Privacy Policy

Last updated: 3 February 2026

This Privacy Policy explains how Dahlia and de Renzy ("we", "us", or "our") collects, uses, and protects your personal data when you visit our website https://www.dahliaandderenzy.co.uk/, place an order, or otherwise interact with us.

We are committed to protecting your privacy and handling your data transparently and securely, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Information We Collect

We may collect and process the following types of personal information:

  • Identity and contact information: name, email address, phone number

  • Order and delivery information: billing address, delivery address, order details, gift messages

  • Payment information: payment details processed securely by third‑party payment providers (we do not store full card details)

  • Communication information: messages sent via contact forms, email, or social media

  • Technical information: IP address, browser type, device information, cookies, and usage data

2. How We Use Your Information

We use your personal data to:

  • Process and fulfil flower orders and deliveries

  • Communicate with you about your orders or enquiries

  • Provide customer support

  • Improve our website, products, and services

  • Meet legal, accounting, and regulatory obligations

We do not send newsletters or ongoing marketing emails.

3. Legal Basis for Processing

Under UK data protection law, we rely on the following lawful bases:

  • Contract – to fulfil orders and provide services you request

  • Consent – where you have opted in to receive marketing communications

  • Legitimate interests – to improve our business, prevent fraud, and ensure website security

  • Legal obligation – to comply with applicable laws and regulations

4. Sharing Your Information

We may share your personal information with trusted third parties where necessary, including:

  • Delivery partners and couriers

  • Payment processors

  • Website hosting, analytics, and IT service providers

  • Professional advisers or legal authorities where required by law

We never sell your personal data to third parties.

5. Cookies

Our website uses cookies and similar technologies to ensure proper functionality, analyse website traffic, and improve user experience.

You can control or disable cookies through your browser settings. Please note that disabling cookies may affect website functionality.

6. Data Retention

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, tax, and accounting requirements.

7. Data Security

We take appropriate technical and organisational measures to protect your personal data. While we strive to safeguard your information, no method of transmission over the internet is completely secure.

8. Your Rights

Under UK GDPR, you have the right to:

  • Access the personal data we hold about you

  • Request correction of inaccurate or incomplete data

  • Request deletion of your personal data

  • Restrict or object to processing

  • Request data portability

  • Withdraw consent for marketing at any time

To exercise any of these rights, please contact us using the details below.

9. Third‑Party Links

Our website may contain links to third‑party websites. We are not responsible for the privacy practices or content of those websites.

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date.

11. Contact Us

If you have any questions about this Privacy Policy or how we handle your personal data, please contact us:

Dahlia and de Renzy
Email: dahliaandderenzy@gmail.com