The controller of the personal data collected through the website is [Full name or business name]. For data protection matters, write to hello@partytale.gr.
Processing is carried out in accordance with the General Data Protection Regulation (EU 2016/679, GDPR) and applicable national law.
2. What data we collect
The website has two forms. We only ask for what is needed for the purpose in question.
Order form
Contact details: full name and email.
Personalisation details: the child’s first name and age and, depending on the package, party options (e.g. number of guests, cake, menu, a note).
Party details: date, time, place and an RSVP phone number, which appear on the invitation.
Your choice of package, theme, age group, style and language, and an order code.
Your two declarations (acceptance of the terms and consent to supply starting), the version of the terms and the time of submission.
Waiting list
Email (required) and, optionally, name, theme, party month and language, together with your consent declaration.
Technical data. Our hosting service (Netlify), like any host, logs IP addresses and technical details of visits, in line with the provider’s terms and policy.
The child’s details are provided by a parent or guardian and are used only to create the files.
3. Purposes and legal bases
Fulfilling orders: personalising, producing and delivering the files, on the basis of performance of the contract.
Customer support: handling requests, corrections and matters relating to your transaction.
Tax and accounting obligations: issuing and keeping the required documents, on the basis of a legal obligation.
Waiting list: sending you one notice when orders open, on the basis of your consent.
We do not sell your data, share it with third parties for advertising, or send newsletters or promotional messages unless you ask us to.
[The legal basis for each purpose is subject to final legal review]
4. Retention and deletion
Unpaid orders: if payment is not completed, we delete the order details within 7 days, unless there is a specific legal need to keep them.
Completed orders: the child’s and party details, and the files we made, are deleted from our active systems 30 days after the party date, unless there is a legal reason to keep them.
Waiting list: details are deleted after we send the notice, unless there is another legal basis to keep them (for example, if you place an order).
Tax records (name, email, payment details and the tax document): kept for as long as tax law requires. [Exact retention period: to be confirmed with the accountant]
Deletion is not automatic. We carry it out through a regular periodic review of the form submissions in Netlify and of any copies held in email or files. Retention of technical logs and backups held by our providers depends on their own policies.
5. Technical infrastructure and third-party providers
Netlify (Netlify, Inc., USA): hosts the website and collects form submissions. Submissions are stored in our Netlify account and are visible only to us.
Fonts and images: served from the website itself. They are not loaded from Google Fonts or any other external service.
Analytics and advertising: we do not use analytics or advertising services.
Payments: not yet activated. When they open, payment will be made through [Stripe or Viva Wallet], which will process your card details. We do not receive them.
Email: files and confirmations will be sent through [email provider].
Because Netlify, Inc. is based in the USA, hosting may involve a transfer of data outside the European Economic Area, which takes place only with the safeguards required by the GDPR. [The exact transfer mechanism, for Netlify and for the payment and email providers: subject to final legal review]
6. Your rights
Where applicable, you may ask for access to, correction or deletion of your data, restriction of processing, data portability, or object to processing. Where processing is based on your consent, you may withdraw it at any time, without affecting the lawfulness of the processing carried out before.
Send your request to hello@partytale.gr. We reply within the legal deadlines, normally within one month. If you believe we have not handled your data properly, you may lodge a complaint with the Hellenic Data Protection Authority (dpa.gr).
7. Photos from your parties
Photo uploads are not open yet. When they open, the following will apply:
We accept photos of decorations, cakes, games and crafts, with no recognisable faces of children or adults, no names and no location details.
Uploading is optional. You send only photos you took yourself and give a separate consent for them to be published on the PartyTale website and channels.
We check every photo before anything is published. If we see a face or a personal detail, we do not publish it, or we send it back for cropping.
We remove metadata (EXIF) that may include location or device details. We never publish your name or your child’s.
Whenever you ask, we take the photo down and delete it.
The exact process for submitting, storing, reviewing, publishing and deleting photos will be announced before the feature is switched on.
8. Cookies and tracking technologies
As it currently works, the website uses no cookies, no analytics or advertising tools, and stores nothing on your device (such as localStorage). Fonts and images are loaded from the website itself, and there are no external tracking scripts.
When payments are activated and you go to the provider’s payment page, the provider’s own terms and technologies apply. We will update this section if we add new services that store information on your device or process personal data.