Pixie Dust Parties (“we”, “our”, “us”) is committed to protecting your personal data and respecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

This Privacy Policy explains how we collect, use, and protect your information when you use our website, book a princess party, or purchase tickets for our events.

1. Who We Are

Pixie Dust Parties provides:

• Princess-themed children’s parties

• Character entertainment services

• Ticketed children’s events and experiences

Data Controller: Pixie Dust Parties
Contact Email: hello@pixiedustparties.co.uk

2. What Personal Data We Collect

Information You Provide

When booking a party or purchasing tickets, we may collect:

• Parent/guardian name

• Email address

• Phone number

• Billing address

• Payment details (processed securely via third parties)

• Event details (date, time, location)

• Child’s first name and age (for party personalisation)

Ticketed Events

• Attendee names (where required)

• Special requirements (e.g. accessibility needs)

Automatically Collected Data

• IP address

• Browser/device type

• Website usage data (via cookies)

3. Lawful Basis for Processing (UK GDPR)

We process your data under the following lawful bases:

• Contractual necessity – to provide booked services (parties/events)

• Legitimate interests – to improve services and manage bookings

• Consent – for marketing emails and photography (where applicable)

• Legal obligation – for financial and tax records

4. How We Use Your Data

We use your data to:

• Deliver princess party experiences

• Manage and organise ticketed events

• Communicate about bookings and event updates

• Process payments

• Respond to enquiries

• Improve our services and website

• Send marketing (only if you opt in)

5. Children’s Data

We only collect limited information about children (e.g. first name and age) to:

• Personalise party experiences

• Ensure age-appropriate activities

This information is provided by a parent or guardian and is never used for marketing.

6. Photography & Media (Important)

At some events or parties, photos or videos may be taken for promotional purposes.

• We will always request explicit consent before using identifiable images

• You may opt out at any time

• No child’s full name will ever be published

7. Sharing Your Data

We only share your data where necessary with:

• Payment processors (e.g. Stripe, PayPal)

• Event platforms (for ticketed events)

• Email marketing providers

• Legal or regulatory authorities if required

We do not sell your personal data.

8. International Transfers

If we use third-party providers outside the UK, we ensure appropriate safeguards are in place (such as UK-approved standard contractual clauses).

9. Data Retention

We retain your data only as long as necessary:

• Booking data: up to 6 years (for legal/tax purposes)

• Marketing data: until you withdraw consent

• General enquiries: up to 12 months

10. Your Rights Under UK GDPR

You have the right to:

• Access your personal data

• Correct inaccurate data

• Request deletion (“right to be forgotten”)

• Restrict processing

• Object to processing

• Data portability

• Withdraw consent at any time

To exercise your rights, contact: [Insert Email]

You also have the right to complain to the Information Commissioner's Office.

11. Cookies

We use cookies to:

• Improve website functionality

• Analyse usage

You can manage cookies through your browser settings.

12. Changes to This Policy

We may update this Privacy Policy periodically. The latest version will always be posted on our website.