Privacy Policy

Last updated: 19 March 2026

Confetti Stories ("we", "us", "our") is committed to protecting your personal data. This Privacy Policy explains how we collect, use and safeguard your information when you visit our website or purchase our guides, in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Data Controller

The data controller responsible for your personal data is:

Confetti Stories
17 Montpellier Parade, Harrogate, North Yorkshire, HG1 2TJ
Email: enquiries@confetti-stories.co.uk
Phone: +44 1423 876 254

2. Collection of Personal Data

We collect personal data that you provide to us directly when you:

Submit an order form on our website (first name, email address, phone number, guide selection).
Contact us via email or telephone.

We may also collect limited technical data automatically, such as your IP address, browser type and pages visited, through the use of cookies and similar technologies.

3. Purposes of Processing

We process your personal data for the following purposes:

To fulfil and manage your orders for educational guides.
To communicate with you regarding your order or enquiry.
To improve our website and the quality of our materials.
To comply with applicable legal obligations.

The legal basis for processing is your consent (where you have provided it), the performance of a contract (when fulfilling your order), and our legitimate interests (for website improvement and security).

4. Cookies

Our website may use essential cookies to ensure proper functionality. We do not use tracking cookies for advertising purposes. You may configure your browser to refuse cookies, though this may affect your experience of the Website.

5. Sharing Data with Third Parties

We do not sell, trade or rent your personal data to third parties. We may share your data with trusted service providers who assist us in operating the website or processing orders, provided they agree to keep your information confidential. We may also disclose your data if required by law or to protect our legal rights.

6. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure or destruction. However, no method of transmission over the internet is entirely secure, and we cannot guarantee absolute security.

7. Your Rights

Under the UK GDPR, you have the following rights in relation to your personal data:

Right of access — you may request a copy of the personal data we hold about you.
Right to rectification — you may ask us to correct inaccurate or incomplete data.
Right to erasure — you may request that we delete your personal data, subject to legal obligations.
Right to restriction of processing — you may ask us to limit how we use your data in certain circumstances.
Right to data portability — you may request your data in a structured, commonly used, machine-readable format.
Right to object — you may object to our processing of your personal data based on legitimate interests.

To exercise any of these rights, please contact us at enquiries@confetti-stories.co.uk. We will respond to your request within one month, as required by the UK GDPR.

8. Contact Regarding Your Data

If you have any questions or concerns about how we handle your personal data, please contact us using the details above. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data has been handled unlawfully.

← Back to Home