Privacy Policy
Last updated: 25 August 2026
Party & Pillow is run by Defiance Street Collective LLC, and this page explains what we do with your information. We’ve tried to write it in plain words rather than the usual wall of defensive legal text, because you deserve a straight answer about where your information goes.
The short version: we collect your name, your email and a record of what you bought, we don’t sell any of it to anyone, and you can ask us to delete it at any time.
Who we are
Defiance Street Collective LLC, trading as Party & Pillow, 210 Ditto Street #95, Archbold, OH 43502, United States. For anything on this page, write to partymakers@partyandpillow.com and we’ll reply within 48 hours.
If you’re in the UK or EU, we’re the data controller for everything described here.
What we collect
When you buy a kit. Your name and email address, and a record of what you bought, when, and for how much. Payment itself is handled by Stripe — card numbers never reach us and we never see them.
When you make an account. An email address, and whatever’s needed to sign you in. We use magic links, so there’s no password for us to store or lose.
When you use the site. Standard analytics through Google Analytics 4 — pages viewed, roughly where in the world you are, what kind of device. It’s aggregate traffic data, not a file on you.
What we don’t collect. Anything about your child. Kits are printable files, identical for every buyer, so we never ask for a child’s name, age, allergies or needs, and we have no way to receive them.
Why we collect it
| What | Why |
|---|---|
| Your name and email | To deliver your kit, send your receipt, and reply when you write to us |
| Order and payment records | To take payment, honour the refund policy, and keep the accounts |
| Analytics | To see which guides people read and which kits they look at, so we make more of what’s useful |
If you’re in the UK or EU: we rely on contract for everything needed to make and deliver what you bought, legitimate interests for analytics and for keeping our business running, legal obligation for tax and accounting records, and consent for marketing email — which you can withdraw at any time.
Who else sees it
We don’t sell your information, and we never will. Nobody pays us for access to it. It goes to four companies, each doing a specific job for us:
- Lovable — hosts the site and the database where your order lives
- Stripe — takes the payment. They have their own privacy policy and their own relationship with you as a cardholder
- Lovable’s email service — sends your kit, your receipt, and account emails
- Google Analytics — traffic measurement only
That’s the whole list. Beyond it, we’d only hand anything over if the law required it.
How long we keep things
Order and payment records: kept for 7 years, because tax law requires it. These are transaction records — who bought what, when, for how much.
Account details: until you close the account.
Analytics: 14 months, then Google deletes it automatically.
Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you
- Send you a copy of it
- Correct anything that’s wrong
- Delete it
- Stop sending you marketing
If you’re in California or another US state with a privacy law: you also have the right not to be discriminated against for exercising any of these. We don’t sell personal information and we don’t share it for cross-context behavioural advertising, so there’s no opt-out for either — there’s nothing to opt out of.
If you’re in the UK or EU: you additionally have the right to object to processing, to ask us to restrict it, to receive your data in a portable format, and to withdraw consent where we’ve relied on it. You can also complain to your national data protection authority — in the UK that’s the ICO.
To use any of these, email partymakers@partyandpillow.com. We’ll reply within 48 hours and act within 30 days. We won’t charge you and we won’t ask why.
Where your information is held
We’re based in the United States, and so are our suppliers, so your information is stored and processed in the US. If you’re ordering from the UK or EU, that means your data is transferred outside your country. We rely on the standard contractual clauses our suppliers have in place for those transfers.
Cookies and analytics
We use cookies for two things: keeping you signed in, and Google Analytics. We don’t run advertising cookies and we don’t have third-party trackers beyond Analytics. You can block cookies in your browser — the site works fine without the analytics ones, though staying signed in needs the sign-in cookie.
Keeping it safe
The database sits behind row-level security, so order records can be read only by us. Payment card data never touches our systems.
No system is perfect, and anyone claiming otherwise is selling something. If a breach ever affected your information, we’d tell you and the relevant regulator within the timeframes the law sets.
Changes to this policy
If we change how any of this works, we’ll update the page and change the date at the top. If it’s a significant change and we hold your email address, we’ll email you rather than hoping you notice.
Getting in touch
partymakers@partyandpillow.com — for anything on this page, including deletion requests. We reply within 48 hours.
You might also want the refund policy or the terms of service.