Privacy policy

1. Data controller

The controller responsible for data collected on dreamweds.fr is YALTA GROUP (SASU, RCS Versailles, 107 388 910), whose registered office is located at 39 avenue du Général de Gaulle, 78290 Croissy-sur-Seine. If you have any questions about your data, contact us at contact@dreamweds.fr.

2. Data we collect

Depending on how you use the service, we may collect:

• Account data: name, email address, encrypted password and, where applicable, profile picture.
• Vendor data: professional information, company registration number, description, prices, photos, Kbis document and bank details required for payouts.
• Booking and messaging data: request details, conversations with vendors and order history.
• Payment data: processed by our payment provider; we do not store your card numbers.
• Browsing data: visited pages and technical data. Website audience measurement takes place only after you consent.

3. Purposes and legal bases

• Creating and managing your account — performance of a contract.
• Connecting clients and vendors and managing bookings and payments — performance of a contract.
• Sending service-related notifications — performance of a contract.
• Maintaining security, preventing fraud and meeting legal and accounting duties — legitimate interests and legal obligations.
• Measuring website audiences and improving the service — prior consent for Google Analytics.

4. Recipients and processors

Your data is never sold, shared with data brokers or combined with third-party data for advertising. DreamWeds does not use advertising or cross-site tracking. Data is shared only with processors required to operate the service:

• Stripe — secure payment processing.
• Resend — transactional email delivery.
• Google Analytics — aggregate audience measurement only after consent; Google Signals and advertising features are disabled.
• Our hosting and file-storage providers — hosting the website and documents.

When a vendor and a client are connected, only the data strictly necessary to provide the service is shared between them.

5. Retention periods

We retain data only for as long as necessary for the purposes described above. Data that no longer needs to be retained is deleted or anonymised after an account-deletion request. Some information remains archived for statutory periods, including 10 years for accounting documents and generally 5 years for contracts and transaction evidence. See our account deletion procedure.

6. Transfers outside the European Union

Some processors may handle data outside the European Union. Such transfers are protected by appropriate safeguards, including the European Commission's standard contractual clauses.

7. Cookies

Strictly necessary cookies support sign-in, sessions, CSRF protection, security, language selection and operation of the service. They include Auth.js cookies required for sessions and Google or Apple sign-in, as well as the functional cookie used to select an active vendor profile.

Your consent choice is stored locally under the functional key dw-cookie-consent. Google Analytics cookies and the internal profile-view deduplication cookie are optional: they are created only after you select “Accept” and are removed after you decline.

No optional cookie or Analytics tool is enabled in the iOS app or its embedded pages. DreamWeds uses no advertising cookies, Google Signals, Meta Pixel or other cross-site tracking.

8. Your rights

Under the GDPR and French data-protection law, you have rights of access, rectification, erasure, restriction, objection and portability. You may exercise them by writing to contact@dreamweds.fr. You may also lodge a complaint with the French data-protection authority, the CNIL: www.cnil.fr.

9. Contact

For questions about this policy or your personal data, email us at contact@dreamweds.fr or use our contact page.