Privacy Policy / プライバシーポリシー
Handling of Users’ Private Information (Privacy Policy)
Preamble
Dreams USA Inc. (hereinafter referred to as the "Company") promises to respect users’ privacy and protect users’ personal information. The Handling of Users’ Private Information (hereinafter referred to as "Privacy Policy") is to demonstrate how the Company manages users’ personal information and to notify users of their rights regarding personal privacy.
Table of Contents
Important Information and the Company
The Data We Collect
Methods of Obtaining Personal Data
Purpose of Using Personal Data
Disclosure of Users’ Personal Data
Cross-Border Data Transfer and Storage Locations
Data Security
Data Retention Period
Users’ Legitimate Rights
Glossary & Governing Language
1. Important Information and the Company
Purpose of the Privacy Policy
The purpose of the Privacy Policy is to inform users how the Company collects users’ personal data in the course of using the Sonny Angel Application (hereinafter referred to as the “Application"), the Company’s website (including online stores) or the Company’s services, and how the Company uses and processes users’ data.
In addition, the Application is not aimed at children, nor is it intended to obtain data related to children. However, if children’s data is obtained, it will be treated according to the applicable laws and regulations.
In order to help users fully understand the reasons and methods of the Company's use of personal data, we suggest users read all notices that the Company may provide apart from the Privacy Policy under special circumstances. The Privacy Policy serves as a supplement to these notices and is not intended to invalidate these notices.
Management of Users’ Personal Data
The Company is responsible for processing users’ data. In addition, the Company conveys the content of the Privacy Policy on behalf of DREAMS Group. Regarding the Privacy Policy, if you have any queries or want to exercise your rights, please consult the following contacts:
Telephone: 401-331-5729
Name of Legal Person: TORU SOEYA
Name of Company: Dreams USA Inc.
Inquiry: http://dreams6usa.com
Email: dreamsusa@dreams6.com
Address: 2 Charles St Suite 3B, Providence, RI 02904
Regarding data protection, users have the right to make a complaint with the supervisory authority at any time, but before contacting the supervisory authority, please inform the Company of your concerns. To contact our company, you can send an e-mail using the e-mail address stated in the above contacts or send a written mail to the mailing address. The Company will appropriately respond to user’s complaints in accordance with applicable laws and regulations.
Change of the Privacy Policy
The Privacy Policy was last updated on October 6, 2026.
The Company reserves the right to change the Privacy Policy at any time within the scope permitted by applicable laws. The Company will notify users of the important changes of the Privacy Policy through ways of posting on the Company’s website or other methods that the Company believes to be effective. The changed rules will take effect when they are notified to users by the method stipulated by the Company, or when they are published on the Company’s website.
In addition, users’ personal data held by the Company needs to be correct and up to date. If there is any change regarding your personal data, please contact the Company.
Third-Party Links
The Application, website, and services of the Company may contain links to websites, plug-ins, and applications of third parties. Third parties may obtain users’ data after users have clicked these links. The Company does not manage third-party websites and is not responsible for processing third-party's personal data. It is recommended that you read the privacy policy of the third party.
2. The Data We Collect
The Company can obtain, use, store, and transfer various personal data related to users as listed below:
Identity data: Includes name, username or identifier, date of birth, and gender.
Contact data: Includes request address, mailing address, email address, and phone number.
Transaction data: Includes payment to or from users, as well as details of products and services purchased by users from the Company.
CV data: Includes the user's contact information, address, and phone number in the past.
Technical data: Includes Internet protocol (IP) address, user account login data, browser type and version, time zone setting and region, browser plug-in type and version, OS, platform, the Application, and other technology required to log in to the Company’s website.
Account profile data: Includes your username and password, user’s purchases or subscriptions, user’s interests, preferences, feedback, and replies to questionnaires.
Usage data: Includes information about how users use the Company's website, products, and services.
Marketing and communication data: Includes expectations of the Company on users receiving marketing information and ways of receiving them.
In the Privacy Policy, personal data or personal information refers to personal-related information which can be used to identify the user. It does not include anonymized data in accordance with applicable laws (anonymized data). At this point, the Company is acquiring and using statistical data such as demographic data. For example, in order to calculate the proportion of users accessing certain applications or website functions, the Company will collect users’ usage data if necessary. The basic data of statistical data may be extracted from the user's personal data, but the extracted data is usually direct or indirect. Since these data cannot be used to identify the user, it is non-personal information according to laws. However, when the statistical data and the user's personal data are merged or combined in a form that can directly or indirectly identify the user, the Company will treat the merged data as personal data and process it in accordance with the Privacy Policy.
The Company will not obtain special types of personal data of users (including your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, labor unions, health information, and details of genetic data and biological data), and users’ criminal verdicts or criminal information.
In accordance with applicable laws and regulations, the Company requires that the personal data provided by users must be correct and up to date. In addition, when providing non-user data (if any), users should make sure to obtain the consent of the data owner before submitting it to the Company.
Refusal to Provide Personal Data
When the Company needs to obtain a user’s personal data according to laws, or when personal data is needed in providing the Services to the user, the Company may not be able to provide him with products or services if the user cannot provide his personal data. In this case, the Company may have to cancel the user's order; however, the Company will notify the user.
3. Methods of Obtaining Personal Data
The Company obtains users’ data through the following methods:
Direct methods of obtaining data: In the following cases, users will be required to enter their identity information, contact information, and financial data into the corresponding forms, or provide these data to the Company by express delivery, telephone calls, and emails:
Applying for the Company's products or services
Creating an account on the Company website
Ordering the Company’s services or publications
Requesting to receive marketing information from the Company
Participating in contests, promotions, or surveys
Providing feedback to the Company
Automation technology: When the user uses the Application, the Company's website, or the Company's services, the Company can automatically obtain technical data related to the user's device, reading behavior, and reading mode. The Company uses technologies such as Cookies and server logs to obtain the user’s personal data. In addition, when user visits other websites that use our Cookies, the Company may receive technical data related to that user.
Information sources available to third parties or public channels: The Company may obtain user-related personal data from various third parties, including technical data from analytics providers (e.g., Google) and search engine providers, contact/financial/transaction data from payment and delivery services, and public channels.
4. Purpose of Using Personal Data
The Company mainly uses users’ personal data within the scope of law in the following situations:
To fulfill contractual obligations to users
For the legitimate interests of the Company (or a third party), provided users’ interests and basic rights do not take precedence over the mentioned legitimate interests
To fulfill the obligations of the Company to comply with laws or administrative orders
In principle, the Company will not treat users’ consent of obtaining their personal data as the legal basis for using personal data, except for sending direct marketing information to users. Users are entitled to withdraw the consent of receiving marketing information directly from the Company at any time by contacting the Company.
Purpose and Legal Basis of the Company's Use of Personal Data (Specific Details)
(i) Purpose/Activity | (ii) Types of Data | (iii) Relevant Legal Basis Regarding Data Treatment
|
|---|---|---|
To register as a new user | (a) Identity information (b) Contact information | To fulfill the contract with users |
To process users’ orders and provide users with products/services, including: (a) Management of payment, fee and service fee (b) Withdrawal and refund of the money the Company should pay (c) Transaction information | (a) Identity information (b) Contact information (c) Transaction information | (a) To fulfill the contract with users (b) To take necessary actions for the Company’s legitimate interests (in order to collect the Company’s account receivable) |
To manage the relationship between users and the Company, including: (a) Notification on changes of the Company’s contract condition or Privacy Policy (b) To request reviews and surveys | (a) Identity information (b) Contact information (c) Profile information (d) Marketing and communication data | (a) To fulfill the contract with users (b) To comply with laws and obligations (c) To take necessary actions for the Company’s legitimate interests (to research how users use products/services) |
To enable users to participate in a lucky draw, contest, or survey | (a) Identity information (b) Contact information (c) Profile information (d) Methods of use (e) Marketing and communication data | To take necessary actions for the Company’s legitimate interests (research on usage, develop products/services, expand business) |
To manage and safeguard the Company’s business and its website (including troubleshooting, data analysis, testing, system maintenance, support, data reporting and placement) | (a) Identity information (b) Contact information (c) Technical information | (a) To fulfill legitimate interests (business operations, IT services, network security, fraud prevention, restructuring) (b) To comply with legal obligations |
Deliver relevant content and advertisements to users, and evaluate or understand the effectiveness of advertisements | (a) Identity information (b) Contact information (c) Profile information (d) Methods of use & Marketing info (e) Technical information | To fulfill legitimate interests (study product usage, develop products/services, expand business, inform marketing strategy) |
Use data analysis to improve the website, products/services, marketing, user relationships, and user capabilities | (a) Technical information (b) Methods of use | To fulfill legitimate interests (define user types, keep website updated, develop business, inform marketing strategy) |
Suggest or recommend products or services that users may be interested in | (a) Identity information (b) Contact information (c) Technical information (d) Methods of use (e) Profile information | To fulfill legitimate interests (development of products/services and business) |
Marketing
The Company focuses on marketing and promotional campaigns and makes an effort to provide users with choices related to the use of personal data. Furthermore, the Company will convey marketing campaigns and promotions of clothing, miscellaneous goods, household products, food, and other products sold by the Company and/or services provided by the Company.
In order to form the Company's unique ideas about the needs and interests of users, the Company may use data about users’ identity information, contact information, technical information, usage methods, and profile information. In this way, the Company will determine which products, services, and proposals are suitable for users (the Company defines the above-mentioned process as ‘Marketing’).
The user may request information or purchase products from the Company, or participate in a competition or register with any promotional activities. Under these circumstances, the user will receive information about market activities on condition that he does not opt out.
However, when the Company sends users advertisements and publicity of products or services, or voice mails or text messages for the purpose of making a quotation, the Company will set check boxes for users to obtain their permissions in order to comply with applicable laws and regulations.
Third Party Marketing Activities
Sometimes for the purpose of marketing, the Company may need to share users’ personal data with companies outside DREAMS Group. In addition, when sharing users’ personal data with companies in DREAMS group, the Company will obtain users' prior explicit consent in accordance with relevant laws and regulations. The Company will not sell, distribute, or lend users' personal data to third parties, unless it has users’ permission or is required by law.
Withdrawal
Users can request the Company to stop sending marketing activity information at any time through the following methods:
Through the exit link contained in the marketing activity information sent to the user, or
Contacting the company at any time.
In addition, users can also choose to join or quit through notifications in users’ online accounts.
Cookies
You can reject all or part of the browser cookies or set your browser to remind you when you visit cookies or visit websites with cookies. Please note that if users disable or refuse cookies, some websites may not be accessible or function properly.
Changes of Purposes
In principle, the Company only uses personal data for the purpose of obtaining users’ personal data. However, this shall not apply when the Company believes that it is necessary to use personal data for another purpose within the scope of applicable laws and regulations, and that purpose is consistent with or directly related to the original purpose.
5. Disclosure of Users’ Personal Data
Provide to Third Parties
Except for the following situations, the Company will not provide users’ personal data to third parties without users’ consent:
When required by laws or administrative orders
When necessary to protect human life, body, or property, and obtaining consent is difficult
When necessary for the urgent purpose of improving public health or promoting health education for children, and obtaining consent is difficult
When a state agency, local public organization, or an entrusted person needs assistance in the execution of affairs stipulated by law, and obtaining consent may cause obstacles to the execution of such affairs
Supervise the Assignees
In system development, maintenance, and other business, the Company shall entrust all or part of the business of personal data processing to a third party within the scope of the purpose of use. In this case, the Company will judge and select a third party that is considered able to handle personal information properly based on security management capabilities. The Company will regulate terms on security management, confidentiality, conditions of re-entrustment, and other issues in the contract, monitor processing, and implement necessary supervision.
Common Use
For the purposes described in "Article 4: Purpose of Using Personal Data", the Company will use the personal data provided by users together with other companies in the Group if necessary.
Items of personal data for common use: IP address
Purposes of common use:
Convey content and advertisements of related websites to users, evaluate or understand the effectiveness of advertisements
Improve the Company’s website, products/services, marketing, user relationships, and user experience using data analysis
Responsible person in common use of personal data: Dreams USA Inc.
The Company requires third parties to respect the security of users' personal data and process data in accordance with the law. Third-party service providers are not allowed to use personal data for their own purposes, and may only process personal data for specific purposes under the Company's instructions.
6. Cross-Border Data Transfer and Storage Locations
The Company stores and handles users' personal data on cloud servers (such as Amazon Web Services, hereinafter referred to as "AWS") located in Japan and other countries/regions for the purpose of providing Application services and maintaining proper data operations.
(1) Storage Location of Authentication Information
Authentication information (email address and phone number) acquired for the purpose of preventing duplicate account registration and fraudulent use is, in principle, centrally stored and managed on AWS servers located in Japan.
(2) Storage Location of Purchase and Application Data & Cross-Border Transfer
Personal data such as purchase history, shipping addresses, phone numbers, and point item application history linked to official online stores are stored on AWS servers located in the region corresponding to the online store hub selected by the user (Japan, US, Hong Kong, Philippines, etc.). (※ Purchase and application data for users linking to the US Store is stored on AWS servers designated for the US region).
(3) Security Management Measures and Access Rights
The Company implements statutory protective measures when transferring and storing data on foreign servers. Data inquiries and access rights across different regional server environments are strictly limited to authorized senior management and designated administrators necessary for business operations.
7. Data Security
The Company is taking appropriate technical and organizational measures to prevent users’ personal data from accidental loss, improper use, improper access, modification, or disclosure.
In particular, granting access rights to personal data and online store integration data spanning different regional servers is restricted solely to essential operational personnel, and cross-regional data access is strictly limited to authorized senior management.
8. Data Retention Period
The Company will store users’ personal data for the period required to achieve the purpose of obtaining personal data, or for the period required to perform legal obligations. The Company usually keeps a user’s personal data for 2 years following the date when the user withdraws from membership. Under certain circumstances, the Company will anonymize users for research or statistical purposes, in which case the data may be retained indefinitely without additional notice.
The Company will store or keep obtained personal data in electromagnetic form on Company or third-party contracted servers.
In accordance with applicable laws and regulations, the Company will promptly discard personal information when the retention period has elapsed or processing purposes are fulfilled. Electronic files are deleted permanently so they cannot be restored, and paper records are shredded or incinerated.
9. Users' Legitimate Rights
Under certain special circumstances, users have the right to process their personal data in accordance with laws related to personal information, including requesting access, amendment, addition, deletion, or suspension of use of their personal data.
Users do not need to pay fees when accessing their personal data (or exercising other rights). However, if the user's request is unclear or not based on facts, or the user makes repeated or excessive requests, the Company can request a reasonable fee or reject the request subject to applicable laws.
Information That May Be Required
Before responding to a user's request, the Company may need to request specific information from the user to assist in identity verification as part of security measures.
Time Required for Response
The Company will try its best to respond to all requests within one month upon receipt. If requests are complicated or excessive, it may take more than one month, in which case the Company will notify the user.
10. Glossary & Governing Language
Legal Basis
Legitimate interests: Refers to the Company's interest in operating and managing businesses in order to provide users with the highest quality services, products, and the safest experience.
Performance of contractual obligations: Means taking necessary countermeasures at the user's request to perform contractual obligations under a contract to which the user is a party.
Compliance with laws and obligations: Refers to the processing of personal data required by laws and regulatory obligations which the Company must abide by.
Internal third party: Refers to a person who acts as a manager or processor in other companies of DREAMS Group and provides IT system management and services.
Cookie: Refers to a small text file sent from a web server to the browser of a computer or mobile device and saved on the hard drive.
Users' Rights
Access to personal data: Users can request a copy of their personal data held by the Company to confirm lawful processing.
Amendment of personal data, etc.: Users can request amendments, additions, or deletion of incomplete or incorrect data.
Suspension of use of personal data, etc.: Users may request suspension of use, deletion, or suspension of third-party provision if data is processed or provided unlawfully.
Governing Language
This Privacy Policy uses Japanese as the main and governing text. In the event of any discrepancy, inconsistency, or conflict of interpretation between any translated version (including this English version) and the Japanese version, the Japanese version shall prevail and govern in all respects.