Privacy Policy
Effective date: 17 August 2026
Last updated: 17 August 2026
PartyKook LLC, doing business as PartyKook (“PartyKook”, “we”, “us”, “our”), operates partykook.com, where we sell printable murder mystery party kits and party game downloads.
This policy explains what personal information we collect, why we collect it, who we share it with, how long we keep it, and what control you have over it. It applies to everyone who visits our site or buys from us, wherever you live.
We are the data controller for the information described here. You can reach us any time at info@partykook.com.
If you only want to control cookies and tracking, that’s covered in more detail in our Cookie Policy.
The short version
| What we collect | Your name, email, billing address and phone number when you order; your payment is handled by Stripe, and we never see your full card number. Plus standard analytics about how you use the site. |
| Why | To deliver your downloads, answer your questions, send you emails you asked for, run our advertising, and improve the site. |
| Do we sell your data? | We never sell your information for money. Our use of advertising cookies may count as “selling” or “sharing” under some US state laws — you can opt out. |
| How long | Order records for 7 years (tax law). Marketing contacts until you unsubscribe, then 3 years. Analytics for 14 months. |
| Your control | Access, correct, delete, export, or object. Email us and we’ll action it. |
1. Information we collect
Information you give us
When you place an order: your name, email address, billing address, phone number (if you provide one), and the details of what you bought. Your card details go directly to our payment processor — we receive only the last four digits, card brand, and whether the payment succeeded.
When you create an account: your email address, a password (stored hashed, never in readable form), and your order history.
When you subscribe to our emails: your email address and, if you give it, your first name.
When you contact us: whatever you put in your message, plus your email address so we can reply.
When you start checking out but don’t finish: if you have entered your email address or name into the checkout form, we capture it before you submit so we can send you a reminder that your cart is waiting. You can opt out of these reminders using the unsubscribe link in any of them, or by emailing us.
When you leave a review or comment: your name or display name, your review text, and your rating.
Information we collect automatically
When you visit partykook.com, our servers and our analytics tools record technical information: your IP address (truncated for analytics purposes), browser and device type, operating system, the pages you view, how long you spend on them, what you clicked, and which site or ad referred you.
Most of this beyond basic server logs depends on cookies. See our Cookie Policy.
Information we receive from others
- Stripe tells us whether a payment succeeded, the payment method type, and any fraud signals.
- Klaviyo tells us whether you opened or clicked our emails, so we can stop sending to people who aren’t interested.
- Google and Pinterest give us aggregate, non-identifying reports about how our ads perform.
We do not buy marketing lists or append data from data brokers.
2. Why we use your information, and our legal basis
If you’re in the EEA, UK, or Switzerland, GDPR requires us to name a legal basis for each use. Here they are.
| What we do | Why | Legal basis (UK/EU GDPR) |
|---|---|---|
| Process your order and deliver your download files | You bought something and we owe you it | Performance of a contract |
| Send order confirmations, receipts and download links | Same | Performance of a contract |
| Answer your support questions | You asked us something | Contract / legitimate interests |
| Keep records of sales and tax | Required by law | Legal obligation |
| Detect and prevent fraud and chargebacks | Protecting the business | Legitimate interests |
| Send marketing emails about new kits and offers | You opted in, or you bought from us and we’re telling you about similar products | Consent (or legitimate interests for existing customers, with opt-out in every email) |
| Analytics — understand which kits and pages people like | Improving the site and our products | Consent |
| Advertising — measure and target our Pinterest and Google ads | Growing the business | Consent |
| Moderate reviews and comments | Keeping the site useful and safe | Legitimate interests |
Where we rely on consent, you can withdraw it at any time and it won’t affect anything we did before you withdrew. Where we rely on legitimate interests, we’ve weighed our interest against your privacy — and you can object (see Section 7).
We do not use your information for automated decision-making or profiling that produces legal or similarly significant effects.
3. Cookies and tracking
We use cookies and similar technologies to operate our shop, understand how the site is used, and measure our advertising.
Strictly necessary cookies — cart, checkout, downloads, login, security — are always on because the site can’t work without them.
Our consent banner lets you switch the functional, analytics and marketing categories on or off individually and records your choice. We are completing the technical work so that scripts in those categories are held back until you allow them; in the meantime you can email info@partykook.com and we will apply your preference. You can change your mind at any time from the Manage Consent tab shown on every page. Our Cookie Policy lists every cookie we set.
If your browser sends a Global Privacy Control (GPC) signal, we treat it as a valid opt-out of the sale or sharing of your personal information for advertising.
4. Who we share your information with
We don’t sell your personal information, and we don’t share it with anyone except the service providers we need to run the business. Each one is bound by contract to use your data only for the purpose we’ve given it.
| Who | What they get | Why | Their policy |
|---|---|---|---|
| Stripe | Name, email, billing address, payment details | Processing your payment and preventing fraud | stripe.com/privacy |
| Klaviyo | Email address, name, purchase history, email engagement | Sending order emails and marketing you’ve opted into | klaviyo.com privacy notice |
| Google (Analytics 4, Ads, Tag Manager) | Pseudonymous usage data and ad interaction data | Understanding site traffic and measuring ads | policies.google.com/privacy |
| Pseudonymous ad interaction data | Measuring our Pinterest advertising | policy.pinterest.com | |
| Our website host | Whatever passes through the site, including server logs | Running and backing up partykook.com | Available on request |
We may also disclose information where we’re legally required to — in response to a valid court order, subpoena, or law enforcement request — or where we believe in good faith it’s necessary to protect someone’s safety, prevent fraud, or defend our legal rights. If PartyKook is ever sold or merged, customer information would transfer to the buyer, and we’d notify you before that happened.
A note for US residents about “selling” and “sharing”
We never exchange your personal information for money. However, information about your visit is shared with Pinterest and Google for advertising measurement and targeting. Under the California Consumer Privacy Act and similar laws in other states, that may count as “selling” or “sharing” personal information for cross-context behavioural advertising.
To opt out: turn off the Marketing category in our cookie banner, enable Global Privacy Control in your browser, or email info@partykook.com. We won’t charge you a different price or give you a worse service for doing it.
In the past 12 months we have “shared” internet and device activity (identifiers, browsing and interaction data) with advertising partners in this way. We do not knowingly sell or share the personal information of anyone under 16.
5. Where your information goes
PartyKook is based in Colorado, USA, so if you order from outside the United States your information will be transferred to and processed in the US. Some of our providers also process data in other countries.
For transfers of personal data out of the EEA, UK or Switzerland, we rely on the EU–US Data Privacy Framework (and its UK Extension and Swiss–US framework) where the receiving company is certified — you can verify certifications at dataprivacyframework.gov — and on the European Commission’s Standard Contractual Clauses, with a transfer risk assessment, where a provider is not certified or as an additional safeguard.
The Data Privacy Framework adequacy decision remains in force but is under appeal before the Court of Justice of the European Union. We monitor this and will update our safeguards if the position changes.
6. How long we keep it
| Data | Retention |
|---|---|
| Order and invoice records | 7 years from purchase (US and EU tax record-keeping rules) |
| Account details | Until you close your account, then 30 days |
| Download entitlements | While your account is active, so you can re-download your kits |
| Marketing contacts | Until you unsubscribe, then up to 3 years in a suppression list so we don’t email you again by mistake |
| Support conversations | 3 years |
| Analytics data | 14 months (Google Analytics 4 default) |
| Server logs | 90 days |
When a retention period ends we delete the data or irreversibly anonymise it.
7. Your rights
Whatever country you’re in, you can ask us to:
- Tell you what personal information we hold about you and where we got it
- Correct anything that’s wrong
- Delete it (subject to records we’re legally required to keep, like tax invoices)
- Send you a copy in a portable format
- Stop using it for marketing, immediately and permanently
If you’re in the EEA, UK or Switzerland, you also have the right to restrict processing, to object to processing based on legitimate interests, to withdraw consent at any time, and to lodge a complaint with your local supervisory authority — though we’d appreciate the chance to fix it first.
If you’re in Colorado, California, or another US state with a privacy law — currently including Virginia, Connecticut, Utah, Texas, Oregon, Montana, Delaware, Iowa, Nebraska, New Hampshire, New Jersey, Minnesota, Maryland, Tennessee, Indiana, Kentucky and Rhode Island — you have rights to know, delete, correct, and obtain a portable copy of your data, and to opt out of targeted advertising and of the sale or sharing of your information. You may also appeal if we refuse a request; we’ll respond to an appeal within 45 days and tell you how to contact your state Attorney General if you’re still unhappy. You may use an authorised agent to make a request on your behalf.
If you’re in Canada, including Quebec, you have rights of access, correction, and withdrawal of consent under PIPEDA and Quebec’s Law 25.
How to exercise any of this: email info@partykook.com with what you’d like us to do. We’ll verify your identity — usually by confirming you control the email address on your order — and respond within 30 days (or 45 days for US state requests, extendable once where the law allows). It’s free unless a request is manifestly unfounded or excessive.
We will never treat you differently, charge you more, or degrade your service because you exercised a privacy right.
8. Marketing emails
We only send marketing emails to people who asked for them, or who bought from us and haven’t opted out.
Every marketing email has an unsubscribe link at the bottom, and it works immediately. You can also just reply and ask us to stop.
Unsubscribing from marketing doesn’t stop transactional emails: order confirmations, download links, and receipts. Those are part of delivering what you bought.
9. Security
We protect your information with HTTPS encryption across the whole site, hashed password storage, access limited to the small number of people who need it, regular software and plugin updates, and backups.
Payment card data never touches our servers — Stripe handles it under PCI-DSS Level 1 certification.
No system is perfectly secure. If a breach ever affects your personal data in a way that poses a risk to you, we’ll notify you and the relevant regulator without undue delay and within the timeframes the law requires.
10. Children
PartyKook’s products are made for adults hosting parties, and our site isn’t directed at children. We don’t knowingly collect personal information from anyone under 16, and we don’t knowingly sell or share the information of anyone under 16.
If you believe a child has given us personal information, email info@partykook.com and we’ll delete it promptly.
11. Third-party links
Our site links to other websites — Pinterest, Instagram, our payment processor, and occasionally partner sites. This policy doesn’t cover them. Once you click through, you’re governed by their privacy practices.
12. Changes to this policy
We update this page when our practices change. The “last updated” date at the top always reflects the current version.
If a change materially affects how we use your personal information, we’ll tell you — by email if you’re a customer or subscriber, or with a notice on the site — before it takes effect. We will not reduce your rights under this policy without your explicit consent.
13. Contact us
Questions, requests, or complaints about privacy:
PartyKook LLC (d/b/a PartyKook)
Colorado, United States
Email: info@partykook.com
Contact form: partykook.com/contact
We aim to reply to every privacy question within five business days.