Privacy Notice

1. Who we are

Daisy Dew Party Bags is the data controller for personal information collected through this website and during the ordering, design, payment and fulfilment process.

For privacy questions, requests or concerns, contact us at orders@daisy-dew.com or by phone on 07368 580884.

2. Information we collect

Depending on how you use Daisy Dew, we may collect:

• your name, email address, mobile number and preferred contact method;
• order and enquiry information, including event date, quantity, delivery information and messages;
• personalisation information you choose to provide, such as a child’s first name, age, theme, colours and celebration details;
• design approvals, change requests and order-production notes;
• payment status, amounts and Stripe transaction references. Daisy Dew does not receive or store your full card number;
• technical and security information generated when you use our website or staff systems, where needed to operate and protect the service.

Please only provide information that is reasonably needed for the celebration or order.

3. Why we use personal information

We use personal information to:

• respond to enquiries and take steps requested by you before an order is formed;
• review, design, price, confirm, produce and fulfil personalised orders;
• contact you about design approval, payment, production, dispatch and customer service;
• process and reconcile payments and refunds;
• maintain appropriate business, accounting and transaction records;
• prevent misuse, protect our systems and resolve complaints or disputes.

4. Our legal bases

Under UK data protection law, our main legal bases are:

• Contract and steps before a contract: where information is needed to respond to your requested order or enquiry, create and fulfil an order, arrange delivery or take payment.
• Legitimate interests: where reasonably necessary to operate Daisy Dew, provide customer service, manage stock and workflow, protect the website and keep appropriate service records, provided those interests are not overridden by your rights.
• Legal obligations: where we must keep or use information to meet tax, accounting, consumer-law or other legal requirements.

If we introduce optional marketing communications in future, we will use the appropriate lawful basis and provide the relevant choice at that time.

5. Children’s personalisation information

Daisy Dew products are purchased and managed by parents, guardians or other adult organisers. We do not ask children to create accounts or submit orders directly.

Child-related information is limited to what the adult customer chooses to provide for personalisation and age-appropriate curation, such as first name, age and celebration preferences. Please do not send sensitive or unnecessary information about a child.

6. Who we share information with

We use trusted service providers where needed to operate Daisy Dew. These may include:

• Stripe for secure payment processing;
• Supabase for order, enquiry, authentication and operational data services;
• Vercel for website hosting and delivery;
• Resend for transactional customer emails;
• courier or delivery providers where information is needed to deliver an order;
• professional advisers, regulators or authorities where disclosure is required by law or reasonably necessary to protect legal rights.

We do not sell personal information to advertisers.

7. How long we keep information

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected and for any applicable legal, accounting or dispute-resolution requirements.

As a general guide, unresolved enquiries may be kept for up to 12 months after the last contact. Order and transaction records may need to be kept for longer where required for accounting, tax, consumer or legal purposes. Personalisation and design details will be reviewed and should not be retained longer than reasonably necessary once the order and any related issue are complete.

8. International services and safeguards

Some technology providers may process information outside the United Kingdom. Where this happens, the provider and Daisy Dew are expected to use the legal safeguards required for international transfers under applicable UK data protection law.

9. Cookies and similar technology

The Daisy Dew public website does not currently use advertising or analytics cookies. Essential cookies or similar browser storage may be used by service providers where necessary for security, authentication, staff access or payment processing.

If Daisy Dew later introduces optional analytics, advertising or other non-essential tracking technologies, this notice and any required cookie controls will be updated before those technologies are used.

10. Your data protection rights

Depending on the circumstances, you may have rights to ask for access to your personal information, correction of inaccurate information, deletion, restriction of processing, objection to certain processing, or transfer of information in a portable format.

To make a request, contact orders@daisy-dew.com. We may need to confirm your identity before responding.

11. Complaints

Please contact Daisy Dew first if you have a privacy concern so we can try to resolve it. You also have the right to complain to the UK Information Commissioner’s Office if you remain concerned about how your personal information has been handled.

Information Commissioner’s Office complaint guidance

12. Changes to this notice

We may update this Privacy Notice when our services, suppliers or legal obligations change. The effective date at the top of the page shows the latest published version.