Privaci Policy

6. Why We Use Your Personal Data

Under the GDPR, we only process personal data when we have a valid lawful basis:

7. Contractual Data

Providing certain personal data (such as delivery address and contact phone) is necessary for us to enter into or perform a contract with you. Where information is mandatory, it is clearly indicated.

8. Legitimate Interests

Where we rely on legitimate interests, we ensure our interests are balanced against your fundamental rights and freedoms. Our legitimate interests include protecting our business, preventing fraud, maintaining website security, and defending legal claims.

9. Marketing Communications

We only send promotional emails where we have an appropriate legal basis or your explicit consent. Marketing consent is strictly voluntary, never bundled with Terms acceptance, and can be withdrawn at any time via the unsubscribe link in every email.

18. Sharing Personal Data

We do not sell personal data. We share data only where strictly necessary with:

• Payment gateways (for secure card processing);
• Couriers and logistics partners (for parcel/balloon delivery);
• Event venues and coordinated event partners;
• IT, hosting, and cloud communication infrastructure providers;
• Accountants, tax consultants, and legal advisers;
• Public authorities where mandatory under Hungarian or EU law.

10. Cookies & 11. Cookie Categories

Cookies are small files stored on your device. We categorise cookies into 4 distinct groups:

• Strictly Necessary: Essential for cart, checkout, session security, and storing your consent preferences. (Always active).
• Analytics: Help us understand website traffic and usage patterns. (Default: OFF).
• Functional: Enable enhanced features like interactive maps. (Default: OFF).
• Marketing: Used for conversion tracking and targeted advertising. (Default: OFF).

13. Cookie Consent & 14. Managing Preferences

Non-essential cookies are only activated after you give explicit consent via our cookie banner. You can review or modify your cookie settings at any time using the Cookie Settings link in our website footer.

15. Third-Party Service Providers

We partner with trusted service providers to run our operations (hosting, payment gateways, couriers, invoicing systems, analytics). All processors are bound by GDPR data processing agreements (DPAs).

16. Social Media & 17. Maps & Embedded Content

When you interact with our Instagram or social media profiles, the platform processes data under its privacy policy. Embedded map elements on our Contact page are loaded in accordance with your cookie preferences.

20. How Long We Keep Personal Data

We retain personal data only for as long as necessary to fulfil the purposes for which it was collected or to satisfy statutory obligations:

• Orders & contracts: Retained for the statutory limitation period for contractual claims.
• Invoices & accounting records: Retained for 8 years in compliance with Hungarian accounting and tax legislation.
• General customer enquiries: Retained for up to 12 months after resolution.
• Marketing consent records: Retained until withdrawal plus an evidential verification period.
• Complaints: Retained for 3 years as mandated by Hungarian consumer protection law.

22. Your GDPR Rights

Under the GDPR, you have comprehensive rights regarding your personal data:

• Access: Obtain confirmation and copies of personal data we hold about you.
• Rectification: Request correction of inaccurate or incomplete information.
• Erasure (“Right to be forgotten”): Request deletion where data is no longer necessary or consent is withdrawn.
• Restriction: Request temporary freezing of processing in specific circumstances.
• Object: Object to processing based on legitimate interests or direct marketing.
• Data Portability: Receive your data in a structured, machine-readable format.
• Withdraw Consent: Withdraw consent at any time without affecting prior lawful processing.

23. Exercising Rights & 24. Supervisory Authority

To exercise any right, email us at [PRIVACY EMAIL]. You also have the right to lodge a complaint with the Hungarian National Authority for Data Protection and Freedom of Information (NAIH) or your local EU supervisory authority.

21. Technical & Organisational Measures

We employ robust technical and organisational security measures to protect personal data against unauthorised access, loss, alteration, or disclosure. Measures include TLS/SSL encryption, restricted access controls, regular backups, and secure hosting infrastructure.

28. Data Breaches

In the unlikely event of a personal data breach, we will assess the incident and notify the competent supervisory authority and affected data subjects without undue delay where required by law.

25. Processing Related to Children

Our website and commercial services are intended for adults. However, because our bespoke balloon creations often celebrate children's birthdays, adult customers may provide child names or ages for custom products.

We only use this information to fulfil the requested personalised decoration. Where identifiable photographs of children are involved, strict parental consent is required in compliance with data protection laws.

19. Transfers Outside the EEA

Where personal data is transferred outside the European Economic Area (EEA), we ensure appropriate safeguards are in place in accordance with Chapter V of the GDPR, such as European Commission Adequacy Decisions or Standard Contractual Clauses (SCCs).

30. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal amendments, technological enhancements, or modifications in our business services. The current version and effective date will always be published on this page.

27. Automated Decision-Making & 29. External Links

We do not use automated decision-making or profiling that produces legal effects. Our website may contain links to external third-party sites whose privacy practices we do not control.

31. Privacy Contact Details

If you have any questions, requests, or concerns regarding this Privacy Policy or our data handling practices, please contact us: