1. Who we are
Craft Dream Productions is a trademark of Serenity Approach, Lda. (VAT PT513563598), with registered address at Rua do Industrial 9, 4590-079 Carvalhosa, Paços de Ferreira, Portugal (“we”, “us”). Serenity Approach, Lda. is the controller responsible for processing your personal data.
We respect your privacy and are committed to protecting your personal data. This policy explains what personal data we collect, why we collect it, how we use and store it, and what rights you have.

2. Information we collect
Information you provide to us. When you contact us, sign up for our newsletter, take part in a contest, promotion or survey, or otherwise use our services, we collect the data you submit, such as your name, e-mail address and any other information you choose to share with us.
Information collected automatically. Like most websites, we collect technical data through server logs and similar technologies, including your IP address, internet service provider, browser type, the pages you visit and the duration of your visit.

3. How we use your information and our legal basis
We use your personal data for the following purposes:
Responding to your enquiries and providing customer service. Our legal basis is our legitimate interest in answering you, or taking steps at your request before entering into a contract.
Processing orders and sending related communications. Our legal basis is the performance of a contract.
Running contests, promotions and surveys. Our legal basis is your consent, or the performance of the terms of the contest or promotion.
Improving our website, content and services. Our legal basis is our legitimate interest in improving our services.
Sending newsletters and marketing communications about our services. Our legal basis is your consent. You can withdraw it at any time by using the unsubscribe link in any e-mail or by contacting us.
Complying with legal obligations, such as tax and accounting requirements. Our legal basis is legal obligation.
Detecting and preventing fraud and security issues. Our legal basis is our legitimate interest in protecting our business and our users.
We will only send you marketing e-mails if you have agreed to receive them. Where we rely on your consent, you may withdraw it at any time, without affecting the lawfulness of the processing carried out before you withdrew it.

4. Sharing your information
We do not sell or rent your personal data. We only share it in the following limited circumstances:
Service providers. We share data with trusted companies that process it on our behalf, such as website hosting, e-mail, analytics and delivery providers. They may only process your data on our instructions and in line with this policy and appropriate confidentiality and security measures.
Legal and safety reasons. We share data with public authorities or other parties where we believe in good faith that this is required to comply with applicable law, regulation, legal process or an enforceable governmental request; to enforce our terms; to detect, prevent or address fraud, security or technical issues; or to protect the rights, property or safety of Craft Dream Productions, our users or the public.
Business transfers. If Serenity Approach, Lda. is involved in a merger, acquisition or sale of all or part of its assets, your data may be transferred to the other party. We will keep it confidential and notify you before it becomes subject to a different privacy policy.

5. International transfers
Some of our service providers may process data outside the European Economic Area. Where this happens, we ensure that appropriate safeguards are in place, such as an adequacy decision by the European Commission or Standard Contractual Clauses.

6. How long we keep your data
We keep your personal data only for as long as necessary for the purposes described in this policy, or as required by law. For example, we keep order and invoicing data for the period required by Portuguese tax and accounting law, and we keep newsletter subscription data until you unsubscribe or withdraw your consent. When data is no longer needed, we delete or anonymise it.

7. Security
We take reasonable technical and organisational measures to protect your personal data against unauthorised access, loss or misuse, including regular internal reviews of how we collect, store and process information, and physical security measures.
However, no internet or e-mail transmission is completely secure or error-free. E-mails sent to or from us may not be secure, so please avoid sending sensitive information by e-mail.

8. Cookies
Our website uses cookies and similar technologies to make it work properly and to understand how it is used. Except for strictly necessary cookies, we only use cookies with your consent, which you can give, refuse or change at any time through our cookie banner. You can also control or delete cookies through your browser settings.

9. Your rights
Under the General Data Protection Regulation (GDPR), you have the right to:
access the personal data we hold about you;
correct inaccurate or incomplete data;
request the deletion of your data, where applicable;
restrict the processing of your data;
object to processing based on our legitimate interests, and to direct marketing at any time;
receive your data in a structured, commonly used format (data portability);
withdraw your consent at any time, where processing is based on consent.
To exercise any of these rights, contact us at info@craftdp.com. We will respond within one month.
You also have the right to lodge a complaint with the Portuguese data protection authority, the Comissão Nacional de Proteção de Dados (CNPD): www.cnpd.pt.

10. Changes to this policy
We may update this policy from time to time to reflect changes in our practices or legal requirements. The latest version will always be available on this page, with the date of the last update shown at the top. Where the law requires it, we will ask for your consent again.

11. Contact
If you have any questions about this policy or about how we process your personal data, contact us at info@craftdp.com.