Small Business Dream Privacy Policy

Small Business Dream

Small Business Dream is a Software and Consulting Suite consisting of The Small Business Sales and Profitability Blueprint, The SBD Virtual Business Card Button Mobile App, The SBD Business Finder and Joint Venture Mobile App, and the SBD Sales and Marketing Automation Software and Mobile App.

Members of the Small Business Dream community are held in the highest regard, and their privacy is our priority. 

All terms written with capital letters and not defined in this Policy shall bear the meaning specified in the official Small Business Dream documents, such as Terms and Conditions, Rules and Regulations and KYC Policy.

Small Business Dream on customer Privacy

We believe it is important that you understand how we handle your personal data, so that you can trust that your data is in good hands with us. In this Privacy Policy, we list the ways in which we handle your personal data.

Small Business Dream considers it essential that the personal details of its customers (and business relations) are processed and secured with the utmost importance. Small Business Dream also wants to be open about the way your data is processed. That is why you will find an explanation below. This Policy provides you as the data subject with the information required by the Regulation (EU) 2016/679 of the European Parliament and of the Council of 27 April 2016 on the protection of natural persons with regard to the processing of personal data and on the free movement of such data, and repealing Directive 95/46/EC (General Data Protection Regulation-GDPR). We apply General Data Protection Regulation because we offer our services and products to the European Union citizens through our website.

This Privacy Policy applies to:

www.Small Business , The Small Business Sales and Profitability Blueprint, The SBD Virtual Business Card Button Mobile App, The SBD Business Finder and Joint Venture Mobile App, and the SBD Sales and Marketing Automation Software and Mobile App.

Our websites can contain buttons for social media, such as LinkedIn, Facebook, Twitter and YouTube. This Privacy Policy does not apply to these social media. The use of social media is your own responsibility. We advise you to read the privacy rules of the applicable social media to learn how your data is handled on their respective platforms. Many social media providers are located outside the European Union.

Our website contains links to external websites not part of the SmallBizDream Ecosystem. This Privacy Policy does not apply to those websites. We keep the external links up-to-date and to refer to the right websites whenever possible. We are not responsible for the content on those websites and the way in which your personal data is handled. We advise you to always read how these websites deal with your personal data.

Policy Changes

We may adjust this Privacy Policy if the law or our policy changes.

The latest version of this policy is EN-SBD19-3 applicable since 25 May 2018.

In the case of a sale, acquisition, liquidation, merger, consolidation, reorganization, any acquirer will be subject to our obligations under this Privacy Policy, including your rights specified in the Data Request Policy. We will notify you of the change of this Policy ore Data Request Policy by sending you an email and posting a notice on our Website.

Information we collect and receive

1. Customer Data

If you create a user account at our Website or Mobile Apps, you are a “user,” as further described in the Terms and Conditions. Customer Data as specified below is controlled by Consulting Ltd. being the data controller. When Small Business Dream collects or processes Customer Data, it may engage the processor to do so on behalf of the Small Businesss Dream.

If you are using the Services by invitation of an Affiliate or Joint Venture Partner, whether they are your employer, another organization, or an individual, that Affiliate or Joint Venture Partner may determine their own policies regarding sharing of Customer Data. Please check with the Affiliate or Joint Venture Partner about the policy they have in place.

Users may provide information while registering an account such as;

  • Vendor Code
  • Password
  • First Name
  • Last Name
  • Email address
  • Phone number
  • Country

Users registering as a company may provide information such as;

  • Vendor Code
  • Password
  • Company Name
  • Company Representative First Name
  • Company Representative Last Name
  • Email address
  • Phone number
  • Country

2. Other information

Small Business Dream may also collect and receive the following information:

  • Images. When you use the Mobile App Services you have the option to upload photos stored on the device or taken using the device's camera for integration into our CRM systems
  • Billing information. For Customers that purchase a License, our third-party payment processors may collect and store billing addresses and credit card information on our behalf, or we may do this ourselves.
  • Services information. This is information about how you are accessing and using the Services, which may include administrative and support communications with us and information about the people, content, and links you interact with, and what third party integrations you use (if any).
  • Logs. When you use the Services, our servers automatically record information. This log data may include your IP address, the address of the web page you visited before using the Services, your browser type and settings, the date and time of your use of the Services, information about your browser configuration and plug-ins, and language preferences.
  • Device Information. We may collect information about the device you are using the Services on, including what type of device it is, what operating system you are using, device settings, app IDs, unique device identifiers, and crash data. Whether we collect some or all of this information often depends on what type of device you are using and its settings.

3. Legal grounds for collecting and processing Customer Data

The legal grounds for processing of your personal data are the following:

1. Processing is necessary for the performance of the contract to which you are the party, i.e. License Agreement and/or Advocate agreement and account agreement and to take steps at your request prior to entering into any of the above contracts

2. Processing is necessary for the purposes of the legitimate interest pursued by Small Business Dream, especially for direct marketing purposes and for protection of Small Business Dream' rights in case of claims and lawsuits

3. Processing is necessary for compliance with legal obligation, especially tax and accounting duties.

You are not legally bound to provide us with your personal data, however without your personal data we are not able to open your account at our website nor enter into the License Agreement or Advocate’s agreement. Please be informed that we apply Know Your Customer and Anti Money Laundering procedures, so you will be asked to provide us with additional data before execution of any transaction.

How we use the information we collect

Our main purpose for collecting personal information is to provide you with a secure, smooth, efficient, and customized experience.

1. Customer Data

Small Business Dream may collect, access and use Customer Data for the following purposes:

1. Set up, maintain and manage the user’s account

2. Conclude and execute the License Agreement

3. Conclude and execute the agreement with you as an Advocate if you apply for an Advocate status

4. Provide, maintain, measure and improve the Services

5. Process transactions and send communication about your transactions

6. Resolve disputes and collect fees

7. To prevent or troubleshoot technical problems and security issues

8. As required by law for invoicing and fulfilling tax duties

9. As permitted by the Data Request Policy

2. Other information

We also use other kinds of information in providing the Services. This information is used to:

  • Carry out research and analyze trends to better understand how users are using the Services. To this end we apply anonymized profiling.
  • To communicate with you in the following circumstances:
    • On a Customer’s request in connection with customer support matters.
    • We may send you Service and administrative emails and messages.
    • We may also contact you to inform you about changes in our Policies, our Services, our Service offerings, and important Service related notices, such as security and fraud notices. These emails and messages are considered part of the Services and you may not opt-out of them.
    • In addition, we may send emails about new product features or other news about Small Business Dream. You can opt out of these at any time.
  • Profiling purposes i.e. delivering targeted marketing, service update notices, and promotional offers based on your communication preferences. You can opt out of these at any time.
  • Prevent and investigate potentially prohibited or illegal activities, and/or violations of our user Terms and Conditions, License Agreement and other binding policies and documents and inform the authorities in case of a violation of the law.

This policy is not intended to place any limits on what we do with data that is aggregated and/or de-identified so as to no longer be associated with an identifiable user of the Services.

We will not use your personal information without your permission for purposes other than those purposes we have disclosed to you.

We will never sell or rent your personal information to third parties.

From time to time we may request your permission to allow us to share your personal information with third parties. You may opt out of having your personal information shared with third parties.

Who is responsible for your personal data? Consulting Ltd., will be the data controller of your personal data provided to, or collected by or for the purposes indicated above. Data controller registered office is in Vancouver, British Columbia, Canada, at 33 Smithe Street, V6B0B5.

Small Business Dream on cookies

To enhance trust by our visitors, demonstrate compliance and respect for your privacy rights, and personalize your experience in our website, you will be notified upon visiting our website about our cookie policy.

We or companies we work with may place small data files called cookies or pixel tags on your computer or device. We use these technologies to distinguish you from other users of our website. This helps us to provide you with a better experience when you browse our website and also allows us to improve our site.

  • Cookie Purpose Processor
  • CookieGTM PurposeAnalytical ProcessorGoogle LLC
  • CookieGoogle Analytics PurposeAnalytical ProcessorGoogle LLC

Privacy choices: The help section of most browsers or browser add-ons provides instructions on blocking, deleting, or disabling cookies. You are free to decline our cookies if your browser or browser add-on permits, but doing so may interfere with your use of DNE Services.

Information shared with other Small Business Dream users

If you use your Small Business Dream account in connection with the purchase or sale of goods or services, we or you may provide the seller with:

  • your shipping address
  • your name
  • your email
  • your phone number

The seller is not allowed to use this information to market their services to you unless you have explicitly agreed to it.

If an attempt to transfer to your seller fails or is later invalidated, we may provide your seller with details of the unsuccessful transfer.

In connection with a transfer between you and a third party, including merchants, a third party may share information about you with us, such as:

  • your email address
  • your mobile phone number

This information may be used to inform you that a transfer has been sent to or received from the third party. We may use this information to confirm that you are a Small Business Dream customer. If you request that we validate your status as a Small Business Dream customer with a third party, we will do so. Please note that merchants you interact with may have their own privacy policies, and Small Business Dream is not responsible for their operations.

If you authorize one or more third-party applications to access your Small Business Dream account, the information you have provided to Small Business Dream may be shared with those third parties. Unless you provide further authorization, these third parties are not allowed to use this information for any purpose other than to facilitate your transactions.

Sharing within the network matrix: If you are an Advocate in our system, we or you may also provide members in your upline or downline with your name and contact information to enhance communication within the Advocate network. The recipient is not allowed to use this information to market other services to you unless you have explicitly agreed to it.

Information shared with processors

We may share your personal information with the following processors:

Identity verification services in order to prevent fraud (this allows Small Business Dream to confirm your identity by comparing the information you provide us to public records and other third-party databases; these service providers may create derivative data based on your personal information that can be used solely in connection with provision of identity verification and fraud prevention services).

Service Providers under contract who help with parts of our business operations such as bill collection, marketing, and technology services (our contracts require these service providers to only use your information in connection with the services they perform for us, and prohibit them from selling or disclosing your information to anyone else).

Financial Institutions with which we partner. We may use third parties to verify your bank account in accordance with this Privacy Policy.

The current list of processors:

  • Paypal
  • Square

Before Small Business Dream shares your information with any processor, Small Business Dream will enter into a written agreement requiring that the processor provides at least the same level of privacy protection as mentioned in this Privacy Policy, except for cases when disclosure or transfer of data it is required by law. The same applies to the sub-processors accordingly.

Small Business Dream accounts can only be created on Small Business and we are not responsible for accounts set up on a third-party website or via a third-party application.

Law Enforcement

We may disclose your data when we are compelled to do so by a subpoena, court order, or similar legal procedure; or we believe in good faith that the disclosure of personal information is necessary to prevent physical harm or financial loss, to report suspected illegal activity or to investigate violations of our License Agreement.


Access Control

Small Business Dream implements industry standard access controls and detection capabilities for the internal networks that support its products. Network access control mechanisms are designed to prevent network traffic using unauthorized protocols from reaching the product infrastructure.

Product access

A selection of Small Business Dream' employees have access to the products and to customer data via secured interfaces. Employees are granted access by role, and reviews of high risk privilege grants are initiated weekly. Employee roles are reviewed at least once every six months.

Service availability

Small Business Dream and the data center providers use commercially reasonable efforts to ensure a minimum of 99% uptime.


Small Business Dream makes HTTPS encryption (also referred to as SSL or TLS) available on every one of its login interfaces. The HTTPS implementation uses industry standard algorithms and certificates.

Incident Response

Small Business Dream maintains a record of known security incidents that includes description, dates and times of relevant activities, and incident descriptions. Suspected and confirmed security incidents are investigated by security, operations, or support personnel; and appropriate resolution steps are identified and documented. For any confirmed incidents, Small Business Dream will take appropriate steps to minimize product and Customer damage or unauthorized disclosure.

If Small Business Dream becomes aware of unlawful access to Customer data or any data breach, Small Business Dream will:

1. Communicate high-risk breaches to affected data subjects without undue delay

2. Notify the relevant Data Protection Authority of high-risk breaches within 72 hours of the breach.

3. Provide the Customer with a description of the steps Small Business Dream is taking to resolve the incident.

4. Provide status updates to the Customer contact, as Small Business Dream deems necessary.

Notification(s) of incidents, if any, will be delivered to one or more of the Customer’s contacts in a form Small Business Dream selects, which may include via email or an online notice in case email communication would involve disproportionate effort.

Rights to access your personal data

We provide access options about the collection, use and sharing of your data, including correcting your account data, marketing opt-outs and processor controls. We also offer deletion of the personal data we have about you. Detailed information on your rights relating to the processing of personal data can be found in the Data request Policy, constituting an enclosure to this Policy.

Automated decision-making

While verifying your identity according to the KYC standards we may apply the automated decision-making procedures and ask you for additional documents if the results of the verification will be negative. However, in such a case, you have the right to request an investigation of your case by our personnel. State your case and object our decision. If you fail the KYC verification you will not be allowed to perform any transactions. More information regarding this policy can be found in our KYC Policy.

Account Closure

We will keep your profile open, unless you decide to close your account. If you choose to close your Small Business Dream account, your personal data will generally be deleted within 30 days of account closure, except as noted below. We will keep some de-personalized information after your account has been closed.

We retain your personal data even after you have closed your account in the following situations:

  • When it is reasonably necessary to comply with our legal obligations (including law enforcement requests).
  • Necessary to meet regulatory requirements.
  • To resolve disputes.
  • To maintain security.
  • To prevent fraud and abuse.
  • To enforce our User Agreement.

Data retention

In cases specified above we will retain your information only to the extent required for a particular purpose for a period of maximum ten (10) years (claims’ limitation period) as of closing your account. In some cases, we choose to retain certain information (e.g., visits to pages) in a depersonalized or aggregated form.

Cross-Border Data Transfers

We process data both inside and outside of the European Union and EEA countries. When in transit, the data will remain encrypted with at least the then current industry standard, and the appropriate safeguards as defined in Art. 46 of GDPR shall be applied.

Your personal data may be transferred to the following third countries outside EU and EEA: Serbia, Hong Kong, Singapore, India, which are not covered by the adequacy decisions of European Commission, to Canada and Switzerland, which are covered by the adequacy decisions of European Commission, and to the USA.

How to contact us about privacy

If you have questions or concerns regarding this policy, or if you have a complaint, you should first contact our Data Protection Officer on our support page or via email at