Last updated: September 10, 2026

This privacy statement provides information about the processing of personal data by Dream Lounge Furnishing.

Dream Lounge Furnishing recognises that the protection of personal data is important to its customers, partners and other data subjects (hereinafter referred to as data subjects) and is committed to respecting and protecting the privacy of each data subject.

This privacy statement is addressed to you, our customers and partners, and your representatives (employees and other authorised persons who communicate with Dream Lounge Furnishing). It explains how personal data is processed and what rights you and your representatives have.

When processing personal data, Dream Lounge Furnishing complies with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, the Privacy and Electronic Communications (EC Directive) Regulations 2003 (PECR), the guidance of the Information Commissioner’s Office (ICO), and established standards and procedures which ensure that personal data is processed accurately, fairly, lawfully, transparently and securely.

Data controller

The controller of your personal data is:

We have appointed a person responsible for data protection matters, who can be reached using the contact details above.

You provide personal data to Dream Lounge Furnishing on a voluntary basis. We must process it in order to enter into contracts with you, to properly fulfil the obligations we take on towards you, and to meet our other legal obligations. If you do not provide the personal data we ask for, we will not be able to sell to you, deliver to you, or provide the other services you need.

Purposes and lawful bases for processing

Under the UK GDPR we must have a lawful basis for every use we make of your personal data. Ours are as follows:

Purpose Lawful basis
Concluding and performing contracts with customers — taking orders, arranging delivery of furniture, handling returns, exchanges, repairs and warranty claims Performance of a contract (Article 6(1)(b) UK GDPR)
Communicating with the representatives authorised to deal with us on behalf of a business customer or supplier Our legitimate interests in managing our commercial relationships (Article 6(1)(f))
Taking payment and screening transactions for fraud Performance of a contract; our legitimate interests in preventing fraud
Recovering arrears from customers who have not paid Performance of a contract; our legitimate interests in recovering money owed to us
Mandatory accounting and record-keeping for business transactions, including VAT and tax records Compliance with a legal obligation (Article 6(1)(c))
Meeting our obligations under consumer law, including the Consumer Contracts Regulations 2013 and the Consumer Rights Act 2015 Compliance with a legal obligation
Analysing our business operations and keeping statistics Our legitimate interests in analysing and improving our business
Publishing and moderating comments and reviews, and screening them for spam Our legitimate interests in displaying genuine feedback and keeping the website free of spam
Keeping the website secure, diagnosing faults and preventing misuse Our legitimate interests in protecting our website and business
Website analytics and advertising cookies Your consent (Article 6(1)(a)), given through our cookie banner
Sending marketing emails and messages Your consent; or, where you have already bought a similar product from us and did not opt out, our legitimate interests under the “soft opt-in” in Regulation 22 of PECR
Establishing, exercising or defending legal claims Our legitimate interests in protecting our legal position

Where we rely on legitimate interests, we have assessed whether those interests are overridden by your rights and freedoms. You may ask us for details of that assessment at any time.

How and why we collect and use your personal data

Dream Lounge Furnishing collects personal data in the ways described below. This policy sets out what you can expect when we collect personal information about:

  • visitors to our website (https://dreamloungefurnishing.co.uk);
  • people who have contacted us;
  • people who have bought our products;
  • people who leave a comment or review on our website;
  • people who subscribe to our marketing.

Visitors to our website

When you browse our website we automatically collect your IP address, browser type and version, browser user agent string, operating system, device type, language and time zone settings, the pages and products you viewed, the items you added to your basket, and the website or advertisement that referred you to us. This information is collected through our server logs and through cookies, and is used to keep the site secure and to understand how it is used.

Contacting us

Our website provides several ways for you to contact us. We receive, review and respond to all enquiries ourselves. If you contact us through the website you will provide us with your first name, surname, telephone number and email address. If you contact us by email, WhatsApp or telephone, we will process your name, surname, email address or telephone number and the content of the correspondence. Such data is processed in order to answer you and to take steps at your request before entering into a contract. If you do not provide contact information, we will not be able to reply to you.

Please note that our email systems may use tracking or filtering software, and you must ensure that the emails you send us do not contain unlawful content.

If an order results from your enquiry, the electronic record of that order is stored in accordance with the retention periods set out below. If no order results, the enquiry form and correspondence are deleted from our systems, except where a longer period is specified in this policy or required by law.

All personal data you provide when communicating with us is used only for the purposes of dealing with your message and administering and managing our communications. We will not use your personal data in any publication in a way that makes you identifiable without your express consent. We may need to contact you by post, email or telephone, so please tell us about any change to your contact details.

Customers who buy our products

When you place an order we collect your name, billing address, delivery address, email address, telephone number, the items ordered, the order value, and any delivery or access instructions relevant to delivering large furniture items.

Payments are processed by our payment provider. We do not store full card numbers on our systems; we receive confirmation of payment, the payment method, the last four digits of the card and the billing name and address.

If you create an account, we also store your username, email address, an encrypted version of your password, your saved addresses and your order history. You can see, edit or delete most of this information at any time by logging in, although you cannot change your username. Our website administrators can also see and edit that information.

Comments, reviews and media

When you leave a comment or review on our website we collect the information shown in the form, together with your IP address and browser user agent string, which help us detect spam and identify abusive or fraudulent posts. Comments may be checked through an automated spam detection service.

An anonymised string created from your email address (a “hash”) may be provided to the Gravatar service to check whether you use it. The Gravatar privacy policy is available at https://automattic.com/privacy/. After your comment is approved, your profile picture is visible to the public alongside your comment.

Anything you post publicly can be read by anyone, so please do not include order numbers, addresses or payment details in a review — contact us privately instead. If you upload an image to the website, you should remove any embedded location data (EXIF GPS) beforehand, because visitors can download images and extract that data.

Marketing

We send marketing messages only where you have opted in, or where you have bought a similar product from us, were given the opportunity to opt out at the time, and did not take it. Every marketing message contains an unsubscribe link, and you can also opt out by replying to any message or by emailing us. Opting out of marketing does not stop service messages such as order confirmations and delivery updates.

Cookies

Cookies are small files placed on your device. Under PECR we place non-essential cookies only with your consent, which you give through the cookie banner shown when you first visit the site. You can change or withdraw your consent at any time using the cookie settings link on the website, or by blocking and deleting cookies in your browser. Strictly necessary cookies do not require consent, but if you block them the site — including checkout — may not work properly.

  • Strictly necessary cookies keep your basket and checkout session working, record your cookie preferences, and support security and fraud prevention. If you visit our login page we set a temporary cookie to determine whether your browser accepts cookies; it contains no personal data and is discarded when you close your browser. When you log in we set cookies to save your login details and screen display choices — login cookies last two days and display preference cookies last one year, and if you select “Remember Me” your login persists for two weeks. Logging out removes them. If you edit or publish an article, an additional cookie is saved which contains no personal data and simply records the post ID; it expires after one day.
  • Functional cookies are set only if you choose to save your name, email address and website when leaving a comment, so that you do not have to enter them again. These last one year.
  • Analytics cookies help us understand how the website is used so we can improve it. We use Google Analytics 4 for this purpose.
  • Advertising cookies allow us and our advertising partners to show you relevant adverts elsewhere and measure their performance. Our advertising partners are Meta (Facebook and Instagram) and Google Ads.

Embedded content from other websites

Pages on this site may include embedded content such as videos, images, maps, delivery trackers or review widgets. Embedded content from another website behaves exactly as though you had visited that website directly. Those websites may collect data about you, use cookies, embed additional third-party tracking and monitor your interaction with the embedded content, including where you have an account and are logged in to that website. We block non-essential embedded content until you have given cookie consent.

Who we share your personal data with

We do not sell your personal data. We do not normally disclose it, but in order to ensure business continuity, the proper provision of our services and the delivery of goods, we disclose information about you to our own staff — administration, managers and delivery team — where reasonably necessary for the purposes set out in this policy, and to the following categories of recipient:

  • Payment providers who process payments and carry out fraud checks. [e.g. Stripe, PayPal, Klarna]
  • Delivery and logistics partners who need your name, address and telephone number to deliver your furniture or collect returns. [e.g. your two-person delivery partner or courier]
  • Website hosting and IT providers who store our website data and provide technical support. [e.g. hosting company]
  • Email and marketing platforms used to send order confirmations and, where you have opted in, marketing messages. [e.g. Mailchimp, Klaviyo]
  • Analytics and advertising providers, where you have consented to those cookies.
  • Review platforms that invite and publish customer reviews. [e.g. Trustpilot, Google Reviews]
  • Finance providers, if you apply to spread the cost of a purchase. They act as separate controllers and have their own privacy policies.
  • Professional advisers such as accountants, insurers and solicitors.
  • A buyer or successor, if our business or its assets are sold or reorganised.

Where these organisations act as our processors, we have written contracts in place, as required by Article 28 of the UK GDPR, obliging them to keep your data secure and to use it only on our instructions.

In certain circumstances we may also be required to transfer personal data where:

  • we must disclose information in accordance with the law, including disclosures to HM Revenue & Customs and to law enforcement authorities for the prevention and detection of crime;
  • we must disclose personal data in connection with legal proceedings or in order to obtain legal advice, or disclosure is necessary to establish, exercise or defend our rights;
  • information must be disclosed to protect our interests or the interests of others, for example to prevent fraud;
  • information must be disclosed to protect your vital interests, for example if you become unwell during a delivery and we have to seek medical assistance.

If you request a password reset, your IP address will be included in the reset email.

Transfers outside the United Kingdom

Some of our service providers are based outside the United Kingdom or store data on servers outside the UK. Where personal data is transferred abroad, we ensure that one of the following safeguards applies:

  • the destination country is covered by UK adequacy regulations; or
  • the transfer is made under the UK International Data Transfer Agreement (IDTA), or the UK Addendum to the EU Standard Contractual Clauses, supported by a transfer risk assessment; or
  • the recipient is certified under the UK Extension to the EU–US Data Privacy Framework.

You can request a copy of the safeguards we rely on by emailing support@dreamloungefurnishing.co.uk.

How long we keep your personal data

Dream Lounge Furnishing stores personal data for no longer than is required by the purposes of the processing, or provided for by law, or until the limitation period for any related claims expires.

Type of data Retention period
Order, invoice and payment records 6 years from the end of the financial year in which the transaction took place, to meet HMRC and accounting requirements
Customer account data While your account remains open, and for [24] months after your last activity, after which it is deleted or anonymised
Delivery, repair and warranty records For the duration of the guarantee, plus 6 years to allow for claims under the Limitation Act 1980
Enquiries that do not lead to a purchase [24] months from the last contact
Marketing consents and opt-outs Until you unsubscribe; a minimal record of your objection is kept indefinitely so that we do not contact you again in error
Comments and reviews, with their metadata For as long as the review remains published, so that follow-up comments can be recognised and approved automatically; you may ask us to remove them at any time
Server logs and security records [12] months
Complaints [6] years from resolution

Security

We apply appropriate technical and organisational measures to protect your personal data, including encryption of the website using TLS, encrypted storage of passwords, access restricted to staff who need it, and regular software updates. We have procedures for dealing with suspected personal data breaches and will notify you and the ICO where we are legally required to do so. No transmission over the internet is completely secure, so please keep your account password confidential.

Your rights

You have the right to request that Dream Lounge Furnishing grants you access to the personal data we process about you, to request its rectification or erasure, to restrict the processing of the data, to object to the processing, and to data portability. Where we rely on your consent, you also have the right to withdraw that consent at any time, without affecting the lawfulness of processing carried out before you withdrew it.

Where Dream Lounge Furnishing processes your personal data on the basis of a legitimate interest, you have the right to object at any time to that processing, on grounds relating to your particular situation. You may object to direct marketing at any time and we must stop.

The right to erasure, the right to restrict processing, the right to data portability and the right to object are not absolute, and the law sets additional conditions for their exercise.

The right to erasure

You have the right to ask us to delete your personal data. Please note that we will only be able to comply with such a request where:

  • your personal data is no longer needed for the purposes for which it was collected — for example, we need your data in order to reply to your messages or to complete your delivery;
  • we are not required by law to collect, store or continue to use the data — for example, we must keep transaction records for tax purposes;
  • the data is not needed to establish, exercise or defend a legal claim, such as in legal proceedings.

The right to restrict processing

You have the right to ask us to restrict the processing of your personal data:

  • for the period needed to verify the accuracy of your personal data, where you have raised a concern about its accuracy;
  • where our collection, storage or use of your personal data is unlawful but you decide not to request its deletion;
  • where we no longer need your personal data but you need it in order to establish, exercise or defend a legal claim;
  • for the period needed to determine whether we have compelling legitimate grounds to continue processing, where you have exercised your right to object.

The right to data portability

You have the right to receive the data you provided to us on the basis of your consent or for the performance of a contract, in a structured, commonly used and machine-readable format. If you exercise this right, we will provide a copy of that data to you or, where technically feasible, transmit it to another organisation at your request.

The right to object

You have the right to object to our use of your personal data where we use it in reliance on our legitimate interests and we cannot demonstrate compelling legitimate grounds to continue, and at any time where we use it for direct marketing.

Making a request

To exercise any of these rights, email support@dreamloungefurnishing.co.uk or call +44 7423 505757. Exercising your rights is free of charge. We may ask for information to confirm your identity. We will respond within one month, and will tell you if we need to extend that period by up to two further months because your request is complex or because you have made a number of requests.

Automated decision-making

We do not take decisions about you based solely on automated processing which produce legal effects concerning you or similarly significantly affect you. Our payment provider may carry out automated fraud screening on transactions; if a payment is declined on that basis, you can contact us and ask for the decision to be reviewed by a person.

Children

Our website and products are intended for adults. We do not knowingly collect personal data from children under 18. If you believe that a child has provided us with personal data, please contact us and we will delete it.

Links to other websites

Our website may link to third-party websites, plug-ins and applications. Following those links may allow third parties to collect or share data about you. We do not control those websites and are not responsible for their privacy practices, so please read their privacy policies before providing any information.

Complaints

You are important to us, and so is the protection of your personal data. We apply strict standards to the collection and use of personal data, so we take any complaint about the use of your personal data very seriously. Please tell us about any problem.

When you contact us to make a complaint, we use your personal data only to investigate and respond to the complaint and to assess the quality of the services we provide. If we receive a complaint about a member of our team, we may need to disclose your identity to that person. You can tell us that you do not want your identity disclosed, and we will do our best to comply, although it is not always possible to deal with a complaint anonymously.

If you are dissatisfied with our response, you have the right to lodge a complaint with the Information Commissioner’s Office, the UK’s supervisory authority for data protection:

We would, however, appreciate the chance to deal with your concerns before you approach the ICO.

Changes to this privacy statement

We review this statement regularly and may update it to reflect changes in how we work or in the law. The date at the top shows when it was last revised. Where a change is significant, we will make that clear on this page and, where appropriate, tell you directly.

Contact us