital products, and communicate with you regarding your order.
• Customer support: To provide support and respond to any queries you may have.
• Legal compliance: To meet obligations under applicable laws and regulations, particularly Spanish laws related to data protection and tax compliance.

6. Disclosure of your information

We may disclose your personal data to the following third parties:

• Payhip Limited: As our platform provider, Payhip processes your personal data for the purposes of fulfilling orders and managing transactions. Payhip’s privacy practices are detailed in their Privacy Policy.
• Payment processors: Your payment information is processed by Payhip through third-party processors like PayPal and Stripe. We do not store your payment information. For details on how these processors handle your data, please refer to their respective privacy policies.
• Legal obligations: We may disclose your information if required by law, particularly under Spanish regulations, or to enforce our rights, property, or safety.

7. International data transfers

Your personal data may be transferred to, and stored at, a destination outside the European Economic Area ("EEA"). Payhip ensures that such transfers are protected by appropriate safeguards, such as standard contractual clauses or participation in recognized data protection frameworks. For more information, please refer to Payhip's Privacy Policy.

8. Data retention

We will retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements under Spanish law. Specifically:

• Transaction data: Retained for at least 5 years to comply with tax and legal obligations.

9. Security

We take appropriate measures to ensure that your personal data is secure. However, we rely on Payhip to implement technical and organizational measures to protect your data on their platform. Despite our efforts, the transmission of information via the internet is not completely secure, and we cannot guarantee the security of your data transmitted to our website.

10. Your rights

Under the GDPR and Spanish data protection laws, you have the following rights:

• Access: Request access to the personal data we hold about you.
• Rectification: Request correction of any inaccurate or incomplete data.
• Erasure: Request the deletion of your personal data under certain conditions.
• Restriction: Request that we limit the processing of your personal data under certain circumstances.
• Portability: Request the transfer of your personal data to another controller in a structured, commonly used, and machine-readable format.
• Objection: Object to the processing of your personal data where we are relying on a legitimate interest.

To exercise these rights, please contact us at mastreeofdreams@gmail.com. You can also contact Payhip directly for any data they control.

11. Cookies

We do not directly use cookies; however, cookies may be used by Payhip to enhance your experience on their platform. For more information on how Payhip uses cookies, please refer to their Cookies Policy.

12. Automated decision-making

We do not engage in automated decision-making or profiling that produces legal effects or significantly affects you.

13. Changes to this privacy policy

We reserve the right to update this Privacy Policy from time to time. Any changes we make will be posted on this page with an updated effective date.

14. Contact information

All questions, comments, and requests regarding this Privacy Policy should be addressed to mastreeofdreams@gmail.com.