Privacy Policy

Last updated: 13 September 2026

1. Who we are

Create and Cherish Events is operated by Kirstin Tuddenham as a sole trader. We provide balloon decorations, event styling, personalised balloon products, prop hire, professional training and nationwide installation services through our trusted balloon artist network.

For data protection purposes, Kirstin Tuddenham trading as Create and Cherish Events is the data controller responsible for the personal information described in this policy.

You can contact us at:

Create and Cherish Events
50 Keepers Wood Way
Chorley
PR7 2FU

Telephone: 07739 540410
Email: [email protected]
Website: www.createandcherishevents.co.uk

2. What this policy covers

This policy explains how we collect, use, store and share personal information when you:

  • visit our website;

  • contact us by website form, email, telephone, text message, social media or in person;

  • request a quotation or make a booking;

  • order a personalised balloon product or arrange collection or delivery;

  • hire props or equipment;

  • attend one of our training courses;

  • join our mailing list;

  • work with us as a corporate client, supplier, venue or balloon-network partner; or

  • otherwise interact with Create and Cherish Events.

3. Personal information we collect

Depending on how you interact with us, we may collect:

  • your name, business name and job title;

  • your postal address, delivery address and event venue;

  • your email address and telephone number;

  • event details, including the date, time, occasion, venue, design preferences and budget;

  • information needed to personalise an order, such as a recipient’s name and age;

  • quotation, booking, contract, invoice and payment records;

  • messages, feedback and other correspondence;

  • training booking and attendance information;

  • newsletter preferences, including whether you are a customer or work within the balloon industry;

  • photographs or videos that you send to us, or that we take with appropriate permission in connection with our work;

  • business contact information obtained from organisations, directories, referrals or publicly available professional sources; and

  • technical information about use of our website, such as IP address, device and browser information, pages viewed, referral source and cookie choices.

We do not normally need special-category personal information, such as medical information. If you voluntarily tell us about an accessibility, health or dietary requirement so that we can provide a service or training safely, we will only use it for that purpose and restrict access to it.

4. How we collect information

We usually receive personal information directly from you. We may also receive it from:

  • someone booking or ordering on your behalf;

  • an employer, corporate client, event organiser or venue;

  • a referral partner or member of our balloon network;

  • social-media platforms when you contact us through them;

  • payment, booking, accounting or email-marketing providers; or

  • publicly available business sources where we have a legitimate reason to contact an organisation.

If you give us another person’s information, please ensure that you have permission to do so and that they know this policy is available.

5. Why we use personal information and our lawful bases

We use personal information only when we have a lawful reason to do so.

Enquiries, quotations and bookings

We use your details to respond to enquiries, discuss designs, check availability, prepare quotations and take steps towards a booking. Our lawful basis is taking steps at your request before entering into a contract and, where appropriate, our legitimate interest in managing genuine business enquiries.

Providing orders and services

We use your information to create personalised products, plan and deliver balloon installations, arrange access to venues, provide training, manage prop hire, collect payment and communicate about your booking. Our lawful basis is performance of our contract with you.

Administration, accounting and legal requirements

We keep appropriate records for invoicing, tax, insurance, dispute management, fraud prevention, health and safety, and other legal or regulatory requirements. Our lawful bases are legal obligation and our legitimate interests in protecting and managing our business.

Nationwide balloon-network services

Where a booking requires a balloon artist or installer in another area, we may share only the information reasonably needed with an appropriate member of our trusted network. This may include the client contact, venue, event schedule and design brief. Our lawful basis is performance of our contract and our legitimate interest in delivering an efficient nationwide service.

Improving our services

We may use enquiries, feedback, website statistics and service history to understand demand, improve our website and services, and manage our business. Our lawful basis is our legitimate interest in operating and improving Create and Cherish Events. Where non-essential cookies are involved, we rely on your consent.

Photographs and portfolio use

We may photograph our completed work and use suitable images in our portfolio, website or social media. We take care where people, particularly children, are identifiable and will obtain permission where appropriate. You can ask us not to use, or to remove, an identifiable image by contacting us.

Marketing

We send newsletters and promotional emails to individual subscribers only where we have valid consent or another lawful basis permitted by electronic-marketing law. You can unsubscribe at any time using the link in an email or by contacting us.

We may contact relevant companies using their published business contact details where the communication relates to their professional role and our services. We rely on legitimate interests for this business-to-business activity and will respect any objection or opt-out.

We do not sell personal information or mailing lists.

6. Cookies, analytics and advertising technology

Our website uses cookies and similar technology. Some cookies are essential for the website, enquiry forms, shopping features, security and cookie preferences to work. These do not require consent where they are strictly necessary.

With your consent, we may also use:

  • Google Analytics, to understand how visitors find and use the website; and

  • Meta Pixel, to measure activity linked with Facebook or Instagram and help us understand the effectiveness of advertising or social-media activity.

You can accept or decline non-essential cookie tracking through the cookie banner. You can also change or delete cookies through your browser settings. Declining non-essential cookies should not prevent you from making an enquiry.

Third-party services may receive technical information such as your IP address, device identifiers and browsing activity when their cookies are enabled. Their own privacy policies also apply.

7. Who we share information with

We may share limited personal information with trusted providers where necessary, including:

  • Create.net, which hosts our website, forms and online-shop features;

  • EmailOctopus, which manages mailing-list subscriptions and newsletters;

  • Google, for analytics and related website services where consent has been given;

  • Meta, for Facebook, Instagram and Meta Pixel services where applicable;

  • SumUp and other secure payment providers used to process payments;

  • QuickBooks and providers supporting invoicing, bookkeeping or accounting;

  • balloon artists, installers, venues, delivery providers and subcontractors involved in fulfilling a booking;

  • professional advisers such as accountants, insurers, legal advisers and IT support; and

  • public authorities, regulators, courts or law-enforcement bodies where disclosure is legally required or required by law.

These parties may act as our processors or as separate data controllers, depending on the service. We require providers acting on our behalf to use information only for the agreed purpose and to protect it appropriately.

8. International transfers

Some technology providers may process information outside the United Kingdom. Where this happens, we take reasonable steps to ensure that an appropriate legal safeguard is in place, such as UK adequacy regulations, the UK International Data Transfer Agreement, the UK Addendum to approved contractual clauses, or another lawful safeguard.

9. How long we keep information

We keep personal information only for as long as reasonably necessary:

  • enquiries that do not become bookings are normally kept for up to 12 months;

  • booking, contract, order, payment, invoice and accounting records may be kept for up to six years after the end of the relevant relationship or accounting period;

  • design briefs, venue details and operational messages are kept for as long as needed to complete the service and deal with reasonable follow-up questions or claims;

  • training records are normally kept for up to six years where needed to confirm attendance, certification, payment or the service supplied;

  • mailing-list information is kept until you unsubscribe or we stop using the list; we may retain minimal suppression information so that we do not contact you again;

  • cookie and analytics information is kept according to our configured retention settings and the relevant provider’s policy, and event-level analytics data is normally retained for no longer than 14 months; and

  • photographs used as part of our portfolio may be kept while they remain relevant, unless there is a good reason to remove them sooner.

We may keep information for longer where required by law, insurance, a dispute, a safeguarding concern or the establishment, exercise or defence of legal claims. We securely delete or anonymise information when it is no longer required.

10. Children’s information

Our services are often ordered for children’s celebrations, but bookings and website enquiries must be made by an adult. We may receive a child’s first name, age or event details where needed to personalise an order. We use that information only to fulfil the order and do not knowingly use it for direct marketing.

If you believe a child has provided personal information to us without appropriate permission, please contact us.

11. How we protect information

We use reasonable technical and organisational measures to protect personal information against loss, misuse, unauthorised access, alteration or disclosure. Access is limited to people who need the information for their role. No internet service or electronic storage method can be guaranteed to be completely secure, but we review our working practices and respond appropriately to suspected data incidents.

12. Your data-protection rights

Depending on the circumstances, you may have the right to:

  • ask for a copy of the personal information we hold about you;

  • ask us to correct inaccurate or incomplete information;

  • ask us to delete your information;

  • ask us to restrict how we use your information;

  • object to processing based on legitimate interests;

  • object at any time to direct marketing;

  • receive certain information in a portable format;

  • withdraw consent at any time where we rely on consent; and

  • complain to the Information Commissioner’s Office.

These rights are not always absolute and exemptions may apply. We may need to confirm your identity before acting on a request. We will normally respond within one month.

To exercise a right, email [email protected] or write to the address in section 1.

You can also contact the Information Commissioner’s Office:

Website: www.ico.org.uk
Telephone: 0303 123 1113

We would appreciate the opportunity to address your concern first, but you are entitled to contact the ICO at any time.

13. Automated decision-making

We do not use personal information to make solely automated decisions that produce legal or similarly significant effects.

14. Links to other websites

Our website may link to third-party websites or social-media platforms. We are not responsible for their privacy practices. Please review the privacy information provided by those organisations before giving them personal information.

15. Changes to this policy

We may update this policy when our services, suppliers or legal obligations change. The latest version will be published on this page with the updated date. If a change significantly affects how we use personal information, we will take reasonable steps to bring it to the attention of affected people.