Privacy policy

At Lucy in the Dream (https://lucyinthedream.com), we are committed to protecting your privacy. This Privacy Policy explains how we collect, use, share, and process your personal information when you interact with our website, products, and services (collectively, “we,” “us,” or “our”). By using our services, you agree to the practices described in this policy.


Collection and Use of Personal Data

Personal data is any information that can directly or indirectly identify you, such as your name, email address, or IP address. It also includes anonymized data linked to identifiable information. Data that is irreversibly anonymized or aggregated, so it cannot be used to identify you, is not considered personal data.

Promoting Safety and Security

We adhere to principles of legality, transparency, and minimal data use, processing only what is necessary for specific purposes. We implement technical and administrative safeguards to protect your data. We use personal data to verify accounts, monitor user activity, and promote safety by detecting fraud, investigating suspicious or illegal activities, and enforcing our terms and policies. This processing is based on our legitimate interest in ensuring the security of our website, products, and services.

Types of Personal Data We Collect

We collect the following types of personal data:

1. Data You Provide

We collect information you voluntarily share when interacting with our services, including:

  • Account Creation: Name, email address, username, and password when you register an account.

  • Purchases: Payment details (e.g., credit/debit card number, expiration date, and CVV), billing address, shipping address, and contact information when you buy products like plush blind boxes, dolls, or keychains.

  • Interactions: Information you provide when you contact us via email, live chat, or customer support forms, or when you participate in surveys, contests, or promotions.

  • Customizations: Preferences or details you submit when customizing products, such as outfit selections for 20 cm dolls.

2. Data Collected Automatically

When you use our website or services, we may collect:

  • Device Information: Device type, unique device identifier, IP address, operating system, and browser type.

  • Usage Data: Pages visited, products viewed, time spent on our site, and navigation patterns.

  • Location Data: Approximate location derived from your IP address or, if enabled, GPS data to enhance your shopping experience (e.g., suggesting local retailers or currency options).

  • Diagnostic Data: Error logs or performance data to improve our website’s functionality.

3. Data from Cookies and Similar Technologies

We use cookies and similar technologies (e.g., web beacons, pixel tags) to collect data about your interactions with our site. See the “Cookies” section below for details.


How We Use Your Personal Data

We use your personal data to provide, improve, and personalize our services, communicate with you, and ensure security. Specific uses include:

1. Providing and Improving Our Services

  • Order Fulfillment: Process and ship your purchases, such as blind boxes, dolls, or keychains.

  • Personalization: Tailor your experience by recommending products based on your browsing or purchase history (e.g., suggesting matching doll outfits).

  • Analytics: Conduct data analysis, research, and audits to enhance our website, products, and services.

  • Contests and Promotions: Administer contests, giveaways, or promotions you enter, using your data as outlined in their specific rules.

2. Communicating with You

With your consent, we may:

  • Send marketing emails about new products, collections, or promotions (e.g., upcoming Honkai: Star Rail keychains).

  • Notify you about account updates, order confirmations, or policy changes.

  • Respond to your inquiries or support requests.

You can opt out of marketing emails by clicking the “unsubscribe” link in our emails or contacting us.

3. Advertising

With your consent, we may:

  • Display targeted ads on our site or third-party platforms based on your interests.

  • Share anonymized data with advertising partners to measure campaign effectiveness.

  • Personalize your experience on third-party sites or apps.

4. Safety and Security

We use data to:

  • Verify user identities and prevent unauthorized access.

  • Detect and investigate fraud, suspicious activities, or violations of our terms.

  • Protect our website and users from cyber threats.


Cookies

What Are Cookies?

Cookies are small text files stored on your browser or device to save information, such as preferences or session data. We also use similar technologies like local storage, pixel tags, and device identifiers, which we collectively refer to as “cookies” in this policy.

How We Use Cookies

We use cookies to:

  • Essential Functions: Enable core website features, like maintaining your shopping cart or login session.

  • Personalization: Remember your preferences, such as language or currency settings.

  • Analytics: Track site usage (e.g., via Google Analytics) to understand user behavior and improve our services.

  • Advertising: Deliver relevant ads and measure their performance.

  • Security: Detect and prevent fraudulent activities.

You can manage cookie preferences through your browser settings, but disabling cookies may limit website functionality.


Sharing and Disclosure of Personal Data

We share personal data only as necessary to provide our services or comply with legal obligations. We do not sell your personal data to third parties for their marketing purposes without your explicit consent.

1. Service Providers

We share data with trusted partners who help us operate our business, such as:

  • Payment Processors: To securely process your payments (e.g., Stripe, PayPal).

  • Shipping Partners: To deliver your orders (e.g., DHL, USPS).

  • IT Providers: To host our website, store data, or manage customer support tools.

  • Marketing Partners: To send emails or run ad campaigns, only with your consent.

These partners are contractually obligated to protect your data and use it only for the services they provide to us.

2. Business Transfers

We may share data in the event of a merger, acquisition, reorganization, or sale of our business assets, ensuring the receiving party adheres to this policy.

3. Legal Obligations

We may disclose data if required by:

  • Law, court orders, or government requests.

  • Investigations related to fraud, security, or public safety.

  • Efforts to enforce our terms or protect our rights, users, or operations.

4. Affiliates

We may share data with our affiliated companies to provide consistent services or improve our offerings.


Data Storage, Transfer, and Processing

Your data is stored securely on servers managed by us or our service providers. As a global business, we may transfer data to countries outside your region, including for processing by our partners. We ensure these transfers comply with applicable data protection laws, such as:

GDPR Compliance (EEA Residents)

If you reside in the European Economic Area (EEA), our data processing is justified under:

  • Consent: Where you explicitly agree (e.g., for marketing emails), per GDPR Article 6(1)(a).

  • Contract: To fulfill orders or provide services you request, per GDPR Article 6(1)(b).

  • Legitimate Interests: For security, fraud prevention, or service improvement, per GDPR Article 6(1)(f).

We use safeguards like Standard Contractual Clauses for international data transfers.


Children’s Privacy

Our website and services are designed for adults and are not intended for children under 16. We do not knowingly collect personal data from children under 16. If we discover such data has been collected, we will delete it promptly. If you believe a child under 16 has provided us with data, please contact us immediately.


Your Rights

You have the following rights regarding your personal data, subject to applicable laws:

  • Access: Request a copy of the data we hold about you.

  • Correction: Update or correct inaccurate or incomplete data.

  • Deletion: Request deletion of your data, unless we are required to retain it.

  • Restriction: Limit how we process your data in certain cases.

  • Objection: Object to processing based on legitimate interests (e.g., marketing).

  • Data Portability: Receive your data in a structured, machine-readable format.

To exercise these rights, contact us at [email protected]. We may verify your identity to protect your privacy. We will respond within 30 days or as required by law. If you’re in the EEA, you may also lodge a complaint with your local data protection authority.


Third-Party Websites and Services

Our website may contain links to third-party sites (e.g., social media platforms, payment processors). We are not responsible for their privacy practices or content. Please review their privacy policies before engaging with them.


Data Security and Retention

We use industry-standard security measures, including encryption, firewalls, and access controls, to protect your data from unauthorized access, loss, or misuse. However, no system is 100% secure, and we encourage you to use strong passwords and secure devices.

We retain your data only as long as necessary to:

  • Fulfill the purposes outlined in this policy (e.g., processing your order).

  • Comply with legal obligations (e.g., tax or accounting requirements).

  • Resolve disputes or enforce our terms.

When data is no longer needed, we securely delete or anonymize it.


Changes to This Privacy Policy

We may update this policy to reflect changes in our practices, technologies, or legal requirements. We will notify you of significant changes via email or a notice on our website. Your continued use of our services after the updated policy’s effective date indicates your acceptance of the changes.


Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at:

Email: [email protected]

We’re here to help ensure your privacy is protected while you enjoy our products and services.