Privacy Policy
Last updated: April 22, 2026
1. Who We Are
Dreamspaces ("we", "us", or "our") is a B2B AI-powered customer experience intelligence service operated by Guillermo Morales, based in Spain. We can be reached at guillermo@dreamspaces.es or via our website at dreamspaces.es. This Privacy Policy explains how we collect, use, and protect personal data in accordance with the EU General Data Protection Regulation (GDPR) and applicable Spanish law.
2. Data We Collect
We may collect the following types of personal data: (a) Contact information — name, business email address, company name, job title, and LinkedIn profile, sourced from publicly available directories or business databases such as Apollo.io; (b) Interaction data — records of email communications, open rates, and replies; (c) Website data — IP address, browser type, and cookies when you visit dreamspaces.es (see Section 9); (d) Information you voluntarily provide via our contact form or demo request.
3. How We Use Your Data
We use your personal data to: (a) send outreach emails about our services; (b) respond to your enquiries and fulfil service agreements; (c) manage our client relationships and deliver our AI CX Intelligence services; (d) comply with our legal obligations; and (e) improve our website and marketing activities. All marketing emails include a clear and easy one-click unsubscribe option.
4. Legal Basis for Processing (GDPR)
We process your data under the following GDPR Article 6 legal bases: (a) Legitimate interests (Art. 6(1)(f)) — for B2B cold outreach to professionals whose contact info is publicly available and whose role is relevant to our services. You may object at any time; (b) Contractual necessity (Art. 6(1)(b)) — where processing is required to deliver services you have engaged us for; (c) Consent (Art. 6(1)(a)) — where you have explicitly provided consent via our website; (d) Legal obligation (Art. 6(1)(c)) — where required by applicable law.
5. Email Communications & Unsubscribe
Every marketing or outreach email we send includes a visible, one-click unsubscribe link compliant with CAN-SPAM and GDPR requirements. Upon receiving an unsubscribe request, we will remove your address from our active mailing lists within 10 business days and add it to our permanent suppression list. You may also opt out at any time by emailing guillermo@dreamspaces.es with the subject "Unsubscribe".
6. Data Processors & Third Parties
We use carefully selected third-party processors who assist us in operating our business, including: Instantly.ai (email campaign delivery), Apollo.io (contact data sourcing), Framer (website hosting), and Notion (internal documentation). All processors are required to handle data in compliance with GDPR under appropriate data processing agreements. We do not sell your personal data to third parties.
7. Data Retention
We retain personal data only as long as necessary: outreach contact data is retained for up to 2 years from the date of last interaction; client data is retained for 5 years following the end of a service agreement, in line with Spanish commercial law; suppression list data (opted-out contacts) is retained indefinitely to honour your opt-out request.
8. Your Rights Under GDPR
If you are in the EU or UK, you have the right to: (a) access — request a copy of data we hold about you; (b) rectification — correct inaccurate data; (c) erasure — request deletion of your data; (d) restriction — limit our processing; (e) portability — receive your data in a machine-readable format; (f) object — object to processing based on legitimate interests or direct marketing; (g) withdraw consent — where processing is consent-based. To exercise any right, email guillermo@dreamspaces.es. You may also lodge a complaint with Spain's data protection authority, the AEPD, at www.aepd.es.
9. Cookies
Our website uses cookies to function properly and to analyse usage. For full details on the cookies we use and how to manage your preferences, please see our Cookie Policy at dreamspaces.es/cookies.
10. International Data Transfers
Some third-party processors (such as Apollo.io and Instantly.ai) may process data outside the European Economic Area. Where this occurs, we ensure adequate safeguards are in place, including Standard Contractual Clauses (SCCs) approved by the European Commission, to protect your data in compliance with GDPR Chapter V.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The "Last updated" date at the top of this page always reflects the most recent version. We encourage you to review this page periodically. For material changes, we will endeavour to notify affected users by email where possible.
12. Contact
Questions about this Privacy Policy? Contact us: Dreamspaces · Guillermo Morales · Email: guillermo@dreamspaces.es · Website: dreamspaces.es