Privacy Policy

The data controller responsible for personal data processed through this website is:

Company:

Dream Generator Ltd

Registered office:

3rd Floor, 207 Regent Street, London W1B 3HH, United Kingdom

Company number:

12077525

Country of incorporation:

United Kingdom

Privacy contact email:

info@dreamgenerator.co.uk

Website:

dreamgenerator.co.uk

Where a specific Dream Generator ecosystem business operates as a separate controller, its own privacy information should apply to processing carried out through that business or website.

Depending on how you use the website or communicate with us, we may collect:

• identity and contact information, such as your name, business email address, telephone number, country, company or organisation;
• information contained in enquiries, correspondence and messages submitted to us;
• professional or business information relevant to an investment, property, advisory or partnership enquiry;
• subscription preferences where you choose to receive Dream Generator Insights or other communications;
• technical and usage information generated when you use the website, such as IP address, browser/device information, security logs and, where permitted, analytics information;
• cookie and consent preferences; and
• information that you voluntarily provide in subsequent communications with us.

Please do not submit confidential transaction documents, special-category personal data or highly sensitive information through the initial website contact form unless we have specifically asked you to do so through an appropriate secure channel.

We may collect personal data directly from you when you submit a form, subscribe to communications, contact us by email or otherwise communicate with Dream Generator. We may also receive business contact information from professional counterparties, public professional sources, corporate websites, business directories or other lawful sources in the course of our advisory and relationship-development activities.

If personal data is obtained from a source other than the individual, we will provide the information required by applicable data protection law where and when required.

We process personal data only where we have an appropriate lawful basis. Depending on the circumstances, processing may be necessary for the following purposes:

• Responding to enquiries and taking steps requested before entering into a business relationship — legitimate interests and/or steps prior to entering into a contract.
• Providing and administering advisory or related services — performance of a contract and legitimate interests.
• Assessing investment, property, partnership or professional enquiries and determining whether they fall within our activities — legitimate interests.
• Maintaining business and professional relationships and communicating with relevant counterparties — legitimate interests, subject to applicable direct-marketing rules.
• Sending newsletters or electronic marketing where consent is required — consent. You may withdraw consent at any time.
• Operating, securing, maintaining and improving the website — legitimate interests and, where applicable, consent for non-essential storage/access technologies.
• Meeting legal, regulatory, accounting, compliance or law-enforcement obligations — legal obligation and/or legitimate interests.
• Establishing, exercising or defending legal claims — legitimate interests and other applicable legal bases.

Where we rely on legitimate interests, we consider whether our interests are proportionate and whether your rights and interests require additional protection.

If newsletter functionality is activated, we will use the information you provide to send the communications you requested. Where consent is the applicable lawful basis, you may withdraw it at any time by using the unsubscribe mechanism provided in the communication or by contacting us.

The initial website release may contain an integration-ready newsletter interface without an active third-party newsletter provider. This policy must be updated before any provider is activated if that changes how personal data is processed or transferred.

Information submitted through a contact or enquiry form will be used to review and respond to the enquiry, route it internally where appropriate, maintain relevant correspondence and, where a relationship develops, administer that relationship.

Website forms should collect only information reasonably necessary for these purposes and should include appropriate validation, security and anti-spam measures.

We do not sell personal data. We may disclose personal data where reasonably necessary to:

• website hosting, IT, email, security, analytics, professional or other service providers acting under appropriate contractual arrangements;
• professional advisers, consultants or specialist partners where this is necessary for an enquiry, mandate or transaction and disclosure is lawful and appropriate;
• other Dream Generator ecosystem entities where relevant to the enquiry and permitted by law;
• courts, regulators, public authorities or law-enforcement bodies where disclosure is required or legally justified; or
• a purchaser, successor or adviser in connection with a genuine corporate restructuring, merger, acquisition or transfer of business assets, subject to appropriate safeguards.

Where another professional or organisation acts as an independent controller, it is responsible for its own processing of personal data.

Dream Generator operates in an international business environment. Personal data may therefore be accessed or processed outside the United Kingdom and, where applicable, outside the European Economic Area.

Where applicable law requires safeguards for an international transfer, we will use an appropriate lawful transfer mechanism, such as an adequacy regulation/decision, the UK International Data Transfer Agreement or UK Addendum, EU Standard Contractual Clauses where relevant, or another legally recognised safeguard.

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to manage enquiries and business relationships and to satisfy legal, accounting, regulatory, compliance and dispute-resolution requirements.

Retention periods depend on the nature of the information and relationship. Enquiries that do not develop into an ongoing business relationship should be reviewed periodically and deleted or anonymised when there is no longer a legitimate reason to retain them. Contractual and transaction records may be retained for longer periods where required for legal or compliance purposes.

We use appropriate technical and organisational measures designed to protect personal data against accidental or unlawful destruction, loss, alteration, unauthorised disclosure or access. No internet transmission or storage system can be guaranteed to be completely secure, and users should avoid sending highly sensitive information through ordinary website forms or email.

Depending on the applicable law and circumstances, you may have rights to:

• request access to your personal data;
• request correction of inaccurate or incomplete data;
• request erasure of personal data;
• request restriction of processing;
• object to processing based on legitimate interests or to direct marketing;
• receive certain personal data in a portable format;
• withdraw consent at any time where processing is based on consent; and
• raise a complaint with the relevant supervisory authority.

These rights are subject to legal conditions and exemptions. To exercise a right, contact us using the privacy contact details above. We may need to verify your identity before acting on a request.

If you have concerns about our use of personal data, please contact us first so that we can consider the matter.

Individuals in the United Kingdom also have the right to complain to the Information Commissioner’s Office (ICO). Individuals in the EEA may have the right to complain to the competent data protection authority in their country of residence, work or the place of the alleged infringement.

The website may use cookies and other storage or access technologies. Strictly necessary technologies may be used without optional consent where the law permits. Non-essential technologies must not be activated before the required consent has been obtained.

For further information, including categories, purposes, duration and how to change your preferences, see our Cookie Policy.

The website may contain links to other websites, including websites within the wider DG Ecosystem. Those websites may have their own controllers, terms and privacy practices. Dream Generator is not responsible for the privacy practices of an independently operated third-party website.

This website and Dream Generator’s services are directed to business and investment audiences and are not intended for children. We do not knowingly seek to collect personal data from children through this website.

We do not intend to use personal data collected through the public website to make decisions based solely on automated processing that produce legal or similarly significant effects on individuals. If this changes, this Privacy Policy must be updated before such processing is introduced.

We may update this Privacy Policy when our website, processing activities, service providers or legal obligations change. The current version should always display its effective date. Material changes should be communicated where required by law.