Terms, Privacy & Cookies Policy

This document explains the rules for using the BOOM BALLOONS website and how we process personal data. By using the website or submitting an enquiry/order, you accept these terms.

1. Data controller

The data controller is BOOM BALLOONS. For privacy questions or to exercise your rights, please contact us using the details below.

Privacy contact:
Email: booom.ballooons@gmail.com
Phone: +48 881 629 541

2. What data we collect

Form data: name, phone number, email address, message/order notes, order details.
Technical data: IP address (may appear in server logs), browser/device type, user-agent.
Cookie/pixel data (with consent): on-site events, pages viewed, traffic source, advertising identifiers (Google/Meta cookies) and aggregated analytics.

3. Purposes of processing

to handle your enquiry/order,
to contact you and clarify details,
to arrange delivery (if applicable),
to analyse traffic and improve the website/service (GA4),
to measure ad performance and run remarketing (Google Ads, Meta Pixel) — only with cookie consent.

4. Legal basis

contract performance or steps prior to entering into a contract (handling an enquiry/order),
legitimate interest (customer contact, protection against abuse, service improvement),
consent — for analytics/marketing cookies and pixels (GA4, Google Ads, Meta Pixel).

5. Analytics & advertising tools

The website may use (with cookie consent):

Google Analytics 4 (GA4) — visit and interaction analytics.
Google Ads — campaign measurement, remarketing and ad statistics.
Meta Pixel (Facebook/Instagram) — conversion measurement and ads within Meta services.
Hotjar — a user behaviour analytics tool (heatmaps, surveys and/or session recordings) used to improve website usability.

These tools may use cookies/identifiers and may process data in aggregated form or linked to your browser/device.

Hotjar may collect information about on-page interactions (e.g., clicks, scrolling) and technical data about your browser/device. Hotjar is not intended to collect “sensitive” personal data; we do not ask users to submit confidential information through the website forms. Hotjar is used only with your consent to analytics cookies.

You can change/withdraw consent via the cookie banner or your browser settings. Hotjar also provides an opt-out page: Hotjar Do Not Track.

6. Cookies: types and management

Necessary — required for basic website functionality (e.g., language settings).
Analytics — helps us understand how the site is used (GA4).
Marketing — advertising and remarketing (Google Ads, Meta Pixel).

You can accept or change cookie settings in the cookie banner (if enabled) and in your browser settings.

7. Opt-out / ad settings

Google ad settings: adssettings.google.com
Google Analytics opt-out add-on: tools.google.com/dlpage/gaoptout
Meta ad preferences: facebook.com/adpreferences

8. Data recipients

We do not sell your data. Data may be shared only when necessary to operate the website or fulfil an order:

technical infrastructure providers (hosting/database),
courier/delivery services — if delivery is required,
Google/Meta — only within your analytics/marketing cookie consent.

9. Transfers outside the EEA

Google and Meta may process data on servers outside the EEA. Where applicable, transfers are carried out using GDPR mechanisms (e.g., Standard Contractual Clauses).

10. Data retention

enquiry/order data — generally up to 30 days after fulfilment, then deleted or anonymised (unless longer retention is required by law),
cookies — according to browser settings and providers’ policies.

11. Your rights

access, rectification, erasure (where applicable),
restriction of processing, objection (in certain cases),
withdraw consent (where processing is based on consent),
lodge a complaint with the Polish supervisory authority: UODO.

12. Changes to this document

We may update this document if website functionality or legal requirements change. The current version is always available on this page.