1. Who We Are

Company Name: Dahlia Boutique Facilities Management Ltd.
Email: Contact@dahliabf.co.uk
Phone: +44 7857 114668
Data Controller: Dahlia Boutique Facilities Management Ltd.

If you have any questions about how we handle your personal data, please contact us using the details above.

2. What Personal Data We Collect

We may collect the following information when you use our website or services:

• Identity data: Name, job title, company name (if applicable)

• Contact data: Email address, phone number, postal address

• Service data: Details of your enquiries, bookings, and certifications

• Financial data: Payment information (processed securely by third-party payment providers)

• Technical data: IP address, browser type, operating system, and website usage statistics

• We do not collect any special category (sensitive) personal data unless required by law.

3. How We Use Your Data

We use your personal data to:

• Provide and manage our services

• Communicate with you regarding enquiries, bookings, or certification updates

• Process payments and issue invoices

• Ensure compliance with UK laws and regulations

• Improve our website and customer experience

• Maintain internal records

• We will only use your data where we have a lawful basis, such as:

• Contractual necessity (to perform a contract with you)

• Legal obligation (to comply with the law)

• Legitimate interest (for business operations)

• Consent (for marketing communications)

4. Sharing Your Data

We may share your data with:

• Third-party contractors or inspectors providing certification or compliance services on our behalf

• Payment processors (for secure transactions)

• IT and website service providers (for hosting and support)

• Regulatory authorities, if required by law

• All third parties are required to respect the confidentiality of your data and act in compliance with UK data protection law.

• We do not sell or rent your personal information to third parties.

5. Data Retention

We will retain your personal data only for as long as necessary to fulfil the purposes we collected it for, including:

• To meet legal, accounting, or reporting obligations

• To resolve disputes or enforce our agreements

• Typically, we retain records for 6 years after the completion of a service, in line with UK statutory requirements.

6. Data Security

We implement appropriate technical and organisational measures to prevent your personal data from being lost, misused, or accessed unlawfully.
Examples include:

• Encrypted data storage and transfer

• Secure access controls

• Regular security audits

7. Your Rights

Under the UK GDPR, you have the following rights:

• Access – to request a copy of your data

• Rectification – to correct inaccurate or incomplete data

• Erasure – to request deletion of your data (“right to be forgotten”)

• Restriction – to limit how we use your data

• Data portability – to request the transfer of your data

• Objection – to object to certain types of processing

• Withdraw consent – for marketing communications at any time

• To exercise any of these rights, contact us at contact@dahliabf.co.uk.

• If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at https://ico.org.uk/.

8. Cookies

We use cookies to improve your browsing experience. Cookies help us analyse web traffic and tailor content to your preferences.
You can manage or disable cookies in your browser settings. For full details, see our [Cookie Policy].


9. International Transfers

We generally store data within the UK. If data is transferred outside the UK, we ensure adequate safeguards are in place in line with UK GDPR requirements (such as the use of Standard Contractual Clauses).


10. Changes to This Policy

We may update this Privacy Policy from time to time. The most current version will always be available on our website.