Privacy Notice

1. Who we are

MHM Dreams Limited is responsible for the personal information described in this Privacy Notice.

For privacy enquiries, contact:

Email: [email protected]
WhatsApp: +44 7473 427 576

Our registered office is 329 Bath Road, Slough, SL1 5PR, England.

The registered office is not a showroom, shop, warehouse or general customer collection point.

2. Information we collect

When you make an enquiry through our website, we may collect information that you provide to us, including:

• your name;
• email address or other contact details;
• preferred reply method;
• details of what you require;
• product links;
• whether your enquiry is residential or commercial;
• quantities;
• dimensions;
• material or finish information;
• postcode;
• requested date or flexibility;
• budget information; and
• other specifications or information that you choose to provide.

You may also choose to upload a reference image.

Our system also creates administrative information relating to the enquiry, such as an enquiry reference, submission time and enquiry status.

We do not ask you through the enquiry form to provide payment card information, passwords, government identification or special category personal information.

Please do not include unnecessary sensitive personal information in your enquiry or reference image.

3. Why we use your information

We use enquiry information to:

• understand and respond to your request;
• communicate with you about the enquiry;
• assess products or options relevant to your request;
• prepare or discuss a quotation;
• take steps requested by you before potentially entering into a contract;
• administer and manage the enquiry;
• maintain the security and integrity of our enquiry system; and
• prevent misuse or excessive automated submissions.

If an enquiry leads to an order, information may also be processed as necessary to administer and perform the resulting contract and to comply with applicable legal, accounting or record keeping obligations.

We do not currently use website enquiry information for automated profiling or automated decision making.

4. Our lawful bases

Where you ask us to provide information, investigate sourcing options, prepare a quotation or otherwise take steps with a view to purchasing goods from us, we generally process the information because it is necessary to take steps at your request before entering into a contract or, where a contract exists, to perform that contract.

We may process limited technical information where reasonably necessary to protect our website and enquiry system against misuse, abuse or excessive submissions. We rely on our legitimate interests in maintaining the security and availability of our website and business systems, provided those interests are not overridden by your rights and interests.

Where we are required to retain or use information to comply with a legal obligation, we may process it on that basis.

We do not rely on consent simply because you submit an ordinary sales enquiry.

5. Reference images

If you upload a reference image, it forms part of your enquiry record.

Reference images are stored privately outside the publicly accessible website files.

They are not added to the public WordPress Media Library and are not given a normal public website URL.

Access is restricted to authorised administrators.

Please ensure that any image you submit is relevant to your enquiry and does not contain unnecessary personal or sensitive information.

6. How enquiry information is stored

Website enquiries are stored as private administrative records within our WordPress system.

Reference images are stored separately in private server storage outside the public website directory.

Access to enquiry administration and private reference images is restricted to authorised administrators.

We apply technical controls intended to prevent enquiry records and private files from being exposed through public website search, feeds, sitemaps or unauthenticated access.

7. Email communications

When you submit an enquiry, our website sends a limited internal notification to:

[email protected]

The notification is designed to contain only the enquiry reference and a protected administrative link rather than reproducing the full enquiry or attaching your reference image.

If you provide a valid email address, we also send a short acknowledgement confirming receipt of the enquiry.

The acknowledgement does not reproduce your complete enquiry or reference image.

Further correspondence may take place by email, telephone, WhatsApp or another communication method requested or agreed with you.

8. WhatsApp

Our website provides optional links that allow you to contact us through WhatsApp.

WhatsApp is not loaded automatically as an embedded tracking service by our website. You choose whether to follow the WhatsApp link.

If you communicate with us using WhatsApp, your use of WhatsApp is also subject to the privacy practices and terms of the provider of that service.

You are not required to use WhatsApp. You may use our website enquiry form or email instead.

9. Security and abuse prevention

Our enquiry system uses technical security measures including submission validation, access controls and rate limiting.

For rate limiting, a temporary hashed representation derived from the requesting IP address may be used for a short period to help prevent excessive submissions.

The website does not intentionally write complete enquiry submissions, uploaded image contents or customer contact details to application debug logs during normal operation.

Production web server and security systems may generate technical logs as part of operating and protecting the website.

10. Who we share information with

We do not sell your enquiry information.

Information may be available to:

• authorised personnel who need access to administer enquiries;
• service providers involved in hosting, maintaining, securing or operating our website and email systems;
• suppliers, carriers or other parties where sharing particular information is reasonably necessary to investigate or fulfil your request or an resulting order; and
• professional advisers, regulators, law enforcement bodies or other parties where disclosure is required or permitted by law.

We aim to disclose only information reasonably necessary for the relevant purpose.

We do not attach customer reference images to routine internal enquiry notification emails.

11. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any subsequent legitimate business, contractual, accounting, dispute resolution or legal requirements that apply.

The appropriate period can depend on matters including:

• whether the enquiry remains active;
• whether the enquiry results in a quotation or order;
• whether an ongoing customer relationship exists;
• whether the information is needed to establish, exercise or defend legal rights;
• applicable accounting or legal record keeping requirements; and
• whether the information is still reasonably necessary for the purpose for which it was collected.

Information that is no longer required should be deleted or securely disposed of in accordance with our applicable retention and deletion procedures.

Deleting an enquiry record from the live enquiry system is designed also to remove its associated private reference image.

Information may remain temporarily within legitimate backup systems until the relevant backup is overwritten or expires in accordance with the applicable backup cycle.

12. Cookies and analytics

At the date of this notice, the public MHM Dreams website does not use Google Analytics, Google Tag Manager, Meta Pixel or other non essential advertising or analytics tracking technologies.

The public website does not currently use browser localStorage, sessionStorage or IndexedDB for tracking.

WordPress authentication technologies may be used for authorised administrators who sign into the website administration system.

If we introduce non essential analytics or tracking technologies in the future, we will review the applicable privacy and consent requirements before enabling them and update this notice where necessary.

13. International transfers

We do not intentionally transfer website enquiry records or private reference images outside the UK as part of the website enquiry storage architecture described in this notice.

If you independently choose to communicate with us through a third party service such as WhatsApp, that provider may process information internationally under its own arrangements.

If our own processing arrangements later involve an international transfer of personal information, we will apply the safeguards required by applicable data protection law where necessary and update our privacy information accordingly.

14. Your data protection rights

Depending on the circumstances and the lawful basis applying to the processing, you may have rights concerning your personal information, including rights to:

• request access to personal information we hold about you;
• ask us to correct inaccurate or incomplete information;
• ask us to erase information in certain circumstances;
• ask us to restrict processing in certain circumstances;
• object to certain processing;
• receive certain information in a portable format where the right to data portability applies; and
• complain about how your personal information has been handled.

These rights are subject to the conditions and exemptions provided by data protection law.

15. Your right to object

Where we rely on legitimate interests to process your personal information, you have the right to object to that processing in certain circumstances.

Contact us using the details below if you wish to exercise this right.

16. Exercising your rights

To make a privacy request, contact:

[email protected]

We may need enough information to identify the relevant records and, where appropriate, verify that the request relates to you.

We will handle valid requests in accordance with applicable data protection law.

17. Complaints

If you have concerns about how we use your personal information, please contact us first so that we can investigate.

You also have the right to complain to the UK Information Commissioner’s Office.

Information about making a complaint is available from the Information Commissioner’s Office.

18. Changes to this Privacy Notice

We may update this Privacy Notice when our processing activities, systems or legal obligations change.

The current version will be published on this page with its latest revision date.

Where a material change affects how we use information already collected, we will take appropriate steps to provide further information where required.

19. Contact

MHM Dreams Limited
Company No. 17317794
Registered in England and Wales

Email: [email protected]
WhatsApp: +44 7473 427 576

Registered Office:
329 Bath Road
Slough
SL1 5PR
England