Privacy policy
Privacy policy
Last updated: September 17, 2026
Information we collect
Party World by Elsa collects the name, email address, shipping address, items ordered and payment status needed to process your purchase. If you contact customer support, we also store your message and contact details. Our hosting and payment providers process technical information, such as IP addresses, to operate and protect their services.
How we use and share information
We use this information to fulfill orders, provide delivery updates, answer questions, maintain transaction records and prevent misuse. Authorized store staff and service providers supporting hosting, payments and delivery receive information needed for those purposes. We may disclose information when required by applicable law or to protect against fraud.
Payments
Stripe processes card payments. The store does not store your full card number or security code. Stripe handles payment information under its own privacy policy at https://stripe.com/privacy.
Accounts and optional marketing emails
You may sign in with ChatGPT to save orders to your account across devices. Marketing email consent is a separate optional choice and is not required to order or receive an eligible welcome discount. If you opt in, we store your email, consent wording version, source and time. We use subscribed addresses for offers, new arrivals and discount codes. Unsubscribe through the link in a marketing email, your signed-in account preferences, or by contacting support. Unsubscribing does not stop essential order updates.
Shopping sessions
An essential browser cookie keeps your shopping bag and guest orders connected to your browser. Guest order access can be lost if you clear cookies, change browsers or end the session. Contact support for help; we may need to verify your identity before sharing order information. Customer service messages and replies are available in the original browser.
Store analytics
With your permission, we record an anonymous shopping-session identifier, public page and product views, visible product cards, product clicks, cart additions and checkout attempts. We store approximate country, region and city if available from our hosting provider, and referral source or campaign labels. We do not store raw IP addresses in store analytics. Consented visits may be connected to paid orders for first-visit-source reporting. Raw visit records are retained for up to 90 days. Only authorized store administrators can view aggregate statistics. Declining optional cookies or sending a Global Privacy Control signal disables this measurement.
Advertising preferences
If advertising measurement is configured, optional Google and Meta tags are used only after you allow advertising cookies. These services may receive browser and device information, page visits and purchase value to measure advertising results. You can decline optional cookies and still shop. You can change your choice using Cookie preferences. We do not send shipping addresses, card details or customer service messages as advertising event fields.
OpenAI advertising measurement
With your permission, we retain the OpenAI ad click reference in this browser for up to 30 days. After a real payment, our server reports an independent event identifier, payment time, amount, currency, store origin and available ad click reference to OpenAI. We do not include customer names, email addresses, telephone numbers, shipping addresses or customer IP addresses in this server event. We request that these events not be used for personalization. Declining optional cookies or enabling Global Privacy Control stops future measurement from this browser; previously reported events cannot be recalled by changing this setting.
Retention and protection
We retain order and support records for fulfillment, customer service, accounting and other applicable recordkeeping needs. Access controls limit access to private order information. No internet service can guarantee absolute security.
Your choices and requests
Contact elsapartyworld@gmail.com to request access, correction or deletion of personal information or to ask a privacy question. We may verify your identity and retain records where needed to complete transactions or meet applicable obligations. Rights available to you may depend on your location.
Updates
We may update this policy when our services or data practices change. The date above identifies this version.
Optional email offers
Marketing subscription is separate from account creation and checkout. If you opt in, we record your email, consent version, source and time. Unsubscribe through your account, a marketing email link, or customer support. Your order updates and eligible welcome discount are unaffected.
Store analytics
With your permission, we measure anonymous shopping sessions, product views, visible product cards, clicks, cart additions and checkout attempts. Approximate country, region and city may be supplied by our hosting provider. Referral source and campaign labels help us understand visits; a consented visit can be linked to a paid order. We do not store raw IP addresses in store analytics. Only authorized administrators can view reports and individual anonymous visit events. With measurement permission, the source of a welcome-offer signup may be saved with the email subscription. Email addresses are not sent as analytics event fields. Raw visit records are retained for approximately 90 days. Declining optional cookies or enabling Global Privacy Control disables this measurement.
Order source information
With optional measurement permission, this browser remembers the first and most recent identifiable referral source for up to 30 days, separately from your current visit. We save source labels with the order for up to approximately 90 days; these labels are not proof that an advertising platform attributed a sale. Withdrawing permission clears the associated source details available to this browser. You can also optionally tell us how you heard about us during checkout. That answer is stored with your order, is not sent to advertising platforms, and does not grant advertising permission. Declining optional cookies does not affect checkout, shipping or discounts.
Meta advertising measurement and optimization
Updated October 23, 2026.
If you choose “Allow measurement & Meta ad optimization”, Meta may use your browsing activity and confirmed purchases to measure, personalize and optimize Facebook and Instagram ads. We can report a confirmed purchase from our server even if you do not return after payment. We send the purchase event identifier, payment time, amount, currency, store origin, browser user-agent and available Meta browser or ad-click identifiers. We do not include customer names, email addresses, telephone numbers, shipping addresses or raw IP addresses in this server event. This updated choice is separate from earlier measurement-only permission: an earlier choice is not automatically upgraded. Pending events recorded under the earlier permission remain attribution-only. If you previously declined optional cookies, we keep that choice. You may withdraw permission through Cookie preferences; you can shop without allowing this use. We retain the permitted ad-click reference in this browser for up to 30 days. Server matching details are cleared after delivery or after an event is skipped; unprocessed checkout records are cleared within approximately 90 days. Cookie preferences and Global Privacy Control stop future measurement from this browser; events already sent cannot be recalled by changing this setting.
OpenAI advertising measurement
With your permission, we retain the OpenAI ad click reference in this browser for up to 30 days. After a real payment, our server reports an independent event identifier, payment time, amount, currency, store origin and available ad click reference to OpenAI. We do not include customer names, email addresses, telephone numbers, shipping addresses or customer IP addresses in this server event. We request that these events not be used for personalization. Declining optional cookies or enabling Global Privacy Control stops future measurement from this browser; previously reported events cannot be recalled by changing this setting.