Privacy Policy

Scope & Controller

This policy covers information processed when you browse our website, contact us, book our services, attend events we produce, or appear in media created at those events. The data controller is Confetti Collective, India. For any questions, email confetticollective@gmail.com.

What We Collect

• Contact & identity: name, email, phone, city, organisation, role.
• Event details: date(s), venue, guest counts, cultural preferences, budgets, vendor lists.
• Communications: messages sent to us (email, WhatsApp, forms), call notes, feedback.
• Media from events: photographs and video taken by us or our vendors at events where we work.
• Transactional: invoices, payment confirmations, GST details (when applicable).
• Technical: device/browser data, pages viewed, cookies or similar (see Cookies).

We generally do not ask for sensitive personal data. If you voluntarily share such data (e.g., health-related accommodations), we use it only to serve the stated need and then minimise/erase it when no longer required.

How We Use Your Data

• Provide, plan, and deliver event services you request.
• Prepare proposals, budgets, and production schedules.
• Communicate with you about enquiries, bookings, and support.
• Operate our website, improve content and usability.
• Comply with legal obligations (tax, accounting, safety).
• Showcase our work (with your consent or another applicable basis).

Legal bases (as applicable): your consent; performance of a contract; compliance with legal obligations; and our legitimate interests (for example, securing our services and improving user experience) balanced against your rights.

Cookies & Similar Technologies

Our site may use strictly necessary cookies (for basic navigation and security) and optional analytics cookies. You can control non-essential cookies via your browser settings. Blocking some cookies may affect site features.

Sharing & Processors

We share data only as needed to run your event or our business:

• Vendors (e.g., florists, caterers, lighting/audio): limited information required to perform their tasks.
• Operational partners (e.g., printing, rentals, logistics, payment service providers).
• Technology providers offering hosting, email, analytics, storage, or collaboration tools.
• Legal & compliance when required by law, regulation, or to protect rights and safety.

When data is processed outside India, we use reasonable measures to ensure protections consistent with Indian law (e.g., contractual safeguards), subject to any government notifications and rules.

Photos, Video & Portfolio Use

We may capture photographs/video at events we produce. We use them to deliver your album and—where permitted—to showcase our work on our website and social media. You can opt out of portfolio use at any time by contacting us; we will honour future use restrictions and remove feasible past posts where platforms allow.

Data Retention

We keep data for as long as needed for the purpose collected: typically enquiry records for 18 months, project files for 7 years (accounting/legal), and media archives for up to 7 years unless you request earlier deletion and no legal obligation requires retention.

Your Rights

Subject to applicable law, you may request access, correction, updating, deletion, withdrawal of consent, and grievance redressal. We will respond within reasonable timeframes. To exercise rights, email confetticollective@gmail.com.

Security

We use reasonable technical and organisational measures to protect data (access controls, encryption in transit, least-privilege practices). No online service can be 100% secure; please notify us immediately of any suspected incident.

Children

Our website and services are directed to adults. If you believe a child’s data was provided to us without appropriate consent, contact us so we can delete it where required.

Changes

We may update this policy to reflect operational or legal changes. We will post the new version with an updated date and, when material, provide a notice.

Contact & Grievance Officer