PRIVACY NOTICE
How we got
your address
Last updated 2 September 2026
You have probably arrived here from an email about a gift you were not expecting. This page explains who we are, where your address came from, and how to make it stop.
Who we are
Dorothea makes handmade gifts on behalf of the people who send them. Somebody bought one for you, and we make it and deliver it for them.
Dorothea is a service operated by ChillRep Consulting Limited, an Irish company. ChillRep is the data controller, which means it is the company responsible for your information and the one to complain about.
- Company:
- ChillRep Consulting Limited
- Registered:
- Ireland, CRO 791088
- Contact:
- [email protected]
Where your address came from
The person sending you the gift chose you. They gave us your name and where you work. They did not give us your address.
We found the address ourselves. We looked up your employer's office using business data services, including Clay and its data providers, along with publicly available company information such as company websites and business registers.
We did it this way deliberately. Asking you for an address would have told you a gift was coming and spoiled the surprise. That is the whole reason you are reading this instead of having been asked.
What we hold about you
- Your name.
- Your work email address.
- Your employer, and your job title.
- A work postal address for that employer.
- Your public LinkedIn profile address.
- Photographs of you that are already public, for example a profile photo you have published.
- Anything you tell us if you reply to us.
No home addresses, no personal email accounts, no payment details. We do not use private photographs, and we do not take anything from a source you did not choose to make public. We do not build a profile on you and we do not sell anything to anyone.
Why we are allowed to do this
We rely on legitimate interests under Article 6(1)(f) of the GDPR. The interest is delivering a gift that somebody else has already bought and paid for, to a work address, at the point where the only alternative is not delivering it.
You can disagree with that, and you can object. There is no cost to you for doing so and we will not ask you why.
What we do not do
- We do not sell personal data to anybody.
- We do not publish, post or reuse a likeness. A piece is made for one person, it goes to that person, and that is the end of it.
- We do not make a second piece from your likeness for anybody else.
Who else sees it
- A production partner inside the European Union, which makes the piece. It receives only what it needs to make it.
- The courier who carries the parcel needs the delivery address and a name.
- Our email provider, Resend, which sends the message you received. Its servers are in the EU.
- The person who sent the gift is told that it was delivered. They are not given the address, and if you correct it we do not pass the correction back to them.
Nobody else. Your details are not shared with other clients, added to a mailing list, or used for marketing.
If you leave your email on this site
We store the address you typed and nothing else. We use it to contact you about Dorothea. We do not sell it, we do not pass it to anyone, and we do not add you to a newsletter. Ask us to delete it and we will.
Cookies
We do not use advertising cookies and we do not track you across other websites.
How long we keep it
Until the gift is delivered, plus 90 days in case it goes missing and has to be traced. After that the delivery address is deleted.
We keep the photographs and the model for as long as the piece is being made. Ask us to delete them and we will do it, at any time.
We keep a record that we contacted you, and any request you made to stop, for as long as we need it to honour that request.
How to make it stop
Reply to the email you received, or write to [email protected], and say so. One line is enough.
We will stop the delivery, delete your details, and not contact you again. You do not need to give a reason and we will not ask for one.
Your other rights
You can ask us for a copy of what we hold, correct it, delete it, restrict what we do with it, or object to it entirely. Write to [email protected] and we will answer within one month.
If you are not satisfied, you can complain to your national data protection authority. Ours is the Irish Data Protection Commission at dataprotection.ie, and you may also complain to the regulator in your own country.
Last updated 2 September 2026.
Dorothea is a service operated by ChillRep Consulting Limited, registered in Ireland, CRO 791088.