1. Who is responsible for your data
The data controller is BIG HAND EVENTS LTD, registered office at 15 Jamieson Road, Darvel, United Kingdom, KA17 0BT. You can reach us about privacy at support@bighandevents.shop or +44 7615017095.
This policy covers the bighandevents.shop website, checkout, membership and customer support.
2. What we collect
- Contact & delivery data — name, email, phone (optional), shipping address (street address, city, postal/ZIP code and country), so we can carry out order fulfilment and deliver your order.
- Order, fulfilment & account data — items ordered, order history, membership tier and status, product options you choose, and the shipping address and delivery details our carriers need for order fulfilment, delivery tracking, and returns or exchange support.
- Enquiry & support data — the messages you send us through the contact and bulk-styling forms, and our replies.
- Payment & billing data — billing name, billing country and confirmation that a payment succeeded or failed. Full card numbers are entered on our payment provider's secure page and are never stored on our servers (see section 5).
- Technical data — limited device/browser information and essential cookies needed to run the cart and checkout (see our Cookie Policy).
3. Collection sources — where your data comes from
Our collection sources are:
- Directly from you — when you browse, add items to the cart, enter your shipping address at checkout, join membership, or contact us.
- From our payment provider — confirmation that a payment succeeded or failed, and limited billing details.
- From our delivery carriers — delivery and tracking status for order fulfilment.
- From essential cookies and local storage — to keep your cart and checkout working.
We do not buy personal data or build profiles from third-party data brokers.
4. Why we use it, and our legal bases
- To perform our contract with you — processing and delivering orders, handling returns and refunds, and running your membership.
- Legitimate interests — responding to enquiries, preventing fraud, keeping the site secure, and improving our products and service.
- Legal obligation — keeping tax, accounting and consumer-law records.
- Consent — optional marketing or newsletters, and any non-essential cookies. You can withdraw consent at any time.
5. Payments and the card-data boundary
Card payments are handled by a PCI-DSS compliant third-party payment provider on their own secure, hosted checkout. We receive confirmation that a payment succeeded or failed, along with limited billing details — we never receive or store your full card number, CVC or full PAN.
The payment provider processes your payment data as an independent controller/processor under their own privacy terms.
7. International transfers
As we ship worldwide and use global service providers, your data may be processed outside your country, including outside the UK/EEA. Where that happens we rely on appropriate safeguards such as UK International Data Transfer Agreements, EU Standard Contractual Clauses, or an adequacy decision.
8. How long we keep it
- Order and delivery records: kept as long as needed to fulfil the order and to meet tax and consumer-law obligations (typically up to 6 years).
- Enquiry and marketing-lead data: kept for up to 24 months from your last contact, then deleted or anonymised.
- Membership records: kept while your membership is active and for a limited period afterwards for accounting.
9. Your rights (UK GDPR, EU GDPR, CCPA)
Depending on where you live, you have the right to:
- Access the personal data we hold about you, and receive a copy.
- Rectify inaccurate data, or complete incomplete data.
- Erase your data ('right to be forgotten') where it is no longer needed.
- Restrict or object to certain processing, including direct marketing.
- Data portability — receive your data in a portable format.
- Withdraw consent at any time, without affecting prior processing.
- For California residents: know, delete, correct, and opt out of any 'sale' or 'sharing' of personal information, and not be discriminated against for exercising these rights.
To exercise any right, email support@bighandevents.shop. We respond within the timeframes required by law.
10. Do Not Sell or Share
We do not sell your personal information, and we do not share it for cross-context behavioural advertising. If this ever changes, we will provide a clear opt-out. California residents may still submit a request confirming this by emailing support@bighandevents.shop.
12. Automated decisions and children
We do not make solely automated decisions that produce legal or similarly significant effects about you.
Partybloom is intended for adults. The website is not directed at children under 13, and we do not knowingly collect their data. Customers aged 13–17 should use the site with parental or guardian consent. Balloons and small parts must be used under adult supervision per our safety guidance.
13. Security
We use encryption in transit (HTTPS), access controls and reputable processors to protect your data. No method of transmission is perfectly secure, but we take reasonable steps to safeguard your information and to notify you and regulators of a breach where required.
14. Complaints and contact
If you have a concern, contact us first at support@bighandevents.shop and we will try to resolve it. You also have the right to complain to your data protection authority — in the UK, the Information Commissioner's Office (ICO); in the EU, your local supervisory authority.
We may update this policy from time to time; the "last updated" date above reflects the latest version. Governing law: England and Wales.
Looking for something else? Visit Support or contact us.