How can this be a GDPR breach?

[Addler]

My parents kindly bought a pram for my first baby due in November, it was due to arrive today. I received an email notification that they had attempted delivery this morning but no one was home, I haven't left the house.

When I tried to arrange redelivery it kept saying my post code was incorrect. I checked the confirmation email from John Lewis and it has my correct address and postcode. I also saw that it said it was at a delivery office in London, I live in Surrey.

I assume that somehow Royal Mail have got the wrong address and tried to deliver it somewhere else, even though John Lewis had the right address.

I called John Lewis and they wouldn't tell me anything because the account is in my dad's name and it's a GDPR breach. I don't want any account or payment information, I just want to know where my item is! How can it be a breach when the delivery name and address is mine?

He said the only thing to do is get my dad to call, which is really going to be easy when he lives on the other side of the world.

Now on hold to Royal Mail and have been informed the wait will be over 30 minutes. I was so looking forward to the pram arriving and now I'm just grumpy. I really hope they can help and I don't need to go back to John Lewis for something.

can you dad email them?

Ring back and identify as your dad.

@FourEyesGood

Ring back and identify as your dad.

I have identified as my husband on more than one occasion as he's usually at work and unable to call. I can answer the security questions no problem and they are now reluctant to call me out on my blantant woman's voice

I called John Lewis and they wouldn't tell me anything because the account is in my dad's name and it's a GDPR breach. I don't want any account or payment information, I just want to know where my item is!

Of course it’s a data breach. Your dad’s account isn’t your account, regardless of whether the item he ordered is being delivered to you. Technically, it is his item. In reality it is yours, of course, but as far as JL are concerned he owns the pram. If there were to be a problem with it, he would have to arrange the return through his account. The refund would go to him etc.

Identify as your dad

I would though. Just give his name and details!

Just imagine a worst case scenario from John Lewis's point of view (obviously this is a made up scenerio !!)

Its actually your husbands account. Your husband has another woman. She is pregnant. You have discovered somehow he's ordered a pram and want to know why. They let something slip...

The shit hits the fan and JL get the backlash...

Its a pain in the neck and I'd feel the same way as you do, but they've got to apply the same rule to everyone

Have to agree with others, your Dad is the name on the account and he is the person they will have to speak to. JL can not change the rules, cause if they do , they will leave them open to all sorts of allegations.
I am not sure if he is able to, but maybe yo can get your Dad to have you as an authorised person on the account. Alternatively just open your own account and use that.

@listsandbudgets that has abated by hormonal rage! I shall have a biscuit and see if my dad can email them or tell them he gives me permission or something. DP offered to call and be my dad but I'm worried we won't know any of the security questions etc! I just hope they don't actually deliver it to somebody.

Thanks all

@Cheeseandwin5 I do have an account, it was just bought as a gift so he bought it himself.

It might be your address but it's not your account.

Yes it's a data breach because it's under your dad's name. so he needs to call them.

I used to manage a shop which had a lot of online orders delivered to store. We had so many people who’d order on their account for someone else who’d come to pick it up. We needed to access the account owners details and couldn’t do it without them present because of GDPR.

It was a daily frustration and no customer could ever understand we’d be breaking the law. Then we’d have the same bloody argument when they tried to return things...

It’s not your account so it would be a breach
John Lewis are too big to risk a breach, they won’t want to risk a fine and the potential shit storm if it got out

Yeah the one advantage of TWAW/TMAM as that you can easily identify as the other sex over the phone. Every cloud...

Just call back as your dad

@listsandbudgets

Just imagine a worst case scenario from John Lewis's point of view (obviously this is a made up scenerio !!)

Its actually your husbands account. Your husband has another woman. She is pregnant. You have discovered somehow he's ordered a pram and want to know why. They let something slip...

The shit hits the fan and JL get the backlash...

Its a pain in the neck and I'd feel the same way as you do, but they've got to apply the same rule to everyone

How is it JL fault for the husband having a bit on the side?

catbatcat I meant that the husband would blame JL for giving wife information.

Still it was a purely theoretical situation

I once got a BT mobile account while I lived with my parents. For some reason the account was in my dads name. He had never been involved in my mobile contract As I was an adult but apparently as he was the BT landline account holder it automatically went in his name. My dad was very ill with a neurological condition so I got my older brother to stand in for him on the phone and give me permission to discuss my own bloody contract.