Privacy Policy

Privacy and Data Protection Policy (EU GDPR Compliant)

Effective Date: May 1st, 2025
Applies to: European Union Residents

While this policy is designed to meet the requirements of the General Data Protection Regulation (GDPR) for European Union residents, DreamScape AI is equally committed to complying with all relevant privacy and data protection laws in the jurisdictions in which we operate, including those in the United States, Australia, Canada, the United Kingdom, and others.

1. Introduction

At DreamScape AI, your privacy and the protection of your personal data are of the utmost importance. This Privacy Policy outlines how we collect, use, store, and protect your personal information in accordance with the General Data Protection Regulation (GDPR) (EU Regulation 2016/679).

By submitting your assessment on our platform, you explicitly consent to the collection and processing of your personal data as described in this policy.

2. Who We Are

Data Controller:
DreamScape AI a brand name owned by
Neuro Change Institute Pty Ltd

427 South Rod Moorabbin Victoria 3189
info@neurochangeinstitute.org

We are the legal entity responsible for determining the purposes and means of processing your personal data.

3. What Personal Data We Collect

To deliver your personalized assessment and support your personal development journey, we collect the following:

  • First Name
  • Email Address
  • Responses to five specific self-assessment questions

We do not collect or process special categories of personal data (such as health data, racial or ethnic origin, political opinions, etc.).

4. Purpose and Legal Basis for Processing

Your personal data is processed for the following specific purposes:

  • To generate your personalized assessment report
  • To automatically generate a Case Report based on your responses
  • To share that Case Report with a certified Neuro Change Practitioner for tailored support

The legal basis for this processing is your explicit consent, as required under Article 6(1)(a) of the GDPR. You provide this consent when you check the required box and submit your responses.

5. Data Sharing and Disclosure

Your Case Report is automatically and securely shared with a certified Neuro Change Practitioner as part of the DreamScape AI experience. This is a core part of the service you are opting into by submitting your responses.

We do not sell, rent, or otherwise disclose your personal data to any third parties for marketing purposes.

6. Data Retention

We retain your data only as long as necessary to fulfill the purposes described above:

  • Your assessment data and Case Report are stored securely for up to 90 days unless you withdraw your consent earlier.
  • After that period, data may be anonymized for research and service improvement, or permanently deleted.

7. Your Rights Under the GDPR

As a resident of the European Union, you have the following rights under the GDPR:

  • Right to Access – You can request a copy of the data we hold about you.
  • Right to Rectification – You can request that we correct inaccurate or incomplete data.
  • Right to Erasure (“Right to be Forgotten”) – You can request that we delete your data, subject to applicable legal obligations.
  • Right to Withdraw Consent – You can withdraw your consent at any time.
  • Right to Data Portability – You may request a copy of your data in a structured, machine-readable format.
  • Right to Lodge a Complaint – You may file a complaint with your local Data Protection Authority.

To exercise any of these rights, please contact us at info@neurochangeinstitute.org

8. Data Security

We implement industry-standard physical, administrative, and technical safeguards to protect your personal data from unauthorized access, loss, misuse, or disclosure. This includes:

  • End-to-end encryption of submitted data
  • Access controls and authentication protocols
  • Regular review of data handling policies

9. International Transfers

While our systems are hosted securely, some data may be stored or processed outside the European Economic Area (EEA). In such cases, we ensure that adequate safeguards (such as Standard Contractual Clauses) are in place to protect your personal data in compliance with GDPR requirements.

10. Automated Decision-Making and Profiling

We do not use your personal data for automated decision-making that produces legal or similarly significant effects. Our assessments are personalized but not algorithmically determinative of outcomes.

11. Policy Updates

This Privacy Policy may be updated from time to time. We will notify you of any significant changes through our website or by email where appropriate.

12. Contact Information

For privacy inquiries or to exercise your data rights, contact:

Data Protection Officer
DreamScape AI
427 South Rd Moorabbin Victoria Australia
info@neurochangeinstitute.org