Privacy policy.
Privacy Policy
Effective Date: October 11th 2025
This Privacy Policy explains how Tom and Matt ("we", "our", or "us") collect, use, and protect your personal information when you visit and use our website [www.tomandmattsbirthday.co.uk ("Website"). We are committed to ensuring that your privacy is protected and your personal data is handled securely and in accordance with the law.
1. Who We Are
Name: Tom and Matt
Data Controller Contact: datacontroller@tomandmattsbirthday.co.uk
We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
2. What Data We Collect
We may collect and process the following types of personal data:
Identity Data – Name, username, or similar identifier
Contact Data – Email address, phone number, postal address
Technical Data – IP address, browser type, device type, operating system
Usage Data – Information about how you use our website, pages visited
Marketing and Communications Data – Your preferences in receiving marketing
We do not collect any special category data (e.g. health, racial, religious data) unless explicitly provided and with your consent.
3. How We Collect Your Data
We collect data from you in the following ways:
Direct interactions (e.g. filling out forms, subscribing to newsletters)
Automated technologies (e.g. cookies, server logs, analytics)
Third parties (e.g. analytics providers like Google Analytics)
4. How We Use Your Data
We will only use your personal data where the law allows us to. Common uses include:
To provide and manage our website and services
To respond to enquiries or support requests
To send marketing communications (only if you have opted in)
To improve our website and user experience
To comply with legal obligations
We rely on the following lawful bases:
Consent – where you have given us permission
Contract – to fulfil a service or agreement with you
Legal obligation – for compliance with applicable laws
Legitimate interests – for running our business and improving services
5. Cookies
Our website uses cookies to enhance your experience. Cookies are small text files stored on your device.
You can control and manage cookies through your browser settings. For more details, see our Cookie Policy.
6. Sharing Your Data
We may share your data with trusted third parties, including:
Service providers (e.g. hosting, email delivery, analytics)
Legal or regulatory authorities if required
Professional advisers (e.g. lawyers, accountants)
We ensure all third parties respect the security of your data and comply with the law.
7. International Transfers
Some of our third-party providers may process data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions).
8. Data Security
We have implemented appropriate security measures to prevent your personal data from being lost, used, accessed, or disclosed in an unauthorised way.
9. Data Retention
We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.
10. Your Legal Rights
Under the UK GDPR, you have the right to:
Access your personal data
Request correction of your data
Request erasure of your data
Object to processing
Request data portability
Withdraw consent at any time
To exercise any of these rights, please get in touch with us at complaints@tomandmattsbirthdayparty.co.uk
11. Complaints
If you are unhappy with how we handle your data, please don't hesitate to contact us first. You also have the right to complain to the Information Commissioner's Office (ICO):
Website: https://www.ico.org.uk
Phone: 0303 123 1113
12. Updates to This Policy
We may update this privacy policy from time to time. The latest version will always be posted on this page, with the "Effective Date" noted at the top.
13. Contact Us
If you have any questions about this privacy policy or your data, please contact:
Email: privacy@tomandmattsbirthday.co.uk