Your rights in the EU and the UK · Last updated 24/09/2026

If you live in the European Economic Area, the United Kingdom or Switzerland, the law gives you specific rights over the data we hold about you. This page says what they are and exactly how to use them.

Who the controller is

Controller: E-Dream LLC

Data contact: contact@e-dreamsllc.com

What we hold, and why we are allowed to

- Your name and email, to deliver what you bought and to answer you — lawful basis: performance of a contract

- Your purchase record, being the product, amount and date — lawful basis: legal obligation, tax and accounting law

- Site and security logs, being IP address, browser and pages opened — lawful basis: legitimate interests, keeping the site working and stopping fraudulent payments

- Marketing email — lawful basis: consent, withdrawable in one click

- All advertising measurement, browser and server alike — lawful basis: consent, withdrawable at any time

We do not use automated decision-making that produces legal effects, and we do not sell personal data.

Advertising measurement, in detail

We report your actions on this site to three advertising platforms: Meta, Google and Pinterest. Each report may include your IP address, your browser user agent, advertising cookie identifiers, the value of a purchase, and your email address and name in irreversibly hashed form.

Hashed data is still personal data under the GDPR. We do not claim otherwise, and it is covered by every right listed below.

Two channels, one consent

We send each event twice — once from your browser, once from our own server — so that the measurement survives ad blockers and browser restrictions.

The server channel is subject to your consent in exactly the same way as the browser channel. Moving measurement code onto a server changes where it runs, not what it does. We do not use the technique to continue tracking someone who has declined, and if you withdraw consent both channels stop.

Your rights

- Access — a copy of everything we hold about you.

- Rectification — anything wrong put right.

- Erasure — deletion, except records tax law requires us to keep.

- Restriction — tell us to hold the data but stop using it.

- Portability — your data in a machine-readable file, or sent to someone else.

- Objection — object to processing based on legitimate interests, and to direct marketing at any time.

- Withdraw consent — at any moment, without affecting anything done before you withdrew it.

Specifically about advertising

You may withdraw consent to advertising measurement without giving up anything else. The site works normally, your purchase and your downloads are unaffected, and you keep every other right on this page. Both the browser and the server channel stop.

You may also ask us to tell the platforms to delete what they hold about you, and we will pass that request on. Each platform runs its own process and we cannot guarantee their timing, only that we forward it.

How to use them

Write to contact@e-dreamsllc.com with GDPR in the subject line and say which right you want to use. Send it from the address you bought with, so we can be certain it is you.

We answer within one month. It is free. If a request is unusually complex we may take up to two further months, and we will tell you within the first month if that happens.

## Transfers outside the EEA and the UK

Our providers operate in the United States, so your data is transferred there. Those transfers rely on the European Commission's Standard Contractual Clauses, the UK International Data Transfer Addendum where the UK GDPR applies, or another approved safeguard. Ask us and we will tell you which one applies to a given provider.

Processors we use

- systeme.io — site, checkout and email hosting

- Stripe — payment processing

- Google — Tag Manager and Google Ads

- Stape — server-side measurement hosting

- Meta — Facebook and Instagram advertising

- Pinterest — Pinterest advertising

Each is bound by a written data processing agreement and may use your data only on our instructions.

Cookies and consent

Cookies strictly necessary to the checkout load without consent, because the purchase cannot work otherwise. That is `__stripe_mid` and the countdown cookie set by systeme.io.

Every advertising cookie loads only after you agree, and you can change your mind at any time. Those are:

- `_fbp` and `_fbc` — Meta

- `_gcl_au` — Google

- `_pin_unauth` — Pinterest

- `_dcid` — Stape

Declining does not limit anything you can do or buy on this site.

If you are not satisfied

Tell us first — most things are a misunderstanding we can fix the same day. You also have the right to complain directly to your data protection authority: in the UK the Information Commissioner's Office at ico.org.uk, and in the EEA the authority for the country you live in. You do not need our permission, and you do not have to come to us first.

Breaches

If a breach occurs that is likely to put your rights at risk, we will notify the relevant supervisory authority within 72 hours of becoming aware of it, and tell you directly where the law requires it.