GDPR & CONSUMER DATA PROTECTION

Privacy Policy

Last updated: June 30, 2026

1. General Information

We, ihill Management Limited (Business Registration No. 80772904), registered under the laws of Hong Kong (Registered office address: Flat 5, 4/F, Won Hing Building, 74-78 Stanley Street, Central, Hong Kong), respect your privacy and are committed to safeguarding your personal data.

This Privacy Policy explains what information we collect, why we collect it, how it is secured, and your legal rights in accordance with the European Union General Data Protection Regulation (GDPR) and international consumer privacy laws.

2. Personal Data We Collect

When you interact with our website or place an order for Dream Drift™ Overnight Science products, we process the following categories of personal information:

  • Order & Delivery Information: Full customer name, shipping address (street, house number, postal code, city, country), contact email address, and recipient mobile phone number. This information is strictly necessary to pack, ship, and deliver your physical order and provide live SMS tracking alerts.
  • Payment Data: Billing information and payment method tokens. All transactions are processed through certified third-party payment gateways (Stripe, Apple Pay, Google Pay). We never store credit or debit card numbers on our servers.
  • Technical & Telemetry Data: Browser user-agent, IP address (anonymized for fraud prevention), referring URLs, and device specifications used to ensure website stability and checkout performance.

3. Legal Grounds for Data Processing

We process your personal data based on the following legal frameworks:

  • Fulfillment of Contract: Processing is required to prepare, ship, and deliver your ordered physical items and handle customer support inquiries.
  • Legal & Tax Obligations: We retain order records for accounting, VAT compliance, and export documentation required by law.
  • Legitimate Interests: Preventing fraudulent transactions, detecting checkout abuse, and ensuring technical network security.

4. Data Sharing with Trusted Partners

We do not sell, rent, or trade your personal information. We only share necessary data with authorized service partners required for logistics and order execution:

  • Logistics & Courier Carriers: Regional postal services and authorized last-mile delivery carriers receive your name, address, and phone number to complete doorstep delivery and tracking updates.
  • Payment Gateways: Stripe Inc. (Level 1 PCI-DSS compliant) handles all payment authorization and settlement.
  • Transaction Notification Services: Automated transactional email providers (Resend) used to deliver your order confirmation and tracking link.

5. Your Rights Under GDPR

You have full legal control over your personal data:

  • Right to access and review the personal data we hold about you.
  • Right to request rectification of inaccurate or incomplete information.
  • Right to request erasure of your data ("Right to be Forgotten"), subject to statutory tax retention periods.
  • Right to restrict or object to the processing of your data.
  • Right to receive your data in a structured, commonly used machine-readable format.

To exercise any of these rights, please contact our Data Protection Officer at [email protected].

6. Cookies & Tracking Technologies

We utilize essential session cookies to remember your selected bundle tier and cart state, and privacy-respecting conversion pixels to verify the effectiveness of our advertising campaigns. You can disable cookies at any time via your browser settings.

7. Contact Us

If you have questions regarding this Privacy Policy or your data privacy rights, please reach out to:

  • Email: [email protected]
  • Phone: +44 7480 268092
  • Address: ihill Management Limited, Flat 5, 4/F, Won Hing Building, 74-78 Stanley Street, Central, Hong Kong