Privacy Policy
Dreamineering Limited — last updated 2 March 2026
This policy covers mm.dreamineering.com and dreamineering.com (together, "our sites"). We comply with the New Zealand Privacy Act 2020 and respect the principles of the EU General Data Protection Regulation (GDPR).
Plain language. No surprises.
What We Collect
| Data | Where | Why | Lawful Basis |
|---|---|---|---|
| Email address | dreamineering.com contact forms, newsletter signup | Respond to enquiries, send updates you requested | Consent / legitimate interest |
| Name and contact details | dreamineering.com forms | Deliver services you asked for | Contract performance |
| Payment information | dreamineering.com via Stripe | Process payments | Contract performance |
| Usage analytics | Both sites via Vercel | Understand which pages are useful | Legitimate interest |
| Device and browser info | Both sites (server logs) | Security, performance monitoring | Legitimate interest |
We do not run Google Analytics, retargeting pixels, or sell data to third parties.
Third-Party Services
| Service | Purpose | Their Privacy Policy |
|---|---|---|
| Vercel | Hosting and edge analytics | Processes server logs, IP addresses |
| Stripe | Payment processing | Handles card details directly — we never see full card numbers |
| YouTube | Embedded videos on mm.dreamineering.com | Sets cookies when you play a video |
| GitHub | Open source hosting | If you visit our repos |
Cookies
We use minimal cookies. No cookie consent banner is needed under NZ law for essential cookies, but we disclose them here for transparency.
| Cookie | Source | Purpose | Type |
|---|---|---|---|
| Session cookies | Vercel | Routing, security | Essential |
| YouTube cookies | Video playback, preferences | Third-party (set on play) | |
| Stripe cookies | Stripe | Payment security | Essential (dreamineering.com only) |
We do not use advertising or tracking cookies.
Your Rights
Under the NZ Privacy Act 2020 (and GDPR where applicable), you can:
- Access — request a copy of the personal information we hold about you
- Correct — ask us to fix inaccurate information
- Delete — ask us to remove your personal information
- Withdraw consent — unsubscribe from communications at any time
- Complain — contact the NZ Privacy Commissioner if unsatisfied with our response
For GDPR purposes: our lawful bases are consent (where you opt in), contract performance (where you buy something), and legitimate interest (basic analytics to improve the site). You may request data portability or object to processing based on legitimate interest.
Data Retention
| Data | Retained For |
|---|---|
| Contact form submissions | Until enquiry resolved, then 2 years |
| Email subscribers | Until you unsubscribe |
| Payment records | 7 years (NZ tax obligations) |
| Server logs | 30 days |
Security
We use HTTPS everywhere. Payment data is handled by Stripe (PCI DSS Level 1 certified) and never touches our servers. Access to personal data is restricted to authorised team members.
Children
Our sites are not directed at children under 16. We do not knowingly collect personal information from children.
Changes
We will update this page when our practices change. Material changes will be noted with an updated date at the top.
Contact
Dreamineering Limited
Email: privacy@dreamineering.com
Location: New Zealand
For privacy complaints, contact us first. If unresolved, you may contact the Office of the Privacy Commissioner .