Privacy Policy

Last Updated: 13 August 2026

AJ Balloons ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website https://ajballoons.online/ (the "Site"). Please read this policy carefully. If you do not agree with the terms of this privacy policy, please do not access the site.

1. Who We Are (Data Controller)

The data controller responsible for your personal data under the General Data Protection Regulation (GDPR) and the Irish Data Protection Act 2018 is:

• Trading name: AJ Balloons
• Location: Dublin, Ireland
• Email: order@ajballoons.shop
• Phone: +353 85 835 0244

We are not required to appoint a Data Protection Officer. Any privacy query should be sent to the email address above.

2. Information We Collect

We may collect information about you in a variety of ways. The information we may collect on the Site includes:

Personal Data

Personally identifiable information, such as your name, email address, phone number, and event details (such as event date and location), that you voluntarily give to us when you fill out the contact form on the Site.

Derivative Data

Information our servers automatically collect when you access the Site, such as your IP address, your browser type, your operating system, your access times, and the pages you have viewed directly before and after accessing the Site. We also use cookies for basic site analytics and functionality.

Reviews You Submit

If you leave a review on the Site, we collect the name you enter, the occasion, your rating and comment, and any photograph you choose to upload. This information is published publicly on the Site and is visible to anyone who visits it, so please do not include anything in your review that you would not want to be public, and do not upload photographs of other people without their agreement. We also store a rate-limiting record derived from your IP address for 24 hours in order to prevent spam. You can ask us to remove your review at any time by emailing us, and we will do so.

3. Legal Basis for Processing

Under the GDPR we must have a lawful basis for processing your personal data. We rely on the following:

• Performance of a contract (Art. 6(1)(b)) — to prepare your quote, manage your booking, deliver and install your decorations, and process payment.
• Consent (Art. 6(1)(a)) — for analytics and marketing cookies, and for publishing any review and photograph you choose to submit. You can withdraw your consent at any time.
• Legitimate interests (Art. 6(1)(f)) — to keep our Site secure, to prevent spam and fraudulent submissions, and to keep records of our dealings with clients.
• Legal obligation (Art. 6(1)(c)) — to retain invoices and related records for the periods required by Irish tax law.

4. How We Use Your Information

Having accurate information about you permits us to provide you with a smooth, efficient, and customized experience. Specifically, we may use information collected about you via the Site to:

• Respond to your inquiries, provide quotes, and manage your order.
• Communicate with you regarding your event and our services.
• Process payments and send you invoices.
• Monitor and analyze usage and trends to improve your experience with the Site.
• Comply with legal and regulatory requirements.

5. Disclosure of Your Information and Third Parties

We do not sell, trade, or rent your personal data to anyone. We do share it with a small number of service providers who help us run the Site and our business, and who process it only on our instructions:

• Adm.tools (Ukraine / EU data centres) — our web hosting and email provider. Data submitted through the Site is stored on their servers.
• Google Ireland Limited — we use Google Tag Manager and Google Analytics to understand how the Site is used. These services set cookies and process technical data such as your IP address, device and browser type, and the pages you view. They are loaded only where you have accepted analytics cookies.
• Meta Platforms Ireland Limited — where you contact us through WhatsApp, Instagram or Facebook, your message is processed by Meta under its own privacy policy.

We may also disclose your information where we are required to do so by law, or where it is necessary to enforce our site policies or to protect the rights, property or safety of ourselves or others.

6. How Long We Keep Your Data

• Enquiries that do not become bookings: up to 12 months from your last contact with us.
• Booking and client records: for the duration of the booking and for 3 years afterwards, so that we can deal with any follow-up query or dispute.
• Invoices and accounting records: 6 years, as required by Irish tax law.
• Reviews and review photographs: until you ask us to remove them.
• Anti-spam records derived from IP addresses: 24 hours.
• Analytics cookie data: in line with Google's retention settings, currently up to 14 months.

7. International Transfers

We aim to keep your data within the European Economic Area (EEA). Some of our providers, including Google and Meta, may transfer data to countries outside the EEA, such as the United States. Where that happens, the transfer is protected by the safeguards those providers put in place, such as the European Commission's Standard Contractual Clauses and, in the case of US-based recipients, certification under the EU–US Data Privacy Framework. You may request further information about these safeguards using the contact details in section 1.

8. Data Security

We use administrative, technical, and physical security measures to help protect your personal information. While we have taken reasonable steps to secure the personal information you provide to us, please be aware that despite our efforts, no security measures are perfect or impenetrable, and no method of data transmission can be guaranteed against any interception or other type of misuse.

9. Your Data Protection Rights (GDPR)

If you are a resident of the European Economic Area (EEA), you have certain data protection rights. We aim to take reasonable steps to allow you to correct, amend, delete, or limit the use of your Personal Data.

• The right to access, update or delete the information we have on you.
• The right of rectification. You have the right to have your information rectified if that information is inaccurate or incomplete.
• The right to object. You have the right to object to our processing of your Personal Data.
• The right of restriction. You have the right to request that we restrict the processing of your personal information.
• The right to data portability. You have the right to be provided with a copy of the information we have on you in a structured, machine-readable and commonly used format.
• The right to withdraw consent. You also have the right to withdraw your consent at any time where we relied on your consent to process your personal information.

To exercise any of these rights, please contact us using the details in section 1. We will respond within one month. There is no charge for making a request.

Your right to complain. If you are not satisfied with how we have handled your personal data or your request, you have the right to lodge a complaint with the Irish supervisory authority:

• Data Protection Commission
• 6 Pembroke Row, Dublin 2, D02 X963, Ireland
• Website: www.dataprotection.ie

10. Cookies

Cookies are small files placed on your device when you visit a website. We use two kinds:

• Strictly necessary — required for the Site to function and to remember your cookie choice. These are set without consent, as the law permits.
• Analytics — set through Google Tag Manager (container GTM-P3BHPMQT) and Google Analytics, to tell us how many people visit the Site and which pages they use. These are set only if you press "Accept" on our cookie banner. If you press "Decline", they are not set.

You can change your mind at any time by clearing your browser's site data for this website, which will make the cookie banner appear again on your next visit. You can also block or delete cookies through your browser settings, although some features of the Site may then not work as intended.

11. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. You are advised to review this Privacy Policy periodically for any changes.

12. Contact Us

If you have any questions about this Privacy Policy, or wish to exercise any of your rights, please contact us:

Email: order@ajballoons.shop
Phone: +353 85 835 0244

Full details of the data controller are set out in section 1 above.