Privacy policy

Last updated: 5 July 2026

This Privacy Policy explains how DREO collects, uses, stores, and protects your personal information when you visit our website (dreo.live) or make a purchase. We are committed to protecting your privacy and handling your data transparently.

1. Data Controller

For the purposes of data protection law, the data controller is:

LEUNG MS NGA SEE, Sole Trader, trading as DREO
31 Stortford Hall Park, Bishop's Stortford,
England CM23 5AJ, United Kingdom

Email: info@dreo.live
UK Corporate Office: +44 7365 878954

2. Information We Collect

We may collect and process the following categories of personal data:

  • Identity and Contact Data: Name, billing address, delivery address, email address, phone number.
  • Order Data: Products purchased, order number, payment amount, payment method.
  • Transaction Data: Payment details (processed securely, not stored by us).
  • Technical Data: IP address, browser type and version, time zone setting, operating system, and platform.
  • Usage Data: Information about how you use our website, products, and services.
  • Marketing and Communications Data: Your preferences for receiving marketing from us.

3. How We Collect Your Data

We collect data through:

  • Direct interactions: When you place an order, create an account, contact us, or sign up for communications.
  • Automated technologies: When you interact with our website, we may collect technical and usage data via cookies, server logs, and other similar technologies.
  • Third parties: We use analytics and advertising services (Google Analytics, Facebook Pixel, Google Ads) that may collect data through cookies and similar tracking technologies.

4. How We Use Your Data

We use your personal data for the following purposes:

  • To process and fulfil your orders, including delivery and payment.
  • To communicate with you about your order.
  • To manage your account.
  • To comply with legal obligations.
  • To improve our website and customer experience.
  • To send marketing communications (only with your consent).
  • To analyse site traffic and show relevant ads (based on your consent for non-essential cookies).

5. Data Sharing

We may share your personal data with:

  • Delivery partners (USPS, UPS, FedEx) — for order fulfilment.
  • Payment processors — for secure payment processing.
  • Analytics and advertising partners: Google Analytics, Facebook Pixel, Google Ads.
  • IT service providers — for website hosting and technical support.

We ensure that all third parties we work with process data only on our instructions and in accordance with applicable data protection laws.

6. Data Retention

We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. In general, we retain order data for a period of 6 years from the date of the last transaction to comply with UK tax and consumer protection laws. Marketing data is retained until you withdraw your consent or request deletion.

7. Your Privacy Rights

Depending on your location, you may have certain rights regarding your personal data. These rights include:

  • Right of access: You have the right to request a copy of the personal data we hold about you.
  • Right to rectification: You have the right to request correction of any inaccurate or incomplete personal data.
  • Right to erasure ("right to be forgotten"): You have the right to request deletion of your personal data in certain circumstances.
  • Right to restrict processing: You have the right to request restriction of processing in certain circumstances.
  • Right to data portability: You have the right to request transfer of your data to another service provider in certain circumstances.
  • Right to object: You have the right to object to processing based on legitimate interests or for direct marketing purposes.
  • Right to withdraw consent: Where processing is based on consent, you have the right to withdraw that consent at any time.

To exercise any of these rights, please contact us at info@dreo.live. We will respond within one month of receiving your request.

8. For US Residents (Including California Privacy Rights)

This section applies to residents of the United States, particularly California, and is designed to comply with the California Consumer Privacy Act (CCPA) and similar state privacy laws.

Your Rights Under the CCPA:

If you are a California resident, you have the following rights:

  • Right to Know: You have the right to request that we disclose the categories and specific pieces of personal information we have collected about you, the categories of sources from which the information was collected, the business or commercial purpose for collecting the information, and the categories of third parties with whom we share the information.
  • Right to Delete: You have the right to request that we delete any personal information we have collected about you, subject to certain exceptions (e.g., to complete a transaction, detect security incidents, or comply with legal obligations).
  • Right to Correct: You have the right to request correction of inaccurate personal information we hold about you.
  • Right to Opt-Out of Sale or Sharing: We do not sell your personal information for monetary value. However, we do share certain data (such as browsing behaviour) with advertising partners (Google Ads, Facebook Pixel) which may be considered a "sale" or "sharing" under CCPA. You have the right to opt-out of this sharing at any time.
  • Right to Non-Discrimination: We will not discriminate against you for exercising any of your CCPA rights.

"Do Not Sell or Share My Personal Information"

We provide a clear and conspicuous "Do Not Sell or Share My Personal Information" link on our website, as required by the CCPA. Clicking this link allows you to submit an opt-out request.

You may also exercise your opt-out rights via a user-enabled global privacy control, such as the Global Privacy Control (GPC) signal. When activated in your browser, GPC sends a signal indicating your wish to opt out of the sale or sharing of personal information. We honour GPC signals as valid opt-out requests.

To submit a request regarding your CCPA rights:

We will verify your identity before processing your request. We aim to respond to verified requests within 45 days, as required by the CCPA.

9. Cookies

We use cookies to improve your browsing experience, analyse site traffic, and show relevant ads. You can accept all, reject non-essential, or manage your preferences via our cookie banner. For detailed information, please see our Cookie Policy.

10. International Data Transfers

We may transfer your personal data to countries outside the UK (such as the United States, where our analytics and advertising partners are based). Where such transfers occur, we ensure appropriate safeguards are in place in accordance with UK GDPR requirements, such as Standard Contractual Clauses.

11. Data Security

We have implemented appropriate technical and organisational measures to protect your personal data from accidental loss, unauthorised access, alteration, or disclosure. However, please note that no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

12. Contact Us

If you have any questions about this Privacy Policy or wish to exercise your data rights, please contact:

DREO (Data Controller: LEUNG MS NGA SEE)
31 Stortford Hall Park, Bishop's Stortford,
England CM23 5AJ, United Kingdom

Email: info@dreo.live
US Customer Support: +1 (609) 234-3420
UK Corporate Office: +44 7365 878954