Last Updated: February 2026

We may disclose your personal information if we are required by law to do so or if you violate our Terms of Use.

We do not sell or rent your personal information to third parties for their marketing purposes without your explicit consent, and we only use your information as described in the Terms of Use. Your personal information is protected by reasonable physical as well as technological security devices.

We may, however, disclose and/or transfer your information to our affiliates, agents, service providers, etc., for business purposes and to provide you with a better experience. Notwithstanding anything to the contrary contained anywhere in the Terms of Use and to the greatest extent permitted by applicable laws, we will not be responsible in any manner whatsoever if information (including but not limited to the Payment Data) provided by the User gets exposed and/or misused by any third party who accessed such information without any authorization from us.

To protect your personal information, we take reasonable precautions and follow industry best practices to make sure it is not inappropriately lost, misused, accessed, disclosed, altered, or destroyed. If you provide us with your credit card information, the information is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption. Although no method of transmission over the internet or electronic storage is 100% secure, we follow all PCI-DSS requirements and implement additional generally accepted industry standards.

If you choose a payment gateway to complete your purchase, then the payment gateway may store your credit/debit card data (“Payment Data”). It is encrypted through the Payment Card Industry Data Security Standard (“PCI-DSS”). Your purchase transaction data is stored only as long as is necessary to complete your purchase transaction. After that is complete, your purchase transaction information is deleted.

All direct payment gateways adhere to the standards set by PCI-DSS as managed by the PCI Security Standards Council, which is a joint effort of brands like Visa, MasterCard, American Express, and Discover. PCI-DSS requirements help to ensure the secure handling of Payment Data by us and our service providers.

We capture certain information during the order process, including time, date, IP address, and other information that will be used to locate and identify individuals for combating fraud. If any order is suspected to be fraudulent, all records will be submitted, with or without a subpoena, to law enforcement agencies and to the credit/debit/payment instrument group/bank for fraud investigation, as may be deemed appropriate by us.

DREAM FASHION owns all the intellectual property rights associated with the Website and the contents therein. No right, title, or interest in any downloaded material is transferred to you as a result of any such downloading or copying. The Website is protected by copyright as a collective work and/or compilation (meaning the collection, arrangement, and assembly) of all the contents of this Website, pursuant to applicable laws.

Our logos, product and service marks and/or names, trademarks, patents, copyrights, and other intellectual property, whether registered or not (“Our IP”) are exclusively owned by us. Without the prior written permission from us, the User agrees not to display and/or use the Our IP in any manner.

In general, the third-party service providers used by us will only collect, use, and disclose your information to the extent necessary to allow them to perform the services they provide to us. However, certain third-party service providers, such as payment gateways, have their own privacy policies.

Note on Jurisdiction: Remember that certain providers may be located in or have facilities that are located in a different jurisdiction from you or us. Thus, if you elect to proceed with a transaction that involves the services of a third-party service provider, then your information may become subject to the laws of the jurisdiction(s) in which that service provider or its facilities are located.

You are prohibited from violating or attempting to violate the security of the Website, including, without limitation:

1. Attempting to probe, scan, or test the vulnerability of a system or network or to breach security or authentication measures without proper authorization;
2. Attempting to interfere with service to any other User, host, or network, including, without limitation, via means of submitting a virus to the Website, overloading, ‘flooding,’ ‘spamming’, ‘mail bombing,’ or ‘crashing’;
3. Sending unsolicited email, including promotions and/or advertising of products or services; or
4. Forging any transmission control protocol/IP packet header or any part of the header information in any email or newsgroup posting.

Violations of system or network security may result in civil and/or criminal liability.