Privacy Policy

1. Who we are

Dream Chaser (dreamchaser.me) is a personal brand operated by Szymon, a freelance motion designer and After Effects script developer based in Poland. We create and sell digital products (scripts, templates), publish tutorials on YouTube, and run a newsletter.

As a data controller established in the European Union, we process your personal data in accordance with the General Data Protection Regulation (GDPR), the Polish Electronic Communications Law (Prawo komunikacji elektronicznej, in force since 10 November 2024), and other applicable EU privacy legislation.

2. What data we collect and why

We only collect data that is necessary for the specific purpose stated at the point of collection.

• Newsletter subscription — your email address, collected with your explicit consent (GDPR Art. 6(1)(a)). Used solely to send you the Dream Chaser newsletter. Managed by Brevo (Sendinblue SAS), a processor based in the EU.
• Product purchases — name, email address and payment data, collected to fulfil your order (GDPR Art. 6(1)(b)). Payment processing is handled by Payhip Ltd. We do not store credit card data.
• Contact enquiries — any information you include when emailing us at [email protected], processed on the basis of our legitimate interest in responding to you (GDPR Art. 6(1)(f)).
• Server logs — IP address, browser type and pages visited, automatically recorded by our hosting provider (home.pl). Retained for up to 30 days for security purposes.

3. Newsletter — your consent and rights

By subscribing to our newsletter you give your freely given, specific, informed and unambiguous consent to receive marketing emails from Dream Chaser. We use a double opt-in process: after submitting your address you will receive a confirmation email. Your subscription is only activated after you click the confirmation link.

You can withdraw your consent and unsubscribe at any time by clicking the Unsubscribe link in any newsletter email, or by contacting us at [email protected]. Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

4. Cookies

Our website uses only technically necessary cookies required to deliver the service (e.g. session management). We do not use advertising or tracking cookies. We do not use Google Analytics or similar tracking tools.

Third-party scripts embedded on this page — specifically Google reCAPTCHA (used to protect our newsletter form from spam) — may set their own cookies subject to Google's Privacy Policy. By completing the reCAPTCHA you accept Google's terms.

5. Data processors (third parties)

We work with the following processors who may receive your data:

• Brevo (Sendinblue SAS), Paris, France — newsletter delivery. Brevo Privacy Policy →
• Payhip Ltd, London, UK — digital product sales and payment processing. Payhip Privacy Policy →
• home.pl S.A., Szczecin, Poland — website hosting. All website data is stored on servers within the European Economic Area.
• Google LLC — reCAPTCHA (anti-spam). Data may be transferred outside the EEA under Standard Contractual Clauses.

We do not sell, rent or share your personal data with any other third parties for their own marketing purposes.

6. International transfers

Your data is primarily stored and processed within the EEA. Where processors are located outside the EEA (e.g. Google), transfers take place under appropriate safeguards (Standard Contractual Clauses or adequacy decisions).

7. How long we keep your data

• Newsletter subscribers — until you unsubscribe or withdraw consent.
• Purchase records — 5 years from the date of purchase, as required by Polish accounting law.
• Contact emails — deleted within 12 months of the last correspondence.
• Server logs — up to 30 days.

8. Your rights under GDPR

As a data subject you have the right to:

• Access — request a copy of the personal data we hold about you.
• Rectification — ask us to correct inaccurate or incomplete data.
• Erasure ("right to be forgotten") — request deletion of your data where there is no overriding legal reason to retain it.
• Restriction — ask us to restrict processing in certain circumstances.
• Portability — receive your data in a structured, machine-readable format.
• Object — object to processing based on legitimate interests.
• Withdraw consent — at any time, without affecting prior processing.

To exercise any of these rights, email [email protected]. We will respond within 30 days. You also have the right to lodge a complaint with the Polish supervisory authority: Urząd Ochrony Danych Osobowych (UODO), ul. Stawki 2, 00-193 Warszawa, uodo.gov.pl.

9. Data security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss or disclosure. Our website uses HTTPS (TLS encryption) for all connections. Access to subscriber data within Brevo is protected by two-factor authentication.

10. Children's privacy

Our website and products are not directed at children under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with their data, please contact us and we will delete it promptly.

11. Changes to this policy

We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page reflects when the most recent changes were made. Continued use of our website after changes constitutes acceptance of the updated policy. For material changes affecting newsletter subscribers, we will send a notification email.

12. Contact

Data Controller: Szymon, Dr