Privacy Policy

Last updated: October 2026

Colourful Castles respects your privacy and takes the protection of personal information seriously. This Privacy Policy explains what information we collect, why we use it, how long we may keep it, who it may be shared with and the rights you have in relation to your personal data.

In this policy, "we", "us" and "our" refer to Colourful Castles. "You" and "your" refer to customers, prospective customers and visitors to our website.

We process personal data in accordance with applicable UK data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

Who Is Responsible for Your Personal Data?

Colourful Castles is responsible for deciding how and why personal information collected through our business is used.

Our contact details are:

Colourful Castles
29 Crowland Road
Luton
Bedfordshire
LU2 8EH

Email: info@colourfulcastles.co.uk
Telephone: 07913 750324

Mr Marc Turner is responsible for overseeing data protection matters within the business. Questions concerning this policy or the way we handle your information can be sent to the email address above.

What Personal Information Do We Collect?

The information we collect depends on how you interact with us. When you make an enquiry, request information or place a booking, this may include:

• Your name;
• Home, venue or delivery address;
• Email address;
• Telephone number;
• Details of your booking, event or enquiry;
• Correspondence between you and Colourful Castles;
• Payment and transaction information where applicable;
• Technical information generated when you use our website, which may include an IP address, browser information and cookie data.

We aim to collect only the information reasonably required to respond to enquiries, administer bookings, deliver our equipment and services, maintain appropriate business records and operate our website.

Why Do We Use Your Personal Information?

We primarily use personal information to provide the service you have requested. For example, if you book one of our bouncy castles, soft play packages or other party equipment, we need sufficient information to arrange your booking, communicate with you and deliver and collect the equipment.

We may use personal information to:

• Respond to enquiries and quotation requests;
• Process and administer bookings;
• Contact you about your booking or event;
• Arrange delivery, installation and collection;
• Maintain financial, tax and business records;
• Deal with complaints, disputes or insurance matters;
• Prevent fraud and protect our business;
• Maintain the security and operation of our website;
• Send marketing communications where we are permitted to do so.

Our Lawful Bases for Processing

Under UK data protection law, we need a lawful basis for using personal information. Depending on the circumstances, we may rely upon:

• Contract: where processing is necessary to take steps at your request before entering into a contract or to fulfil a booking you have made with us.
• Legal obligation: where we need to retain or process information to comply with a legal requirement, such as accounting or tax obligations.
• Legitimate interests: where it is reasonably necessary for operating and protecting our business, responding to customers, maintaining records, preventing fraud or dealing with legal and insurance matters, provided those interests are not overridden by your rights.
• Consent: where we have specifically asked for and obtained your consent, such as for certain marketing communications or uses of non-essential website technologies where consent is required.

How Long Do We Keep Personal Information?

We do not intend to keep personal information for longer than it is reasonably required.

Certain customer and transaction records may need to be retained for up to seven years where this is necessary for accounting, tax, insurance, contractual or legal purposes. Other information may be deleted or anonymised sooner when there is no longer a legitimate reason to retain it.

Where information is retained solely because you have agreed to receive marketing communications, it may be kept until you withdraw your consent or unsubscribe, subject to any information we need to retain to record your preference.

Who Can Access Your Information?

Access to customer information is restricted to Colourful Castles and authorised people who require it for legitimate business purposes.

We also use third-party companies and technology providers to help us operate our business. These may include website and booking system providers, email providers, payment services, hosting and IT providers, analytics services and professional advisers.

Where these organisations process personal information on our behalf, we expect appropriate data protection and security arrangements to be in place.

We do not sell your personal information to third parties for their own marketing purposes.

When Might We Share Personal Information?

There may be circumstances in which information needs to be disclosed to another organisation. This could include our accountants, insurers, legal advisers, service providers or relevant authorities.

We may also disclose information where reasonably necessary to establish, exercise or defend a legal claim, investigate suspected fraud, deal with an insurance matter, comply with a court order or meet another legal or regulatory requirement.

International Data Transfers

Some technology providers may process or store information outside the United Kingdom. Where personal data is transferred internationally, we take reasonable steps to ensure that an appropriate lawful transfer mechanism or other applicable safeguard is used where required by UK data protection law.

Your Data Protection Rights

Depending on the circumstances and the lawful basis on which your information is being processed, you may have rights including the right to:

• Ask for a copy of personal information we hold about you;
• Ask us to correct inaccurate or incomplete information;
• Ask us to erase personal information in certain circumstances;
• Ask us to restrict the processing of your information in certain circumstances;
• Object to certain types of processing;
• Request the transfer of certain information where the right to data portability applies;
• Withdraw consent where we rely upon your consent to process information.

These rights are not absolute and may not apply in every situation. For example, we may need to retain certain information after a deletion request where we have a legal obligation or another lawful reason to keep it.

To make a request concerning your personal information, email info@colourfulcastles.co.uk. We may need to verify your identity before releasing or changing personal information.

Marketing Communications

Where we send marketing communications, we will do so in accordance with applicable data protection and electronic marketing rules.

You can ask us to stop sending direct marketing at any time. Where an email contains an unsubscribe facility, you can use that option, or you can contact us directly at info@colourfulcastles.co.uk.

Cookies and Website Technologies

Our website may use cookies and similar technologies. Cookies are small pieces of information stored on or accessed from your device when you visit a website.

Some technologies may be necessary for the website to operate correctly, for example to provide requested functionality, maintain security or enable the booking process. Other technologies may be used for purposes such as measuring website usage and performance.

Where consent is legally required for a particular cookie or similar technology, it will not be used unless the necessary consent has been obtained. Where an applicable legal exemption permits a technology to be used without consent, we will provide the information and controls required by law.

Third-party services used by our website may also process information in accordance with their own privacy policies. You can use the cookie controls provided on our website, where available, to manage your preferences.

Social Media and Third-Party Websites

If you contact us through Facebook or another social media platform, the operator of that service may also collect and retain information relating to your communication. Their handling of your information is governed by their own privacy policies.

Our website may also contain links to websites operated by other organisations. Colourful Castles is not responsible for the privacy practices of independently operated third-party websites.

Keeping Your Information Secure

We take reasonable organisational and technical measures to protect the personal information under our control against unauthorised access, loss, misuse, alteration or disclosure.

No website, email service or internet transmission can be guaranteed to be completely secure, but we take data protection into account when handling customer information and when selecting services used to operate our business.

Children's Information

Our equipment is frequently hired for children's parties, but bookings should be made by a responsible adult. We do not intentionally require children to provide us with personal information in order to hire our equipment.

If you believe that a child has supplied personal information to us unnecessarily, please contact us so that we can review it.

How to Make a Complaint

If you have a concern about the way Colourful Castles has handled your personal information, please contact us first at info@colourfulcastles.co.uk so that we have an opportunity to investigate the matter.

You also have the right to raise a data protection complaint with the Information Commissioner's Office (ICO), the UK's data protection regulator.

Changes to This Privacy Policy

We may update this Privacy Policy when our business practices, website services or legal obligations change. The latest version will be published on this page with the date of the most recent update shown at the top.

Contact Colourful Castles

If you have a question about this Privacy Policy, the personal information we hold about you or your data protection rights, please contact:

Colourful Castles
29 Crowland Road
Luton, Bedfordshire LU2 8EH
Email: info@colourfulcastles.co.uk
Telephone: 07913 750324