Privacy Policy of Wish & Dream

Last updated: October 2025

I. About this Privacy Policy

This Privacy Policy describes how Smart Software Platform Solution (hereinafter referred to as “Wish & Dream,” “we,” “our,” or “us”) collects, uses, and protects personal data when you visit and use the website www.wishanddream.com (hereinafter referred to as the “Website”) and the services we provide through it.

This Policy complies with the General Data Protection Regulation (EU) 2016/679 (“GDPR”), the Bulgarian Personal Data Protection Act, and other applicable European data protection laws.

The purpose of this Privacy Policy is to inform you about:

  • what personal data we collect,
  • how we use and protect it,
  • what rights you have regarding your personal information.

The Website is operated by:

Smart Software Platform Solution

Registered in Bulgaria, European Union

Email: info@wishanddream.com

II. Data controller and contact

The data controller responsible for processing your personal data is:

Smart Software Platform Solution (“Wish & Dream”)

Email: info@wishanddream.com

Website: www.wishanddream.com.

You can contact our Data Protection Officer (DPO) regarding any privacy-related matter at:

Email: dpo@wishanddream.com

Your data will not be processed through automated decision-making or profiling that produces legal effects on you. Wish & Dream may share your personal data only with trusted partners necessary to operate the Website and deliver our services, including:

    • IT, hosting, and cloud service providers,
    • payment processors,
    • professional consultants (legal, tax, accounting),
    • marketing or email service providers (for newsletters).

    All partners process data in compliance with GDPR and undersigned data-processing agreements.

III. Types of Personal Data We Collect

We may collect and process the following categories of personal data, depending on your interaction with the Website:

  • Registered users / account holders:
  • Name and surname
  • Email address
  • Login credentials (encrypted)

Customers who purchase our services (Santa/Tooth Fairy videos, AI gifts, etc.):

  • Name and surname
  • Email address
  • Billing address
  • Payment and transaction details (processed securely via third-party payment providers)

Recipients of personalized products (e.g., children receiving Santa or Tooth Fairy videos):

  • First name and/or nickname
  • Age (optional, for personalization)
  • Photo or video (if voluntarily uploaded by the Customer)

Newsletter subscribers:

  • Name
  • Email address

Contact form users:

  • Name and surname
  • Email address
  • Content of the message

Technical and cookie data:

  • IP address, browser type, device information, session logs
  • Cookies and similar tracking technologies (see Section X)

IV. Purpose and Legal Basis of Processing

We process personal data for the following purposes:

  • Purpose Legal Basis (Article 6 GDPR)
  • To register and maintain your account Art. 6(1)(b) – contract performance
  • To process and deliver your personalized order Art. 6(1)(b) – contract performance
  • To personalize videos or gifts (e.g., Santa / Tooth Fairy) 6(1)(a) – consent (especially when involving minors)
  • To send marketing communications or newsletters Art. 6(1)(a) – consent
  • To respond to messages sent via contact form Art. 6(1)(f) – legitimate interest (communication)
  • To comply with accounting and tax obligations Art. 6(1)(c) – legal obligation
  • To protect our rights, prevent fraud, or defend claims Art. 6(1)(f) – legitimate interest

V. Data Retention

Your personal data will be stored only as long as necessary to fulfill the purpose for which it was collected:

  • Customer and order data: up to 5 years (for legal and tax compliance).
  • Newsletter data: until you withdraw your consent or unsubscribe.
  • Contact form data: up to 12 months after the conversation ends.
  • Recipient data (for personalized products): retained only until the order is fulfilled and delivered, then deleted within 90 days.
  • Technical/cookie data: see Section X below.

After these periods, data will be securely deleted or anonymized.

VI. Data Sharing and International Transfers

Wish & Dream does not transfer personal data outside the European Economic Area (EEA) unless the recipient country ensures an adequate level of protection or the transfer is safeguarded by standard contractual clauses approved by the European Commission.

Access to data is limited to authorized employees or contractors who require it for the performance of their duties.

VII. Data Security

We apply technical and organizational measures to protect your data against unauthorized access, loss, alteration, or disclosure, including:

  • Encrypted HTTPS connections
  • Secure cloud hosting within the EU
  • Restricted employee access based on roles
  • Regular data backups and security reviews

VIII. Rights of Data Subjects

Under GDPR, you have the following rights:

Access: to obtain confirmation and a copy of your data.

Rectification: to correct inaccuracies.

Erasure (“Right to be forgotten”): to delete your data when legally possible.

Restriction: to limit processing under certain conditions.

Data portability: to receive your data in machine-readable form.

Objection: processing based on legitimate interests or direct marketing.

Withdrawal of consent: at any time, without affecting prior lawful processing.

 

To exercise your rights, contact us at: info@wishanddream.com

or dpo@wishanddream.com.

You may also file a complaint with the Commission for Personal Data Protection (CPDP – Bulgaria) or your local EU supervisory authority.

IX. Personal Data of Minors

Some services (e.g., Santa or Tooth Fairy videos) are intended for children but ordered by adults (parents or guardians).

We process a child’s data only with the explicit consent of their legal guardian and only for the purpose of creating the ordered personalized product.

We do not knowingly collect or store children’s data for any other purpose.

X. Cookies and Tracking Technologies

Our Website uses cookies – small text files stored on your device – to improve user experience and enable site functionality.

 

Cookies used may include:

Necessary cookies: essential for login, orders, or security.

Functional cookies: remember your preferences (e.g., language, session).

Performance cookies: measure website usage and improve design.

Marketing cookies: used only with consent for personalized promotions.

You can manage or disable cookies in your browser settings at any time.

For more details on cookies, visit: https://www.wishanddream.com/cookie