Partybloom

Policies

Privacy Policy

This policy explains what personal data BIG HAND EVENTS LTD ("we", "us") collects when you use Partybloom, why we use it, who we share it with, and the rights you have. We are a UK-based retailer shipping worldwide.

Last updated: 25 July 2026

1. Who is responsible for your data

The data controller is BIG HAND EVENTS LTD, registered office at 15 Jamieson Road, Darvel, United Kingdom, KA17 0BT. You can reach us about privacy at support@bighandevents.shop or +44 7615017095.

This policy covers the bighandevents.shop website, checkout, membership and customer support.

2. What we collect

  • Contact & delivery data — name, email, phone (optional), shipping address (street address, city, postal/ZIP code and country), so we can carry out order fulfilment and deliver your order.
  • Order, fulfilment & account data — items ordered, order history, membership tier and status, product options you choose, and the shipping address and delivery details our carriers need for order fulfilment, delivery tracking, and returns or exchange support.
  • Enquiry & support data — the messages you send us through the contact and bulk-styling forms, and our replies.
  • Payment & billing data — billing name, billing country and confirmation that a payment succeeded or failed. Full card numbers are entered on our payment provider's secure page and are never stored on our servers (see section 5).
  • Technical data — limited device/browser information and essential cookies needed to run the cart and checkout (see our Cookie Policy).

3. Collection sources — where your data comes from

Our collection sources are:

  • Directly from you — when you browse, add items to the cart, enter your shipping address at checkout, join membership, or contact us.
  • From our payment provider — confirmation that a payment succeeded or failed, and limited billing details.
  • From our delivery carriers — delivery and tracking status for order fulfilment.
  • From essential cookies and local storage — to keep your cart and checkout working.

We do not buy personal data or build profiles from third-party data brokers.

4. Why we use it, and our legal bases

  • To perform our contract with you — processing and delivering orders, handling returns and refunds, and running your membership.
  • Legitimate interests — responding to enquiries, preventing fraud, keeping the site secure, and improving our products and service.
  • Legal obligation — keeping tax, accounting and consumer-law records.
  • Consent — optional marketing or newsletters, and any non-essential cookies. You can withdraw consent at any time.

5. Payments and the card-data boundary

Card payments are handled by a PCI-DSS compliant third-party payment provider on their own secure, hosted checkout. We receive confirmation that a payment succeeded or failed, along with limited billing details — we never receive or store your full card number, CVC or full PAN.

The payment provider processes your payment data as an independent controller/processor under their own privacy terms.

6. Who we share it with

We share the minimum necessary with service providers who help us operate the store:

  • Hosting & infrastructure — our cloud hosting provider serves the website and stores order data securely.
  • Payment processing — our payment provider processes card payments and subscriptions.
  • Delivery & logistics — our delivery carriers and fulfilment partners receive your name and shipping address to complete order fulfilment, deliver your order, and support returns or exchanges.
  • Email & support tools — used to send order confirmations, shipping updates and replies.
  • Database provider — stores order and enquiry records so we can service your account.

We do not sell your personal data. We may disclose data where required by law or to protect our legal rights.

7. International transfers

As we ship worldwide and use global service providers, your data may be processed outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or an adequacy decision.

8. How long we keep it

  • Order and delivery records: kept as long as needed to fulfil the order and to meet tax and consumer-law obligations (typically up to 6 years).
  • Enquiry and marketing-lead data: kept for up to 24 months from your last contact, then deleted or anonymised.
  • Membership records: kept while your membership is active and for a limited period afterwards for accounting.

9. Your rights (UK GDPR, EU GDPR, CCPA)

Depending on where you live, you have the right to:

  • Access the personal data we hold about you, and receive a copy.
  • Rectify inaccurate data, or complete incomplete data.
  • Erase your data ('right to be forgotten') where it is no longer needed.
  • Restrict or object to certain processing, including direct marketing.
  • Data portability — receive your data in a portable format.
  • Withdraw consent at any time, without affecting prior processing.
  • For California residents: know, delete, correct, and opt out of any 'sale' or 'sharing' of personal information, and not be discriminated against for exercising these rights.

To exercise any right, email support@bighandevents.shop. We respond within the timeframes required by law.

10. Do Not Sell or Share

We do not sell your personal information, and we do not share it for cross-context behavioural advertising. If this ever changes, we will provide a clear opt-out. California residents may still submit a request confirming this by emailing support@bighandevents.shop.

11. Cookies and analytics

We use essential cookies and local storage to keep your cart and checkout working. Any non-essential analytics are used only with your consent. Full detail is in our Cookie Policy.

12. Automated decisions and children

We do not make solely automated decisions that produce legal or similarly significant effects about you.

Partybloom is intended for adults. The website is not directed at children under 13, and we do not knowingly collect their data. Customers aged 13–17 should use the site with parental or guardian consent. Balloons and small parts must be used under adult supervision per our safety guidance.

13. Security

We use encryption in transit (HTTPS), access controls and reputable processors to protect your data. No method of transmission is perfectly secure, but we take reasonable steps to safeguard your information and to notify you and regulators of a breach where required.

14. Complaints and contact

If you have a concern, contact us first at support@bighandevents.shop and we will try to resolve it. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner's Office (ICO); in the EU, your local supervisory authority.

We may update this policy from time to time; the "last updated" date above reflects the latest version. Governing law: England and Wales.

Looking for something else? Visit Support or contact us.