Privacy Policy

Last updated: February 24, 2025

1. Introduction

DreamPay Ltda. ("DreamPay", "we", "us", "our") operates the website dreampay.com.br. This Privacy Policy describes how we collect, use, and protect your personal data when you visit our website or contact our team.

This policy complies with the provisions of Brazil's General Data Protection Law (LGPD — Law No. 13.709/2018) and the European General Data Protection Regulation (GDPR — Regulation EU 2016/679).

2. Data Controller

DreamPay Ltda.
Headquarters: Portugal
Operations: Brazil
Privacy contact email: privacy@dreampay.com.br

3. Data We Collect

3.1 Contact Form Data

When you submit our contact form, we collect the following personal data:

  • Full name
  • Email address
  • Company name (optional)
  • Message content

3.2 Usage Data

We automatically collect technical data when you visit our website, including pages visited, browser type and version, operating system, and IP address (anonymized after collection).

3.3 Cookies

We use analytics cookies only with your prior consent, obtained through our cookie banner in compliance with LGPD requirements. You can accept or reject analytics cookies at any time.

4. Legal Basis for Processing (LGPD Articles 7–11)

  • Consent (Art. 7, I): Analytics cookies and marketing communications (where applicable).
  • Legitimate interest (Art. 7, IX): Responding to contact requests and improving our service.
  • Compliance with legal obligation (Art. 7, II): Regulatory compliance and fraud prevention.

5. How We Use Your Data

Collected data is used exclusively to:

  • Respond to inquiries submitted through the contact form
  • Improve the website user experience
  • Comply with applicable legal and regulatory obligations
  • Prevent fraudulent activity and ensure website security

We do not use your data for automated decisions with legal effects.

6. Data Sharing

DreamPay does not sell personal data to third parties. We may share data in the following circumstances:

  • Banking partners: To facilitate payment operations (where applicable).
  • Cloud infrastructure providers: Hosting services that process data on behalf of DreamPay under appropriate data protection agreements.
  • Analytics providers: Only with your consent and in anonymized form.
  • Competent authorities: When required by law or court order.

7. International Data Transfers (LGPD Article 33)

Personal data may be transferred between Brazil and Portugal as part of DreamPay's operations. We ensure that any international transfer complies with LGPD requirements, including the adoption of appropriate safeguards such as standard contractual clauses or recognized adequacy decisions.

8. Your Rights (LGPD Articles 17–22)

In accordance with LGPD, you have the following rights regarding your personal data:

  • Right to confirmation of data processing
  • Right to access your data
  • Right to correct incomplete, inaccurate, or outdated data
  • Right to anonymize, block, or delete unnecessary or excessive data
  • Right to data portability
  • Right to delete data processed with consent
  • Right to object to processing
  • Right to withdraw consent at any time
  • Right to file a complaint with ANPD (Brazil's National Data Protection Authority)

To exercise any of these rights, contact us at privacy@dreampay.com.br.

9. Data Retention

Data submitted through the contact form is retained for a maximum of 2 years from the date of submission, or until you request its deletion, whichever comes first. Anonymized analytics data may be retained for longer periods for statistical purposes.

10. Security

DreamPay implements appropriate technical and organizational measures to protect your personal data, including:

  • Encryption in transit (HTTPS/TLS)
  • Encryption at rest for stored data
  • Access controls based on the principle of least privilege
  • PCI DSS certification for payment data processing environments

11. Changes to This Policy

We may update this Privacy Policy periodically. Any changes will be published on this page with the date of last update. We recommend checking this policy regularly.

12. Contact

For questions regarding this Privacy Policy or to exercise your rights, contact our Data Protection Officer:

Email: privacy@dreampay.com.br