Privacy, without party spoilers.

1. Information we use

• The adult purchaser’s delivery email address.
• Order choices and personalisation supplied by the purchaser: a first name, nickname or group name, child age where relevant, selected adventure, event date and time, selected checkpoints, venue wording and RSVP wording.
• Stripe payment confirmation, order/session references, market, product and amount. We do not receive or store full card details.
• Delivery status from our email provider and messages sent to support.
• Basic security and server logs needed to prevent abuse and diagnose failures. We do not use advertising trackers on the order journey.

Please provide only information you are authorised to use. Do not submit a child’s surname, school, photograph, medical information or account credentials. The adult purchaser controls what invitation contact wording is included.

2. Why we use it

• Contract: to validate the order, take payment, generate the personalised content, deliver it and correct faults.
• Legal obligation: to keep tax, transaction and consumer-rights records where required.
• Legitimate interests: to secure the service, prevent fraud, troubleshoot delivery and establish or defend legal claims.

The immediate-digital-delivery acknowledgement is recorded to administer the purchase and applicable cancellation rights. We do not sell personal information or use order personalisation for profiling or automated decisions.

3. Who receives it

Stripe processes checkout and payment information. Resend processes the delivery email. Our hosting and backup providers process encrypted or access-controlled service data as necessary to operate the site. Providers may process data outside the UK; where required, we rely on recognised safeguards such as adequacy regulations or approved contractual clauses.

We disclose information to authorities or advisers only where legally required or necessary to protect rights and safety.

3A. Optional website analytics

Google Analytics is disabled unless you select “Accept analytics”. If accepted, it records general usage information such as pages viewed, broad device and browser details, referring pages and approximate location derived from an IP address. We do not send Google names, email addresses, order references, payment details or scavenger-hunt personalisation.

Analytics is used only to understand and improve the storefront. Advertising personalisation and Google Signals are disabled. The legal basis is your consent. You can withdraw or change your choice at any time through “Cookie settings” in the page footer. Analytics event data is retained for two months.

Google processes this information on our behalf and may process it outside the United Kingdom or your home country using its applicable contractual and data-transfer safeguards. See Google’s privacy policy.

4. Retention and security

• Abandoned unpaid order details are encrypted and deleted after 24 hours.
• Fulfilled personalisation records and generated files are deleted after 30 days.
• Private download links expire after 7 days.
• Encrypted backups rotate through 7 daily, 5 weekly and 3 monthly snapshots.
• Limited transaction, consent, tax and dispute records may be retained for up to six years where legally required. Stripe keeps its own records under its privacy notice.
• Support correspondence is normally deleted within 24 months unless needed for an unresolved claim or legal obligation.

Order records are encrypted at rest, download links use high-entropy tokens, payment webhooks are signed, and owner tools are not exposed publicly. No Internet service can promise absolute security; contact us promptly if you suspect misuse.

5. Children

Purchases may be made only by adults. A child is not asked to create an account or contact us. We process limited child-related personalisation only on the adult purchaser’s instructions to perform the order. The purchaser must have parental responsibility or appropriate permission.

6. Your rights

Depending on where you live, you may ask for access, correction, deletion, restriction, portability or an objection, and may complain to a regulator. UK residents can complain to the Information Commissioner’s Office at ico.org.uk. Email us from the purchase address; we may request limited verification. Some records cannot be deleted immediately where law requires retention.

7. Changes and contact

Material changes will be dated on this page and will not reduce rights already attached to a completed order. Contact [email protected].