Privacy Policy

1. Data controller

• Trading name: House Party
• Owner: Self-employed (autónomo)
• NIE: Y7284913T
• Address: Carrer d'Herrero 20, 08902 L'Hospitalet de Llobregat (Barcelona)
• Telephone: +34 677 74 58 34
• Contact e-mail: mail@house-party.es

2. Data we collect

We collect the following personal data through our forms and through your use of the website:

• First name and surname
• Telephone number
• E-mail address
• Date and type of event
• IP address
• Browsing data (cookies): where you come from (campaign, search engine or social network), which pages you visit, how far you read them, which buttons and links you click and whether you open or submit the form, the type of device and your approximate location (city) calculated from the IP address. The click log does not include what you type in the form fields.

If you use the quote configurator, what you type as you go (including your contact details) is saved as a draft so that you do not lose it, even if you have not yet sent the request.

If you send a request, we link your browsing of the site to it (where you came from, what you looked at and when you visit us again) so that we can serve you better. Only the data controller sees this information.

If we talk to you on WhatsApp, we keep a copy of the conversation so that we can serve you: your number, your WhatsApp name and the name we have you under in our contact list, and the messages of both sides with their date and their delivery and read status. We do not keep the content of photos, videos, audio and files, only data such as their type and name. The copy keeps the original text of a message even if you later edit or delete it in WhatsApp, and it may include conversations from before this system was set up.

If you open the chat from one of our ads or posts on Facebook or Instagram, WhatsApp tells us which one and we keep that too. If you click the WhatsApp button on our website and your first message reaches us shortly afterwards, we link the conversation to your browsing of the site (the browsing data listed at the start of this section, including those of your other visits from the same browser). This is an estimate based on the time, not a certainty: in some cases the linked visit may be that of another person who clicked the button at that same moment. The click on that button is also reported to Meta to measure our advertising (see section 7).

We use these data to serve you — your first message may automatically be registered as a request in our management system — and to analyse the requests we receive and which channels and ads they come from. Within House Party, only our team sees them.

The legal basis for processing these WhatsApp data is our legitimate interest (Art. 6(1)(f) GDPR) in dealing with your enquiry and analysing the requests received; if you book, the conversation about your booking is also needed to provide the contracted service (Art. 6(1)(b) GDPR, see section 4). You can object to this processing at any time by writing to mail@house-party.es. You can also ask us to delete these data, telling us your WhatsApp number: we will do so within one month at most, except for what we need for a booking in progress or must keep to meet a legal obligation.

3. Purpose of the processing

The personal data collected are used for the following purposes:

• To manage and process quote requests and the contracting of services.
• To communicate with you about your event or enquiry.
• To send commercial communications about our services, provided you have given your prior consent.
• To improve the browsing experience and analyse how the website is used.
• To measure the effectiveness of our advertising and avoid showing unnecessary ads to people who have already asked us for a quote or are already customers (see section 7).

We use the e-mail address you gave us to send you, as the case may be, the messages needed to handle your request and your booking: confirmation that we have received your request, the quote, a reply when the date is already taken or the venue is outside our area, confirmation of a payment and of the booking, a summary before the event with the amount still to be paid, a notice when the time or date of the event changes, and notices that the photo gallery is ready and that it is about to close. These are service messages, not advertising: they answer your request and, once the booking is made, they are needed to provide the contracted service (see section 4). We do not send commercial communications by e-mail without your prior consent. You can reply to any of these messages.

4. Legal basis for the processing

• Consent of the data subject (Art. 6(1)(a) GDPR): when a contact form or quote request is sent.
• Performance of a contract (Art. 6(1)(b) GDPR): when the processing is necessary to provide the contracted services.
• Legitimate interest (Art. 6(1)(f) GDPR): to improve our services, to analyse the use of the website and the requests received, to deal with the enquiries that reach us on WhatsApp, and to prevent fraud.

5. Retention period

Personal data will be kept for as long as necessary to fulfil the purpose for which they were collected and to determine any liabilities that may arise from that purpose. Specifically:

• Customer data: for the duration of the contractual relationship and the 5 years that follow (tax obligation).
• Data from quotes that were not accepted: 12 months from the request.
• Marketing data: until you withdraw your consent.
• Browsing data: for as long as they are needed to analyse the use of the website and to deal with the requests they are linked to.
• WhatsApp conversations, where they came from and the request opened from them: they have no fixed period. They are kept for as long as they are needed to deal with your enquiry and your booking and to analyse the requests received — also once the 12 months of a quote that was not accepted have passed — or until you ask us to delete them, except for what we must keep to meet a legal obligation. The technical logs of message reception are deleted after 30 days.

6. Processing by means of artificial intelligence

To improve the handling of requests and offer a faster service, some of the data provided in the forms (name, date, city, telephone) may be processed by artificial intelligence services provided by Anthropic, PBC (San Francisco, USA) through its API. This processing is carried out to:

• Determine the service area automatically.
• Generate personalised quotes.
• Manage requests received through social networks.

Anthropic acts as a data processor and does not use the data to train its AI models. The data are processed with zero data retention (no permanent storage). The international transfer is carried out under standard contractual clauses (SCCs) in accordance with Article 46 of the GDPR.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the efficient handling of commercial requests.

7. Personalised advertising (Meta)

We use the Meta pixel and the Conversions API to measure the effectiveness of our advertising campaigns on Facebook and Instagram. In addition, we may share with Meta Platforms Ireland Limited certain identifiers pseudonymised by SHA-256 hashing (telephone number and, where applicable, e-mail address) to create custom audiences, both for targeting and for exclusion — for example, to stop showing ads to people who have already asked us for a quote or are already customers.

• The data are always shared in hashed (pseudonymised) form, never in plain text.
• Meta acts as joint controller of the processing in the context of custom audiences, in accordance with its Custom Audiences Terms.
• No data that have exceeded the retention period stated in section 5 are shared.

Legal basis: legitimate interest (Art. 6(1)(f) GDPR) in the efficient promotion of our services. You can object to this processing at any time by writing to mail@house-party.es, or adjust your advertising preferences on Facebook and Instagram.

8. Recipients of the data

Personal data may be disclosed to the following third parties, solely for the purposes described:

• Anthropic, PBC: processing of data by means of AI to manage requests (see section 6).
• Stripe: secure payment processing (PCI DSS compliant).
• Cloudflare: security and performance of the website.
• IPinfo, Inc. (USA): approximate location (city) from the IP address, for the site's statistics.
• Google Cloud EMEA Limited (Google Workspace): e-mail — the messages about your request and your booking described in section 3.
• Meta Platforms Ireland Limited (Facebook/Instagram): advertising measurement (pixel and Conversions API) and custom audiences with pseudonymised identifiers (see section 7).
• WhatsApp (Meta group): messaging — the conversation you have with us on WhatsApp, of which we receive the copy described in section 2.

No international transfers of data are made outside the European Economic Area, except to providers that have appropriate safeguards in place (the European Commission's Standard Contractual Clauses or the Data Privacy Framework).

9. Your rights

In accordance with the GDPR (EU 2016/679) and the LOPD-GDD (Organic Law 3/2018), you have the right to:

• Access: to know which personal data we process.
• Rectification: to correct inaccurate or incomplete data.
• Erasure: to request the deletion of your data when they are no longer necessary.
• Objection: to object to the processing of your data in certain circumstances.
• Restriction of processing: to request that the processing be restricted in the cases provided for by law.
• Portability: to receive your data in a structured, commonly used format.

To exercise any of these rights, you can send an e-mail to mail@house-party.es stating the right you wish to exercise and attaching a copy of your identity document.

You also have the right to lodge a complaint with the Spanish Data Protection Agency (Agencia Española de Protección de Datos, www.aepd.es) if you consider that the processing of your data does not comply with the regulations in force.

10. Data security

House Party adopts the technical and organisational measures necessary to guarantee the security of personal data and prevent their alteration, loss, and unauthorised processing or access, including SSL/TLS encryption in all communications.

11. Changes

House Party reserves the right to amend this Privacy Policy to adapt it to new legislation or to changes in our services. Any change will be published on this page.

Last updated: October 2026