Effective date: 1 October 2026
Dreamy Creative Company (源夢創意公司, “DreamyCreative”, “we”, “us”) respects your privacy. This Privacy Policy explains how we collect, use, share and protect personal data through our website dreamycreative.com, our marketing services, and our WhatsApp business messaging platform (the “Messaging Platform”). We handle personal data in accordance with the Personal Data (Privacy) Ordinance (Cap. 486) of Hong Kong.
1. Who we are
Dreamy Creative Company
Flat/Rm 702, 7/F, Kowloon Building, 555 Nathan Road, Mong Kok, Kowloon, Hong Kong
Email: info@dreamycreative.com
Phone: +852 6440 1547
2. Personal data we collect
- Information you give us: your name, company, email address, phone number and the content of messages you send us through our contact form, email, phone or WhatsApp.
- Client account information: if you use our services or the Messaging Platform, we collect account details such as the names and email addresses of your users, your business details and billing information.
- Messaging data processed for our clients: when a business uses our Messaging Platform, we process the WhatsApp phone numbers, profile names, messages, media, opt in and opt out records and message delivery status of that business’s customers.
- Technical data: IP address, browser type, device information, pages visited and cookies when you visit our website.
3. How we use personal data
- To respond to enquiries and provide our marketing, design and event services.
- To operate the Messaging Platform for our clients, including sending and receiving WhatsApp messages, managing templates, running broadcasts to customers who have opted in, and showing delivery and read reports.
- To manage client accounts, billing and customer support.
- To keep our services secure, prevent misuse and comply with legal obligations.
- To improve our website and services.
We do not sell personal data. We will not use your personal data for direct marketing unless you have given your consent, and you may withdraw that consent at any time.
4. WhatsApp and Meta
The Messaging Platform connects to the WhatsApp Business Platform (Cloud API) provided by Meta Platforms, Inc. and its affiliates. Messages sent and received through the Messaging Platform are transmitted through Meta’s systems and are also subject to the WhatsApp Business Policy and WhatsApp Privacy Policy. When a business connects its WhatsApp Business Account to our platform, it authorises us to access that account only to provide the services it has requested.
For messaging data processed on behalf of a client business, that business is the data user and decides why and how the data is used. We act as its data processor and follow its instructions. Clients are responsible for obtaining their customers’ consent before sending marketing messages. Any recipient can stop marketing messages at any time by replying “STOP” or “取消”.
5. Sharing of personal data
We share personal data only with:
- Meta Platforms, Inc. and WhatsApp, to deliver messages through the WhatsApp Business Platform.
- Service providers who help us run our business, such as web hosting, cloud servers, email and payment providers, under confidentiality obligations.
- Our clients, for messaging data that belongs to them.
- Government or regulatory authorities where required by law.
6. Transfer outside Hong Kong
Our service providers, including Meta, may store or process personal data in locations outside Hong Kong. We take reasonable steps to ensure that personal data transferred outside Hong Kong is protected to a standard comparable to this Privacy Policy.
7. Data retention
We keep personal data only as long as necessary for the purposes above. Messaging data is kept for as long as the client account is active, or until the client asks us to delete it. Technical webhook logs are kept for up to 30 days. When personal data is no longer needed, we delete or anonymise it.
8. Security
We use reasonable technical and organisational measures to protect personal data, including encrypted connections (HTTPS), encryption of access tokens, access controls by user role and regular backups. No method of transmission or storage is completely secure, but we work to protect your data against unauthorised access, loss or misuse.
9. Cookies
Our website uses cookies to make the site work, remember your language preference and understand how visitors use the site. You can disable cookies in your browser settings, but some parts of the site may not work properly.
10. Your rights and data deletion
Under the Personal Data (Privacy) Ordinance, you have the right to ask whether we hold your personal data, to request a copy of it, and to ask us to correct it. You may also ask us to delete your personal data or stop sending you marketing messages.
To make a request, email info@dreamycreative.com with the subject “Data Request” and include your name and the phone number or email address linked to your data. If your data was collected by one of our client businesses through the Messaging Platform, we will pass your request to that business and help it respond. We will reply within 40 days. We may charge a reasonable fee for a data access request as permitted by law.
11. Children
Our services are intended for businesses and are not directed at children. Where a client sends messages to parents or guardians, the client is responsible for obtaining the necessary consent.
12. Changes to this policy
We may update this Privacy Policy from time to time. The latest version will always be posted on this page with its effective date.
13. Contact us
If you have any questions about this Privacy Policy or our handling of personal data, please contact us at info@dreamycreative.com or +852 6440 1547.
If there is any inconsistency between the English and Chinese versions of this Privacy Policy, the English version shall prevail.