Privacy Policy

Last updated: October 4, 2026

This Privacy Policy explains how DB Dancewear processes the personal data of customers and website users.

1. Data Controller

Data Controller:
Unelma Group Oy / DB Dancewear
Business ID: 3331939-2
Ketokallio 34, 15700 Lahti, Finland

Contact person for data protection matters:
Terhi Lahtinen
Email: office@dreamb.fi

DB Dancewear is a small Finnish business selling dancewear and activewear through its online store.

2. What Personal Data Do We Collect?

We may collect and process the following personal data depending on how you use our online store:

• first and last name

• delivery and billing address

• email address

• phone number

• order information and order history

• selected delivery and payment methods

• customer account information

• information related to returns and exchanges

• communications with customer service

• information related to the use of our online store

• information collected through cookies and similar technologies

• marketing-related information and preferences, such as newsletter subscriptions and unsubscribing.

Payment information is processed by payment service providers in accordance with their own privacy policies. Dreamb does not process complete payment card details in its own systems.

3. How Do We Use Personal Data?

Personal data is processed for the following purposes:

• receiving, processing and delivering orders

• processing payments

• handling orders, returns and exchanges

• providing customer service and responding to customer enquiries

• maintaining customer accounts

• maintaining order history

• ensuring the functionality and security of the online store

• developing and analysing the online store

• marketing and sending newsletters where there is an appropriate legal basis or consent

• fulfilling legal obligations

• preventing possible misuse and fraud.

4. Legal Basis for Processing Personal Data

We primarily process personal data on the following legal bases:

Performance of a contract
Processing personal data is necessary, for example, to process an order, receive payment and deliver the product to the customer.

Legal obligation
Personal data may be processed to fulfil obligations relating to accounting, taxation and consumer protection legislation, for example.

Legitimate interest
We may process personal data, for example, to ensure the security of the online store, prevent misuse, manage customer relationships and develop the online store when there is an appropriate legitimate interest in the processing and the rights of the data subject do not override that interest.

Consent
In some situations, processing of personal data is based on consent, for example for certain types of electronic direct marketing or cookies and analytics technologies where consent is required.

Consent can be withdrawn at any time. Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

5. Where Do We Obtain Personal Data?

Personal data is primarily obtained directly from the customer, for example:

• when placing an order in our online store

• when creating a customer account

• in connection with a return or exchange

• when contacting customer service

• when subscribing to our newsletter

• when participating in competitions, campaigns or other Dreamb services.

In addition, the technical systems and cookies used on our website may collect information about the use of our online store.

6. Recipients of Personal Data and Service Providers

Dreamb uses external service providers to operate the online store. These providers may process personal data on behalf of Dreamb or provide their own services to customers.

Such service providers may include, for example:

• Shopify, for operating the online store platform and customer accounts

• payment service providers such as Klarna, PayPal and other payment services available at checkout

• shipping and logistics companies for delivering orders

• email, chat and customer service providers

• analytics and website development services

• marketing and advertising services such as Meta and Google, depending on the services in use and the customer's choices.

Service providers may only process personal data to the extent necessary to provide their services and in accordance with applicable legislation.

Personal data may be disclosed to authorities when required or permitted by law.

7. Transfers of Personal Data Outside the EU or EEA

Some of the service providers we use may process personal data outside the EU or EEA.

If personal data is transferred outside the EU or EEA, we ensure that the transfers are carried out in accordance with the requirements of the GDPR and that an appropriate data transfer mechanism is in place, such as Standard Contractual Clauses approved by the European Commission or another lawful mechanism under the GDPR.

8. Retention of Personal Data

We retain personal data only for as long as necessary for the