Data Privacy

1. Our Data Privacy Commitment

At ConfettiCo Parties and AltFTool, we believe that celebrating life's special moments should never come at the expense of your privacy. We enforce strict data minimization standards, meaning we only collect and process personal data that is genuinely required to assist you in discovering celebration ideas and connecting with independent event planners and vendors.

2. Applicable Privacy Frameworks (GDPR & CCPA/CPRA)

We adhere to modern international and regional data protection regulations, including:

• European Union General Data Protection Regulation (GDPR) (Regulation EU 2016/679)
• United Kingdom Data Protection Act 2018 (UK GDPR)
• California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA)
• US State Comprehensive Privacy Laws (including Virginia VCDPA, Colorado CPA, Connecticut CTDPA, and Texas TDPSA)

3. Your Detailed Consumer Rights

Depending on your state or country of residence, you have the following enforceable legal rights:

A. Right to Know & Access

You may request confirmation of whether we process your personal data, the specific categories of data processed, the business purposes for collection, and the categories of third-party vendors with whom your inquiry was shared.

B. Right to Correction (Rectification)

If your contact information, party specifications, or newsletter details are incomplete or inaccurate, you have the right to request immediate correction.

C. Right to Erasure (“Right to Be Forgotten”)

You have the right to request the permanent deletion of your personal data from our referral records and newsletter databases, subject only to necessary legal recordkeeping requirements.

D. Right to Restrict & Object to Processing

You can request that we restrict processing of your data, or object at any time to the use of your details for referral outreach or newsletter mailings.

E. Right to Data Portability

You may request a machine-readable copy (e.g. JSON or CSV format) of the personal information you provided to us, suitable for transmission to another service.

4. Do Not Sell or Share My Personal Information

Under California CCPA/CPRA and related statutes, consumers have the explicit right to opt out of the “sale” or “sharing” of personal information for cross-context behavioral advertising.

5. How to Submit a Privacy Request

To exercise any of your privacy rights (Access, Deletion, Correction, or Opt-Out), submit your request using either of the following channels:

• Email Request: Send an email to dataprivacy@altftool.com with the subject line “Consumer Privacy Rights Request — ConfettiCo Parties”.
• Direct Mail: Data Protection Officer, AltFTool Legal & Compliance, Attn: ConfettiCo Parties Data Privacy.

Please include your full name, the email address associated with your inquiry or newsletter subscription, and a concise statement specifying the right you wish to exercise.

6. Request Verification & Response Timelines

To protect your privacy and prevent unauthorized disclosure, we verify every request before acting on it. Verification typically involves sending a confirmation email to the address on file.

We will confirm receipt of your request within 10 business days and provide a substantive response within 30 to 45 calendar days, as stipulated by applicable law.

7. Non-Discrimination Guarantee

We strictly uphold a non-discrimination policy. Exercising your privacy rights will never result in denied service, inferior website experience, or altered referral access.

8. Data Protection Officer (DPO) Contact

For regulatory inquiries, escalated consumer requests, or data governance questions: