Privacy policy

PRIVACY POLICY
of
Made and Co, Inc. dba Dream Plus Air

Website: https://www.dreamplusair.com/
Company: Made and Co, Inc. dba Dream Plus Air (“Dream Plus Air”)
Registered Jurisdiction: California, United States
Effective Date: 5^th December 2025

1. Introduction and Scope

1.1 This Privacy Policy (“Policy”) explains how Dream Plus Air (“Dream Plus Air,” “we,” “us,” or “our”) collects, uses, discloses, and protects personal information when you:

• visit or use our website at www.dreamplusair.com (the “Website”),
• purchase our themed balloon arch kits and balloon accessories,
• engage with our marketing or social media, or
• otherwise interact with us (together, the “Services”).

1.2 This Policy applies to individuals (“you,” “your”) located in the United States and internationally, subject to any mandatory local laws that apply in your jurisdiction.

1.3 Our separate Cookie Policy describes in detail how we use cookies, pixels, and similar technologies. This Policy should be read alongside our Cookie Policy and our Terms and Conditions.

1.4 By accessing or using the Services, you acknowledge that you have read and understood this Policy. If you do not agree with this Policy, you must discontinue use of the Services.

1.5 Compliance with U.S. Federal & State Privacy Laws.

Where applicable, we comply with United States privacy laws, including the California Consumer Privacy Act (CCPA) as amended by the CPRA, the California Online Privacy Protection Act (CalOPPA), and similar privacy laws in other U.S. states (such as Colorado, Connecticut, Virginia, and Utah). These laws may provide you with additional rights, including the right to know, delete, correct, and opt out of certain uses of personal information. Your rights under these laws are described in Section 14 of this Policy and in our Cookie Policy.

2. Controller and Key Roles

2.1 Data Controller. For most processing activities described in this Policy, the data controller is:

Made and Co, Inc. dba Dream Plus Air
California, United States

This means we determine how and why your personal information is processed.

2.2 Service Providers (Processors). We engage third-party service providers who process personal information on our behalf and in accordance with our instructions (for example, Shopify, payment processors, analytics providers, and shipping carriers).

2.3 Local Applicability. Depending on where you reside, you may have additional rights or protections under local law. Where such laws apply and cannot be limited by contract, we will respect them.

3. Information You Provide Directly

We may collect the following categories of personal information directly from you:

3.1 Contact and Identity Details.

• Name, email address, phone number, billing and shipping address.

3.2 Order and Transaction Data.

• Products ordered (e.g., balloon arch kits, balloon accessories), order value, quantities, discounts used, purchase history, and chosen shipping method.

3.3 Payment-Related Information.

• Payment method type and limited payment details (such as masked card numbers or transaction identifiers). Full card details are typically processed directly by our payment processors, not stored by Dream Plus Air.

3.4 Account Information (if applicable).

• Username, password, saved addresses, and preferences if you create an account on the Website.

3.5 Communications and Support.

• Content of messages you send us (e.g., event questions, product queries, complaints, feedback), and any information you include in those communications.

3.6 Event and Customization Details (if applicable).

• Event type (e.g., birthday, baby shower, wedding), colours or themes you prefer, and any additional details you choose to share when asking for recommendations or support.

You are not required to provide all of this information, but if you choose not to, some features of the Services may be unavailable or limited.

4. Information Collected Automatically

When you use the Services, we and our partners may automatically collect certain information from your device and usage:

4.1 Device and Technical Data.

• IP address, browser type and version, device type, operating system, language settings, and similar technical identifiers.

4.2 Usage and Interaction Data.

• Pages visited, content viewed, time and date of visits, duration on page, click paths, referring URLs, search terms used on the Website, cart actions (e.g., add-to-cart, abandoned carts).

4.3 Approximate Location.

• Approximate geographic location inferred from IP address (for example, city, region, country), primarily for analytics, fraud prevention, and localization.

4.4 Log and Diagnostic Information.

• Logs relating to Website performance, security events, error messages, and other diagnostic information.

This information is typically collected using cookies, pixels, and similar technologies, as described in Section 8 and our Cookie Policy.

5. Information from Third Parties

We may receive personal information about you from third parties in the following contexts:

5.1 E-Commerce and Payment Platforms.
From Shopify and payment processors we may receive:

• confirmation of payment status,
• limited card or token details,
• fraud risk and anti-abuse signals, and
• transaction identifiers.

5.2 Shipping and Logistics Providers.
From carriers and logistics partners we may receive:

• tracking numbers and status updates,
• delivery confirmations,
• notifications of failed delivery or return to sender.

5.3 Analytics and Advertising Partners.
From tools such as Google Analytics, Meta (Facebook) Pixel, and Pinterest Tag, we may receive aggregated or pseudonymised information about how users interact with our Website and our advertisements.

5.4 Social Media Platforms.
If you interact with our social media pages, ads, or content, we may receive your username, public profile information, and details of interactions, subject to your settings on those platforms.

6. How We Use Personal Information

We use personal information for the following purposes, only to the extent permitted by applicable law:

6.1 To Provide and Operate the Services.

• Processing and fulfilling your orders, arranging shipment, and providing order confirmations and updates.

6.2 Customer Service and Support.

• Responding to your questions, event-related queries, and complaints; helping you select products; and handling any issues with orders, delivery, or quality.

6.3 Operating and Improving the Website.

• Running, maintaining, and enhancing the Website, including troubleshooting, testing, and optimizing user experience, product layout, and navigation.

6.4 Analytics and Performance.

• Using analytics tools to understand how users move through the Website, which products are popular, and how campaigns perform, to refine our offerings and marketing.

6.5 Marketing and Promotions.

• Sending marketing communications (where permitted) about new themes, seasonal collections, offers, and promotions; tailoring marketing messages to your preferences and prior interactions with Dream Plus Air.

6.6 Personalization.

• Remembering your preferences (such as preferred event types or colour palettes), saving cart contents, and suggesting products that may be relevant to your interests.

6.7 Security, Fraud Prevention, and Legal Compliance.

• Detecting and preventing fraud, misuse, or unauthorized access; protecting our systems and customers; complying with legal obligations; and responding to lawful requests from authorities.

6.8 Other Purposes with Your Consent.

• Any additional purpose clearly explained at the time of collection where we request and receive your consent, to the extent required by law.

6.9 CAN-SPAM Compliance.

If we send marketing emails, we do so in compliance with the CAN-SPAM Act, including providing accurate sender information, a valid postal address, and clear instructions on how to opt out of marketing communications.

7. Legal Bases for Processing (EEA/UK and Similar Jurisdictions)

Where European, UK, or similar data protection laws apply, we rely on the following legal bases for processing personal information:

7.1 Performance of a Contract.
To process and deliver your orders, manage your account, and fulfill any contractual obligations between you and Dream Plus Air.

7.2 Legitimate Interests.
To operate and improve our business; prevent fraud; ensure the security of our Website; understand how customers use our Services; and market to existing customers, where such interests are not overridden by your rights and interests.

7.3 Consent.
For certain cookies, analytics tools, and direct marketing communications where the law requires consent. You may withdraw your consent at any time without affecting the lawfulness of processing based on consent before withdrawal.

7.4 Legal Obligations.
To comply with legal requirements, such as maintaining proper business records, tax documentation, and responding to lawful requests or court orders.

8. Cookies, Pixels, and Similar Technologies

8.1 We use cookies, pixels, tags, scripts, and similar technologies (“Cookies”) on the Website to:

• enable core store and checkout functionality (including through Shopify),
• keep track of items in your basket and your session,
• understand traffic and usage (via Google Analytics),
• measure and improve advertising (via Meta/Facebook Pixel and Pinterest Tag), and
• support personalization and performance improvements.

8.2 Some Cookies are strictly necessary for the Website to function; others are used for analytics or advertising. In regions where required by law (such as the EEA or UK), we will seek your consent before setting non-essential Cookies.

8.3 For detailed information about the Cookies we use, the partners involved, and your options to manage them (including browser controls, consent tools, and opt-outs), please refer to our Cookie Policy.

9. How We Share Personal Information

We may share personal information with the following categories of recipients, each only to the extent reasonably necessary:

9.1 Service Providers (Processors).
Third-party vendors who support our operations, including:

• Shopify and other e-commerce/hosting providers,
• payment processors,
• shipping carriers and logistics providers,
• IT, security, and infrastructure providers,
• email and marketing platforms, and
• analytics and advertising partners.

9.2 Business Partners.
Limited sharing with advertising and social media partners to measure and improve our campaigns and, where permitted, to deliver more relevant ads.

9.3 Legal and Regulatory Recipients.
Courts, regulators, law enforcement authorities, or other third parties where we believe disclosure is necessary to comply with applicable law, enforce our terms, or protect the rights, property, or safety of Dream Plus Air, our customers, or others.

9.4 Corporate Transactions.
Actual or prospective purchasers, successors, or affiliates in connection with a merger, acquisition, restructuring, or other corporate transaction, subject to appropriate confidentiality and safeguards.

9.5 With Your Consent.
Any other sharing where you have expressly consented at the time of disclosure.

We do not sell your personal information in the ordinary sense of the term. Where certain uses of Cookies or advertising identifiers are treated as a “sale” or “sharing” under applicable law (for example, in California), your rights and choices are described in Section 14 and in our Cookie Policy.

10. International Data Transfers

10.1 The Services are operated from the United States, and personal information may be transferred to and processed in the United States and other countries where our service providers and business partners operate.

10.2 Where your local data protection laws require specific safeguards for cross-border transfers, we will implement appropriate measures, such as standard contractual clauses or equivalent protection mechanisms, to protect your personal information.

10.3 If you would like more information about these safeguards, you may contact us using the details in Section 18.

11. Data Retention

11.1 We retain personal information only for as long as reasonably necessary to fulfill the purposes for which it was collected, including to:

• provide the Services and complete transactions,
• maintain your account (if applicable),
• comply with legal, tax, and accounting obligations, and
• resolve disputes and enforce our agreements.

11.2 Specific retention periods vary according to the type and context of the data. For example:

• Order and transaction data is typically retained for the period required by tax and accounting laws.
• Customer service communications are retained for as long as necessary to manage your inquiry and maintain appropriate records.
• Marketing-related data is retained until you opt out or until the data is no longer useful, subject to technical and backup constraints.

11.3 We may anonymise or aggregate personal information so that it can no longer be associated with you. We may retain such anonymised or aggregated information for a longer period for analytics, business planning, or statistical purposes.

12. Security of Personal Information

12.1 We implement reasonable technical, organizational, and administrative measures designed to protect personal information under our control from unauthorized access, destruction, loss, alteration, or misuse.

12.2 Despite our efforts, no system or transmission can be guaranteed to be completely secure. You are responsible for maintaining the confidentiality of your account credentials and for notifying us promptly if you suspect any unauthorized access to or use of your account or information.

13. Children’s Privacy

13.1 Our Products are designed for events that often involve children, but the Services and the Website are intended for adults (such as parents, guardians, and event organizers) and are not directed to children under the age of 13.

13.2 We do not knowingly collect personal information directly from children under 13. If we become aware that a child under 13 has provided personal information through the Services without appropriate consent, we will take steps to delete such information as required by law.

13.3 If you are a parent or guardian and believe a child has provided us with personal information inappropriately, please contact us using the details in Section 18.

13.4 COPPA Compliance Statement.

We comply with the Children’s Online Privacy Protection Act (COPPA). If we become aware that we have collected personal information from a child under 13 without verifiable parental consent, we will delete such information as required by COPPA. Parents or guardians may contact us using the details in Section 18 to request review or deletion of any information that may have been collected from a child.

14. Your Privacy Rights – United States (Including California)

If you are a resident of California or another U.S. state with similar privacy laws, you may have some or all of the following rights, subject to legal conditions and limitations:

14.1 Right to Know / Access.
To request information about the personal information we have collected about you, including the categories and specific pieces of personal information, sources, purposes, and categories of recipients.

14.2 Right to Delete.
To request deletion of personal information we hold about you, subject to certain exceptions (for example, where we must retain information to complete a transaction, detect security incidents, comply with legal obligations, or for other permitted purposes).

14.3 Right to Correct.
To request that we correct inaccurate personal information we maintain about you.

14.4 Right to Opt Out of Certain Data Uses.
Where our use of Cookies or other identifiers is deemed a “sale” or “sharing” of personal information under applicable law, you may have the right to opt out of such activities via the tools described in our Cookie Policy and any “Do Not Sell or Share My Personal Information” mechanism we may provide.

14.5 Right to Non-Discrimination.
We will not discriminate against you for exercising any of your privacy rights under applicable law, though we may offer different pricing or benefits that are reasonably related to the value of your personal information where permitted.

14.6 How to Exercise U.S. Privacy Rights.
You may exercise your rights by contacting us using the details in Section 18 and specifying that you are making a U.S. / California privacy rights request. We may need to verify your identity and may request additional information to do so. You may also designate an authorized agent, subject to verification requirements.

15. Your Privacy Rights – EEA, UK and Similar Jurisdictions

If you are located in the European Economic Area, the United Kingdom, or another jurisdiction with similar data protection laws, you may have the following rights, subject to conditions and exceptions:

15.1 Right of Access.
To obtain confirmation as to whether we process personal information about you and to receive a copy.

15.2 Right to Rectification.
To request correction of inaccurate or incomplete personal information.

15.3 Right to Erasure.
To request deletion of personal information in certain circumstances, such as where it is no longer needed for the purposes for which it was collected or you have withdrawn consent and there is no other legal basis.

15.4 Right to Restrict Processing.
To request that we restrict processing of your personal information in certain situations.

15.5 Right to Data Portability.
To receive personal information you have provided to us in a structured, commonly used, machine-readable format and to have it transmitted to another controller where technically feasible.

15.6 Right to Object.
To object to certain processing activities, including where we rely on legitimate interests as the legal basis, and to object at any time to processing for direct marketing purposes.

15.7 Right to Withdraw Consent.
Where processing is based on your consent, to withdraw that consent at any time, without affecting the lawfulness of processing prior to withdrawal.

15.8 Right to Lodge a Complaint.
To lodge a complaint with a data protection authority in your place of residence, place of work, or place of the alleged infringement.

16. Marketing Communications and Advertising Choices

16.1 Email and Other Direct Marketing.
Where permitted by law, we may send you marketing communications about new product themes, promotions, and updates. You can opt out of marketing emails at any time by using the “unsubscribe” link in our emails or by contacting us.

16.2 Transactional Messages.
Even if you opt out of marketing, we may still send you non-marketing communications relating to your orders, account, or updates to our terms and policies.

16.3 Advertising and Analytics Preferences.
You can manage some advertising and analytics preferences through:

• our Cookie Policy and any consent tools on the Website,
• your browser and device settings, and
• platform-specific controls (for example, Google, Meta/Facebook, Pinterest).

Where applicable, we will also honor eligible Global Privacy Control (GPC) signals as required by law.

16.4 California Do Not Track (CalOPPA).
Some browsers send a “Do Not Track” (DNT) signal. Because no industry standard currently governs how to respond to DNT signals, we may not respond to all such signals. Instead, we provide alternative means to control Cookies and advertising preferences as described in this Policy and our Cookie Policy.

16.5 Global Privacy Control (GPC) Signals.
Where required by law, including under the California Consumer Privacy Act as amended by the CPRA, we will honor valid Global Privacy Control (GPC) signals as an opt-out request relating to the “sale” or “sharing” of personal information for cross-context behavioral advertising.

17. Changes to This Privacy Policy

17.1 We may update this Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other operational reasons.

17.2 When we make material changes, we will update the Effective Date at the top of this Policy and may provide additional notice (for example, via a prominent notice on the Website or direct communication, where required).

17.3 Your continued use of the Services after the Effective Date of an updated Policy constitutes your acknowledgment of the updated Policy.

18. Contacting Us

18.1 If you have any questions about this Policy, our privacy practices, or wish to exercise your privacy rights, you may contact us at:

Email: hello@dreamplusair.com
Postal Address: 14747 Artesia Blvd 3A, La Mirada CA, 90638
Made and Co, Inc. dba Dream Plus Air

California, United States

18.2 We will review and respond to your request within a reasonable period and in accordance with applicable law.