Privacy Policy
Last updated: October 7, 2026
This page explains what DreamBerry NYC collects, why, and who else sees it. It describes what the site actually does rather than repeating a template, and we review it when the site changes.
We are DreamBerry NYC LLC, a limited liability company based in New York. "We", "us" and "our" mean DreamBerry NYC LLC.
Our guiding rule is to collect as little as possible, because data we do not hold is data we cannot lose.
What we collect
When you just browse. You do not need an account, and we do not build an analytics profile of you. We use Vercel Web Analytics for page views and performance, which is cookieless and does not follow you to other sites. Separately, hosting a website produces ordinary server request data — including your IP address — and our host records that in order to serve the site and keep it secure. We do not use it to identify you or to track what you look at.
Your shopping cart stays in your own browser's local storage while you shop. When you ask for a shipping quote at checkout, we send the items and quantities in your cart, together with the ZIP code you entered, to our own system so it can work out the box and the postage. That happens before you place an order, because the quote is what tells you the shipping cost. Nothing else about your cart is sent to us, and we do not store the quote request against you.
When you create an account. Your email address, and a name if you give one. If you sign in with Google or GitHub, we receive your email address and basic profile details from them — we never see your password for those services. If you sign in with a magic link, we send a single-use link to your email address. Accounts are required to place an order.
When you order. Payment is handled by PayPal; we never see or store your card details. From PayPal we receive and store on the order:
- your PayPal email address
- the recipient name and shipping address you chose
- PayPal's order and payment reference numbers
- what you bought, and the amount
When you contact us, we receive whatever you put in the form or the email.
Cookies and local storage
Short version: one cookie that keeps you signed in, and some storage that stays in your browser.
- Sign-in session — cookie — Keeps you logged in
- Shopping cart — browser local storage — Remembers your cart between visits
- Light/dark preference — browser local storage — Remembers how you like the site to look
- Cookie-notice choice — browser local storage — Remembers that you have seen the notice
Those are the cookies and browser storage we set. We do not use advertising or tracking cookies, and our analytics does not use cookies at all — it counts page views and load times without identifying you or following you to other sites.
We do not use the technologies listed above for advertising or cross-site tracking. PayPal, and Google or GitHub if you choose to sign in with them, may set their own cookies when you use them; their independent handling of information is described in their own privacy policies.
Do Not Track
Some browsers can send a Do Not Track signal asking a website not to track browsing activities over time and across other sites. Global Privacy Control is a different signal that communicates a choice to opt out of the sale or sharing of personal information.
We do not track visitors across other sites: no tracking cookies, no advertising pixels, and no profile that follows you around. Receiving a Do Not Track signal therefore does not change how we handle your information. We do not sell personal information or share it for cross-context behavioural advertising, so receiving a Global Privacy Control signal does not change those practices.
If that ever stops being true, this section will say so before it does.
Who else sees your information
We share information with the companies that make the shop work, as described below. We may also disclose information when required by law, in response to valid legal process, or where reasonably necessary to protect rights, safety or security.
- PayPal — Your payment details, email and shipping address — Taking payment and issuing refunds
- USPS — Recipient name, shipping address, parcel weight and size — Quoting postage and printing your label
- Amazon Web Services — Your email address and order details; shipping labels — Sending order emails, storing labels and images
- Vercel — Ordinary request data, e.g. IP address — Hosting the website
- Strapi Cloud — Your order record — Hosting the shop's catalogue and orders
- Google / GitHub — An authentication request and the account identifier, email address and basic profile details they return — Sign-in, if you use it
We do not sell your information, and we do not share it with advertisers or data brokers. There are no advertising or tracking pixels on this site.
How long we keep it
Order and sales records — invoices, receipts, and the shipping and billing details attached to an order — are kept for 7 years. That is our retention schedule, set for tax, accounting and business-record purposes. We may keep a record longer where there is an unresolved dispute or we are legally required to.
Your account stays for as long as you want it. Ask us to close it and we will delete your account and sign-in details.
Closing your account does not delete an order you have already placed: that record is kept for the 7 years above. We promptly delete account and sign-in information from our live systems, except information reasonably needed for an unresolved dispute, security or fraud prevention, or compliance with law. Copies can persist in routine backups until those are overwritten under our backup schedule.
Your choices
- See what we hold. Ask and we will tell you.
- Correct it. Your account details are editable when signed in; ask us for anything else.
- Delete it. Ask and we will delete your account and sign-in details as described above. Order records are kept under our 7-year retention schedule, subject to any longer period needed for an unresolved dispute or required by law.
- Stop emails. Order emails are part of buying something and are not marketing. We do not run a marketing list.
Email hello@dreamberrynyc.com for any of these. We may need to confirm you control the account's email address before we act on a request.
Security
Payments go through PayPal and card details never reach us. The site is served over HTTPS. Access to the shop's backoffice is restricted, and shipping labels are stored privately rather than on a public URL.
No system is perfectly secure, and we will not claim otherwise.
Children
This site is not intended for children under 13, and we do not knowingly collect information from them. You must be at least 13 to create an account. Where the purchaser is under 18, an adult must place the order using their own account. If you believe a child under 13 has given us information, email us and we will delete it.
Changes
We may update this page. The date at the top says when this version took effect. If a change materially affects how we handle information we already hold, we will say so here, and contact you where it affects your account — a new date on its own does not authorise a different use of information collected under an earlier version.
Contact
Questions about this policy, or a request about your information: hello@dreamberrynyc.com, or the contact form on our Contact Us page.
This policy applies from October 7, 2026.