Privacy Policy
Last updated: 4 August 2026
Party & Pillow is run by Defiance Street Collective LLC, and this page explains what we do with your information. We’ve tried to write it in plain words rather than the usual wall of defensive legal text, because a lot of what you tell us is about your child, and you deserve a straight answer about where it goes.
The short version: we collect what we need to write your child’s night, we don’t sell any of it to anyone, and you can ask us to delete it at any time.
Who we are
Defiance Street Collective LLC, trading as Party & Pillow, 210 Ditto Street #95, Archbold, OH 43502, United States. For anything on this page, write to partymakers@partyandpillow.com and we’ll reply within 48 hours.
If you’re in the UK or EU, we’re the data controller for everything described here.
What we collect
When you buy an experience. Your name and email address, and a record of what you bought, when, and for how much. Payment itself is handled by Stripe — card numbers never reach us and we never see them.
When you fill in the questionnaire. This is the substantial one, and it’s worth being specific about, because it’s about your child:
- The name, age and pronouns of the child or children the night is for
- The age edition you’ve chosen, and the names or ages of other guests
- What you’ve told us about the night — the occasion, the timings, what you want in or out
- Food and dietary information, including allergies
- Personal touches: interests, pets, inside jokes, the details that make the story theirs
- Practical and sensory needs — anything you’ve told us a child needs us to plan around
When you make an account. An email address, and whatever’s needed to sign you in. We use magic links, so there’s no password for us to store or lose.
When you use the site. Standard analytics through Google Analytics 4 — pages viewed, roughly where in the world you are, what kind of device. It’s aggregate traffic data, not a file on you, and it isn’t connected to your questionnaire answers.
Why we collect it
| What | Why |
|---|---|
| Your name and email | To send your child’s letter, deliver the experience, and reply when you write to us |
| Questionnaire answers | To write the night. This is the product — without them there’s nothing to make |
| Allergy, dietary and sensory information | To plan food and activities that are actually safe for the children at the party |
| Order and payment records | To take payment, honour the refund policy, and keep the accounts |
| Analytics | To see which guides people read and which experiences they look at, so we make more of what’s useful |
If you’re in the UK or EU: we rely on contract for everything needed to make and deliver what you bought, legitimate interests for analytics and for keeping our business running, legal obligation for tax and accounting records, and consent for marketing email — which you can withdraw at any time.
Allergy and sensory information is a special category of data under UK/EU law. We hold it because you’ve asked us to plan around it, and we use it for nothing else.
Who else sees it
We don’t sell your information, and we never will. Nobody pays us for access to it. It goes to four companies, each doing a specific job for us:
- Lovable — hosts the site and the database where your order and questionnaire live
- Stripe — takes the payment. They have their own privacy policy and their own relationship with you as a cardholder
- Lovable’s email service — sends your child’s letter, your receipt, and account emails
- Google Analytics — traffic measurement only
That’s the whole list. Beyond it, we’d only hand anything over if the law required it.
How long we keep things
Questionnaire answers, including everything about your child: 12 months after we deliver the experience, then permanently deleted. Your experience is undated and doesn’t expire, so 12 months gives you room to come back for a reprint or a correction — after that, we don’t need your child’s name, age, allergies or sensory needs sitting in a database, so we get rid of them.
Order and payment records: kept for seven years, because tax law requires it. These are transaction records — who bought what, when, for how much. They don’t include the questionnaire detail.
Account details: until you close the account.
Analytics: 14 months, then Google deletes it automatically.
Your rights
Wherever you live, you can ask us to:
- Tell you what we hold about you and your child
- Send you a copy of it
- Correct anything that’s wrong
- Delete it
- Stop sending you marketing
If you’re in California or another US state with a privacy law: you also have the right not to be discriminated against for exercising any of these. We don’t sell personal information and we don’t share it for cross-context behavioural advertising, so there’s no opt-out for either — there’s nothing to opt out of.
If you’re in the UK or EU: you additionally have the right to object to processing, to ask us to restrict it, to receive your data in a portable format, and to withdraw consent where we’ve relied on it. You can also complain to your national data protection authority — in the UK that’s the ICO.
To use any of these, email partymakers@partyandpillow.com. We’ll reply within 48 hours and act within 30 days. We won’t charge you and we won’t ask why.
Where your information is held
We’re based in the United States, and so are our suppliers, so your information is stored and processed in the US. If you’re ordering from the UK or EU, that means your data is transferred outside your country. We rely on the standard contractual clauses our suppliers have in place for those transfers.
Cookies and analytics
We use cookies for two things: keeping you signed in, and Google Analytics. We don’t run advertising cookies and we don’t have third-party trackers beyond Analytics. You can block cookies in your browser — the site works fine without the analytics ones, though staying signed in needs the sign-in cookie.
Keeping it safe
The database sits behind row-level security, so questionnaire submissions can be written by the public but read only by us. Payment card data never touches our systems. Nobody outside the business has access to your child’s details.
No system is perfect, and anyone claiming otherwise is selling something. If a breach ever affected your information, we’d tell you and the relevant regulator within the timeframes the law sets.
Changes to this policy
If we change how any of this works, we’ll update the page and change the date at the top. If it’s a significant change and we hold your email address, we’ll email you rather than hoping you notice.
Getting in touch
partymakers@partyandpillow.com — for anything on this page, including deletion requests. We reply within 48 hours.
You might also want the refund policy or the terms of service.