Privacy Notice
Last updated: 9 October 2026
This notice explains what personal information Giggle Factory collects, why, who it is shared with and the rights you have under the Protection of Personal Information Act, 2013 (POPIA).
Who we are
Giggle Factory is a balloon décor, event styling, party-equipment hire and catering business in Gauteng, South Africa. We are the responsible party for the personal information described here.
For anything about your personal information, contact us at hello@gigglefactorysa.co.za or on 068 576 9870.
What we collect
When you send an enquiry through our website, by WhatsApp or by email: your name, email address, phone number and the details you give us about your event, such as the date, venue, number of guests and what you'd like. For corporate and trade enquiries, also your company name and budget if you give them.
When you book with us: the above, plus your address or the event address, the quotes and invoices we prepare for you, and records of payment.
When you open a quote or invoice link we send you: when it was opened or downloaded, and whether you accepted or declined the quote.
When you browse our website: only if you accept analytics cookies, Google Analytics records how the site is used (pages visited, device and browser type, approximate location) with your IP address shortened. If you decline, no analytics is loaded. We also briefly hold your IP address in memory to stop the enquiry form being abused; it is not stored.
We don't collect more than we need, and we never ask for identity numbers or card details on this website.
Why we use it
- To answer your enquiry and prepare a quote.
- To plan, deliver, set up and collect for your event.
- To invoice you, receive payment and keep the financial records the law requires.
- To understand how our website is used and improve it, only if you agreed to analytics.
We rely on your consent, on taking steps towards or carrying out a contract with you, on our legal obligations, and on our legitimate interest in running the business. We don't sell your information and we don't send marketing unless you ask us to.
Photographs
We like to photograph our setups for our gallery and social media. We focus on the décor, not on your guests. If a recognisable person is in a photo we want to publish, we'll ask first, and you can ask us to remove any photo of you at any time.
Who we share it with
We only share personal information with service providers that help us run the business, and only what they need:
- Supabase stores our client records, quotes and invoices (servers in London, United Kingdom).
- Vercel hosts our website and admin system.
- Resend sends our emails, including enquiry notifications, quotes and invoices.
- Google provides Google Analytics (only if you consent) and the sign-in for our staff.
- Our bank processes payments you make to us.
Some of these providers store or process information outside South Africa. We use them because they apply security protections comparable to those POPIA requires.
We may also disclose information where the law requires it.
How long we keep it
Enquiries that don't become bookings are kept for up to 12 months, then deleted. Booking, quote and invoice records are kept for five years to meet tax and accounting requirements.
Keeping it safe
Our records are stored with providers that encrypt data in transit and at rest. Access is limited to the people at Giggle Factory who need it to serve you, and protected by individual logins.
Your rights
You have the right to:
- ask what personal information we hold about you and get a copy of it;
- ask us to correct or delete information that is wrong, out of date or no longer needed;
- object to us using your information, or withdraw consent you have given (for example, to analytics);
- complain to the Information Regulator.
To use any of these rights, email hello@gigglefactorysa.co.za. We'll respond within 30 days.
If you're unhappy with how we've handled your information, please tell us first so we can put it right. You can also complain to the Information Regulator (South Africa): inforegulator.org.za.
Changes to this notice
We'll update this notice when how we handle personal information changes. The date at the top shows when it last changed.