Last updated: 1 November 2025

This Privacy Policy explains how Yz Dream (“Yz Dream”, “we”, “us”, “our”) collects, uses, and shares information when you visit our website and shop, create an account, or purchase and use the Yz Dream – Digital Car Management App (the “Service”).

We operate from Italy and provide digital access only (no physical shipping). For EEA/UK users, Yz Dream is the data controller for the processing described here.

Contact: info@dreamzshop.org

1) What we collect

When we say “personal data” we mean information that identifies or can reasonably be linked to a person. We collect:

A. Information you provide

  • Account & profile: name, email, password (hashed), company/role, country/region.
  • Orders & billing: billing name and address, VAT/Tax ID, email, phone (optional), order notes.
  • Support: messages, attachments, feedback.
  • App content you enter: vehicle records, photos, notes, service history, customer/buyer names and contact details, invoices and reports you generate.

B. Information collected automatically

  • Device & log data: IP address, browser/OS, referring URL, timestamps, pages viewed.
  • Usage analytics: features used, session identifiers, license/device IDs (to enforce device limits), error logs and performance metrics.
  • Cookies & similar tech: to keep you logged in, remember cart contents, secure checkout, and measure basic usage (see Cookies).

C. From service providers/third parties

  • Payments (WooPayments/Stripe): payment status, card brand and last 4 digits, country, risk/fraud signals. We never receive full card numbers or CVV.
  • Email/analytics providers: delivery and engagement events (open/click), aggregated traffic statistics.

We do not collect sensitive categories unless you provide them (and we do not ask you to).

2) How we use data (and legal bases under GDPR)

  • Provide and operate the Service (contract): create/manage accounts, deliver digital access, enforce device limits, process orders and payments, provide support.
  • Billing, tax & compliance (legal obligation): invoicing, VAT/GST records, accounting/audit.
  • Security & fraud prevention (legitimate interests): authenticate access, monitor abuse, prevent fraudulent transactions.
  • Improve the Service (legitimate interests / consent where required): diagnostics, analytics, product research and quality.
  • Communications (contract/legitimate interests): receipts, service notices (e.g., access expiry), responses to tickets.
  • Marketing (optional) (consent/legitimate interests): newsletters or offers. You may opt out at any time.

We do not sell personal data.

3) Cookies

We use cookies and similar technologies for:

  • Strictly necessary: login/session, cart/checkout, license validation, security.
  • Performance/analytics (optional): to understand how the Service is used and improve it.
  • Functional: remember preferences (language, region).
  • Fraud prevention: tokens set by our payment processor.

You can manage cookies via our banner and your browser settings. Blocking essential cookies may prevent login or checkout.

4) How we share information

We share data only with trusted processors that help us run Yz Dream, under contracts that require them to protect your data and act only on our instructions:

  • Hosting & infrastructure (secure cloud hosting and backups)
  • Payments: WooPayments/Stripe (card processing and fraud screening)
  • Email & transactional messaging (order receipts, support replies)
  • Analytics (optional) (privacy-respecting usage stats)
  • Error monitoring/performance (diagnostics to fix issues)
  • Support tools (if used) (helpdesk or chat)

We may disclose information when required by law, to defend our rights, or in connection with a merger/reorganization.

5) International transfers

Some providers are located outside the EEA/UK (e.g., in the United States). When data is transferred internationally, we rely on Standard Contractual Clauses (SCCs) or other approved safeguards. You can request details at info@dreamzshop.org.

6) Retention

  • Account & in-app content: kept while your account is active. Upon verified request to delete, we delete or anonymize within 30 days, unless we must retain data for legal/security reasons.
  • Orders/invoices & tax records: retained for 10 years (or longer if law requires).
  • Support tickets: up to 3 years after resolution.
  • Logs/analytics: typically 12–24 months in aggregated form.

7) Your rights

EEA/UK (GDPR)

You may access, rectify, erase, restrict, object to processing, and port your data; and withdraw consent at any time. You can lodge a complaint with your local Data Protection Authority.

California (CCPA/CPRA)

Residents may access, correct, delete personal information and opt-out of “sale”/“sharing” (we do not sell). We do not use or disclose sensitive personal information for purposes requiring a right to limit.

How to exercise rights: email info@dreamzshop.org from the address linked to your account. We may ask for information to verify your identity. You may designate an authorized agent as allowed by law.

We do not respond to non-standard “Do Not Track” signals; if you use a supported Global Privacy Control signal, we will treat it as an opt-out for that browser where applicable by law.

8) Security

We use appropriate technical and organizational measures, including:

  • TLS/HTTPS encryption in transit
  • Password hashing and role-based access controls
  • Server hardening, firewalls, and regular updates
  • Least-privilege access for staff and vendors
  • Monitoring and incident response

No method is 100% secure; we continuously improve safeguards.

9) Children

Yz Dream is not intended for children under 16. We do not knowingly collect their data. If you believe a child has provided information, contact info@dreamzshop.org and we will delete it.

10) Marketing preferences

Transactional emails (receipts, service notices) are required for your account.
Marketing emails are optional—unsubscribe at any time via the link in the email or by contacting info@dreamzshop.org. We never use the content you store in the app (your vehicle/customer records) for advertising.

11) Your content in the app

You control the data you add (vehicle inventory, buyers, documents). We process it only to provide the Service and according to your instructions. You are responsible for having a lawful basis to store personal data about your customers/contacts in Yz Dream.

12) Third-party links

Our Site may link to third-party websites or services with their own privacy practices. Review their policies before providing data; our Policy does not apply to them.

13) Changes to this Policy

We may update this Policy from time to time. We will post updates on this page and revise the “Last updated” date above. For material changes, we will notify you by email or an in-app notice.

14) Contact us

Yz Dream
Email: info@dreamzshop.org
(If you need our registered postal address for privacy or invoicing purposes, email us and we will provide it.)