Privacy Policy

Effective date: September 03, 2025

Who we are: Dreamstate Assembly (“Dreamstate Assembly,” “we,” “us,” or “our”) operates creative brands and subsidiaries (including Aesthesia, Noesis, Kinesis, Mnemosyne, Logos, and Oneiric) and sells physical and digital products (e.g., books, music, apparel, downloads).

This Privacy Policy explains how we collect, use, share, and protect your information when you visit [https://dreamstateassembly.com], interact with our social profiles, or purchase from our stores (together, the “Services”).

By using the Services, you agree to this Privacy Policy.

1) Scope & Audience

Applies to website visitors, customers, account holders/members, and newsletter subscribers.
Doesn’t cover third-party sites we don’t control (e.g., external links, social networks, marketplaces).

2) Information We Collect

a) You provide directly

Account & profile: name, email, password (hashed), display name/handle, preferences.
Orders & support: billing and shipping details, phone (optional), order notes, messages.
Newsletter & marketing: email address, content preferences.
User content: reviews, comments, submissions, uploaded media (if available).

b) Collected automatically

Device & usage data: IP address, device/browser type, pages viewed, referring/exit pages, timestamps, general location (city/region level), session IDs.
Cookies & similar tech: analytics cookies, functional cookies, and—if you opt in—advertising/retargeting cookies. See Cookies & Tracking.

c) From third parties

Payment processors: confirmation of payment status (we do not receive full card numbers).
Analytics/ads: aggregate or pseudonymous audience insights.
Social sign-in or embeds (if used): profile basics consistent with your settings on those platforms.

3) How We Use Your Information

Provide the Services: create/manage accounts, process orders, deliver digital products, fulfill customer support.
Communicate: order confirmations, updates, responses to inquiries; marketing emails if you opt in (with opt-out anytime).
Improve & personalize: debug, analyze trends, optimize UX, recommend content/products.
Security & fraud prevention: detect, investigate, and prevent fraud, abuse, or violations of our Terms.
Legal compliance: maintain records, tax/accounting, comply with lawful requests.

Digital libraries/downloads: If we offer a member “library,” we store purchase history to enable re-download or access, subject to availability and account standing.

4) Legal Bases (EU/UK GDPR)

Contract: to provide the Services and fulfill orders.
Legitimate interests: improve Services, prevent fraud, secure systems, measure performance.
Consent: email marketing; non-essential cookies/ads.
Legal obligation: bookkeeping, tax, and regulatory requirements.

5) Sharing & Disclosure

We do not sell your personal information for money. We may share limited data with:

Service providers/processors (bound by contract): web host/ecommerce platform (e.g., [Platform Name—Wix/Shopify/etc.]), payment processors (e.g., Stripe/PayPal), email service providers, analytics, cloud storage, logistics/shipping partners.
Advertising/analytics partners (only if you opt in to such cookies): may constitute “sharing”/“targeted advertising” under certain state laws.
Business transfers: in a merger, acquisition, or asset sale.
Legal & safety: to comply with laws, enforce our terms, or protect rights, property, and safety.

We require vendors to use data only to perform services for us and to safeguard it appropriately.

6) Cookies & Tracking Technologies

Essential cookies: required for the site (cart, login, security).
Functional/analytics cookies: help us understand performance and usage.
Advertising cookies (optional): personalize ads or measure campaigns; disabled unless you consent.

You can:

Manage preferences via our Cookie Settings: [Insert Cookie Settings link/button].
Use your browser settings to block or delete cookies.
Global Privacy Control (GPC): We honor GPC signals where required to treat them as an opt-out of “sale/share” for targeted ads.

Do Not Track: Industry standards are evolving; we do not currently respond to DNT signals.

7) Data Retention

We keep personal data only as long as needed for the purposes above, including:

Orders/transactions: generally 7–10 years for tax and accounting.
Accounts: until you close your account or after a period of inactivity consistent with our data lifecycle rules.
Marketing lists: until you unsubscribe or your email bounces repeatedly.
Logs/analytics: for reasonable periods to analyze and secure the Services.

When no longer needed, we delete or de-identify data per our retention schedule.

8) Security

We use administrative, technical, and physical safeguards proportionate to the nature of the data (e.g., TLS encryption in transit; hashed passwords; access controls; least-privilege). No system is 100% secure; please use unique, strong passwords and safeguard your credentials.

Payments: Handled by third-party processors; we do not store full card details.

9) Your Choices & Rights

a) Email marketing

Opt out anytime via the Unsubscribe link or by contacting us.

b) Cookies/ads

Adjust preferences in Cookie Settings and through GPC.
Reset your mobile ad ID and limit ad tracking in OS settings.

c) Access, correction, deletion (global)

You may request access to, correction of, or deletion of your personal data, subject to legal exceptions.

Submit a request: [Your Data Request Email/Form Link]
We may need to verify your identity.

10) Region-Specific Notices

California (CPRA)

We do not sell personal information for money.
We may share limited data with advertising/analytics partners when you consent to advertising cookies; this may be deemed “sharing” under CPRA. You can opt out at Cookie Settings and via GPC.
Rights: know/access, correct, delete, opt-out of sale/share, limit use of sensitive information (we do not use sensitive information to infer characteristics), and non-discrimination.
Appeals: If we deny a request, you may appeal by replying to our decision email.

Virginia / Colorado / Connecticut / Utah (state privacy laws)

Rights: access, correct, delete, data portability, and opt-out of targeted advertising, sale, or profiling where applicable.
Use Cookie Settings and dreamstateassembly.co@gmail.com to exercise rights.
Appeals: You may appeal our decision by replying to the decision email.

Nevada

We do not sell covered information. Residents may submit sale-opt-out requests to Dreamstateassembly.co@gmail.com.

EU/EEA/UK (GDPR/UK GDPR)

Controller: Dreamstate Assembly, United States; contact Dreamstateassembly.co@gmail.com.
Rights: access, rectification, erasure, restriction, portability, objection, and withdrawal of consent at any time without affecting prior processing.
International transfers: We may transfer your data to the U.S. and other countries. Where required, we use appropriate safeguards (e.g., Standard Contractual Clauses, vendor certifications).
Complaints: You can lodge a complaint with your local Data Protection Authority (or the ICO in the UK).

11) Children’s Privacy

Our Services are not directed to children under 13 (or under 16 in the EU/UK). We do not knowingly collect personal data from children. If you believe a child has provided data, contact us to delete it.

12) User-Generated Content & Community Features

If you post reviews, comments, or uploads:

Content may be public and indexed by search engines.
Don’t share personal or sensitive information.
We may moderate or remove content per our Terms.

13) Social Media, Links & Third Parties

Our site may include social media buttons, embeds, or links to third-party sites. Data handled by those parties is governed by their privacy policies, not ours.

14) Automated Decision-Making / Profiling

We do not use automated decision-making that produces legal or similarly significant effects. We may use basic profiling for analytics or content personalization (e.g., recommending products).

15) Financial Incentives

We may offer discounts or perks for joining our newsletter or referrals. Participation is voluntary; you can opt out anytime. We estimate the value of data based on the cost of the incentive and anticipated revenue impact. Details will be presented at the point of offer.

16) International Data Transfers

If we transfer your personal data internationally, we implement appropriate safeguards (e.g., SCCs or equivalent) and assess vendors’ security and privacy practices.

17) Changes to This Policy

We may update this Policy from time to time. We’ll post the updated version with a new Effective date. Material changes will be highlighted on the site and, where required, we’ll seek consent.

18) Contact Us

Questions or privacy requests:
Email: Dreamstateassembly.co@gmail.com
Data requests: Dreamstateassembly.co@gmail.com

Cookie preferences: [Cookie Settings Link/Button]

Turn on a cookie banner with at least “Accept / Reject / Settings.”
Add a Data Request email or simple form.
Verify email marketing opt-in and unsubscribe link.
Confirm your payment processor disclosure (Stripe/PayPal).
If you use ad pixels, ensure your banner can disable them until consent and that you honor GPC.

If you want, I can tailor this to Wix specifically (e.g., naming their analytics/cookie categories and where to place your links) or generate a matching Terms of Service next.