Privacy Policy

To arrange your celebration we may collect the following:

• Name
• Email address
• Telephone number
• Hotel information
• Delivery addresses
• Celebration details (occasion, colour palette, preferences)
• Booking and payment information

We use your information to:

• Manage bookings and enquiries
• Coordinate your celebration
• Liaise with hotels where authorised
• Deliver services on the agreed date
• Improve customer experience
• Meet our legal and accounting obligations
• Send marketing communications where consent has been provided

Your information is never sold to third parties. We share information only with trusted suppliers (such as the hotel or florist coordinating your celebration) and processors listed below, and only to the extent necessary to deliver your booking.

We use a small number of carefully chosen tools to run our business, including:

• Stripe — secure payment processing
• Google Workspace — email and document management
• Google Calendar — diary and celebration scheduling
• Zapier — internal automation between the above tools
• Typebot — enquiry and booking form handling

Each provider maintains its own privacy and security standards, and information is shared only for the purposes described above.

We keep booking and financial records for as long as necessary to meet our contractual and legal obligations (typically up to seven years for accounting purposes). Marketing contact details are kept until you unsubscribe or request deletion.

Under UK GDPR you have the right to:

• Be informed about how your data is used
• Access the personal data we hold about you
• Request correction of inaccurate data
• Request erasure (“the right to be forgotten”)
• Restrict or object to processing
• Request data portability
• Withdraw consent at any time
• Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise any of these rights, email bookings@balloonologylondon.com.

We take appropriate technical and organisational measures to protect your data, including encrypted transmission, restricted access and reputable processors. No system is completely secure, but we act quickly and transparently in the unlikely event of an incident.