Who we are and where we process data.
The DreamRoot website is hosted in the USA. DreamRoot may process personal information on our servers in many countries around the world. We may process your personal information on a server located outside the country where you live.
Information we collect.
To complete and record transactions, inform and serve you in connection with DreamRoot activities and initiatives and better understand your needs and interests, DreamRoot collects and uses appropriate personal information, having first obtained any required consents. [[DreamRoot also files reports along with required filings with data protection authorities, when applicable.]] For example, when you order products or services, request information, subscribe to marketing or support materials, register yourself as an DreamRoot supporter or apply for a job at DreamRoot, we will ask you to provide personal information to complete these transactions and properly record and manage that relationship with you.
The types of personal information you provide to us on these pages may include contact information such as your name, address, telephone number, email address, financial information such as your credit card number and other unique information such as user IDs, billing and transaction information, product and service preferences and contact preferences.
How your information is used.
The information DreamRoot collects to understand your needs and interests helps us deliver a consistent and personalized experience.
For example, DreamRoot may use your information to
- assist you in completing a transaction or order
- notify you of changes or improvement to our services
- process a grant or job application
- send you communications which you have consented to, including newsletters and information about campaigns, fundraising and support activities, new services or initiatives and promotions of our goods and services
- provide service and support
- administer your account
- to carry out our obligations arising from any contracts entered into with you
- to comply with applicable data protection laws, including filing personal data breach reports with appropriate supervisory authorities or for other purposes disclosed to you at the time we collect your information, or pursuant to your consent, if applicable. For instance, a testimonial posted on a DreamRoot website is only posted with the express permission of the individual or organization who provided it.
The personal information collected when you make a contribution or purchase items by credit card is kept for the purposes of tracking your order and to provide a receipt of the transaction. Credit card information is used only for payment processing and fraud prevention. Credit card information and other sensitive personal information required to process a credit decision is not used for any other purpose by our financial services providers or DreamRoot and will not be kept longer than necessary for providing the services, unless you ask us to retain your credit card information for future purchases.
Consent and privacy preferences
DreamRoot will give you the opportunity to choose your privacy preferences regarding the communications we send. You can update your choices or stop us sending you these communications at any time by contacting us on firstname.lastname@example.org.
You may elect not to receive future communications from DreamRoot, or to discontinue use of our products or services. If you are a registered user, please send an email to request to correct/delete/deactivate with your name, email address, and your account to email@example.com.
You may also opt out of receiving communications by selecting the email “opt out” or “unsubscribe” link, or follow the opt-out instructions included in each subscription communication.
Please be aware that when you opt out of receiving certain subscription communications, it may affect the services you have chosen to receive from us.
Information we share.
We do not share personal information with companies, organizations and individuals outside of DreamRoot unless one of the following circumstances apply:
With your consent
- We will share personal information with companies, organizations or individuals outside of DreamRoot when we have your consent to do so.
For external processing
For legal reasons
- We will share personal information with companies, organizations or individuals outside of DreamRoot if we have a good-faith belief that access, use, preservation or disclosure of the information is reasonably necessary to:
- meet any applicable law, regulation, legal process or enforceable governmental request.
- respond to duly authorized information requests of police and governmental authorities
- comply with any applicable law, regulation, legal process or enforceable governmental request.
- enforce applicable Terms of Service, including investigation of potential violations.
- help prevent fraud or to enforce or protect the rights and properties of DreamRoot or entities owned, controlled by or affiliated with DreamRoot
- protect the personal safety of DreamRoot employees, staff, contractors or other third parties on property occupied by DreamRoot or
- to protect your safety or the safety of others.
We may share aggregated, non-personally identifiable information publicly and with our partners – like publishers, advertisers or connected sites. Zip code is one example of non-personally identifiable information. For example, we may share information publicly to show trends about the general use of our services.
DreamRoot reserves the right, in its sole discretion, to reject, refuse to post or remove any posting or communication (including email) by you, or to restrict, suspend, or terminate your access to all or any part of the Website at any time, for any or no reason, with or without prior notice, and without liability.
Automatic Data Collection Tools.
In addition to the information you provide, DreamRoot may also collect information during your visit to our website through our Automatic Data Collection Tools, which include Web beacons, cookies, embedded Web links, and other commonly used information gathering tools. These tools collect certain standard information that your browser sends to our website such as your browser type and language, access times and the address of the website from which you arrived at an DreamRoot website.
As part of its routine operations DreamRoot also collects information from commercially available sources that it deems credible. Such information may include your name, address, email address, and demographic data. The information DreamRoot collects from its commercial sources may be used along with the information DreamRoot collects when you visit a DreamRoot website. For example, DreamRoot may compare the geographic information acquired from commercial sources with the IP address collected by Automatic Data Collection Tools to derive your general geographic area.
On occasion, DreamRoot may provide you the opportunity to participate in contests or surveys on our site. If you participate, we will request certain personal information from you. Participation in these surveys or contests is completely voluntary and you therefore have a choice whether or not to disclose this information. The requested information typically includes contact information (such as name and shipping address), and demographic information (such as your post code or zip code).
Keeping your personal information secure.
DreamRoot takes seriously the trust you place in us. We follow generally accepted industry standards to protect the personal information you submit to a DreamRoot website. To prevent unauthorized access or disclosure, to maintain data accuracy, and to ensure the appropriate use of the information DreamRoot utilizes appropriate physical, technical, and administrative procedures to safeguard the information we collect.
We use Secure Sockets Layer (SSL) encryption when collecting or transferring sensitive information such as credit card information. SSL encryption is designed to make the information unreadable by anyone but us. This security measure is working when you see the symbol of either an unbroken key or a closed lock (depending on your browser) at the top or bottom of your browser window.
As part of real-time payment processing, DreamRoot subscribes to a fraud management service. This service gives you and DreamRoot an extra level of security to guard against credit card fraud and to protect your financial data.
Legal basis for processing personal data.
DreamRoot ensures that personal data is limited to what is adequate, relevant and necessary in relation to the purposes for which it is processed.
All data is processed by DreamRoot on one of the following lawful bases – consent, contract, legal obligation, vital interests, public task or legitimate interests. Where your consent is relied upon as a lawful basis for processing data, evidence of opt-in consent shall be kept with your personal data.
DreamRoot only keeps data as long as is reasonable and necessary for the relevant activity or service. For instance, this may be determined by applicable statutory obligations such as the collection of Gift Aid or tax reporting, or to perform our obligations or exercise rights under any relevant contract DreamRoot has with you.
To ensure that personal data is kept for no longer than necessary, DreamRoot reviews our retention periods for personal information on a regular basis. In light of this we have put in place a data retention policy and will regularly review that policy. This policy shall consider what data should/must be retained, for how long, and why.
Your data access and rights.
DreamRoot strives to keep your personal information accurately recorded. We have implemented technology, management processes, and policies to help maintain data accuracy. DreamRoot provides you with reasonable access to the personal information you have provided and the ability to review and correct it. To protect your privacy and security, we will also take reasonable steps to verify your identity, such as requiring a password and user ID, before granting access to your data.
If at any point you believe the information we process on you is incorrect you can request to see this information and have it corrected or deleted. If there are any discrepancies in the information we provide, please let us know as soon as possible and we will correct them.
It is important for you to be aware of the various rights you have in respect of the personal information we hold about you. These rights include
- The right to request access to the personal information held about you.
- The right to restrict the processing of personal data.
- The right to object to the processing of your personal data.
- The right to withdraw your consent at any time.
- The right to rectify or erase the data held about you.
If you wish to exercise any of these rights or make a complaint on how we have handled your personal data, you can do so by emailing us at firstname.lastname@example.org
DreamRoot adheres to the U.S. safe harbor privacy principles of Notice, Choice, Onward Transfer, Security, Data Integrity, Access and Enforcement.
DreamRoot processes personally identifiable information only for the purposes for which it was collected and in accordance with this Policy or any applicable service-specific privacy notice. We review our data collection, storage and processing practices to ensure that we only collect, store and process the personally identifiable information needed to provide or improve our products and services. We take reasonable steps to ensure that the personally identifiable information we process is accurate, complete, and current, but we depend on our users to update or correct their personally identifiable information whenever necessary.
Links to third party websites.
Notification of Changes.
The Website is directed at an adult market and is intended for use by adults only. DreamRoot does not knowingly collect personally identifiable information from anyone under 13, nor do we allow children under 13 to participate on the Website without prior verified parental consent.
Any person who provides information to us represents that they are thirteen (13) years of age or older. We encourage parents and guardians to take an active role in their children’s online activities and interests.
Last Updated: September 13, 2019