Privacy

This page explains what Eventful Sets collects, who else handles it, where it is stored, and how to get a copy or have it deleted. It is written to be specific rather than broad: if something is not listed here, we are not doing it.

Browsing this site

This website has no forms, no accounts, and no newsletter. Nothing you type into the delivery calculator or a product page is sent to us. The postal-code lookup and the price and quantity controls all run inside your own browser.

Two things do collect data while you browse:

• Google Analytics 4, which sets cookies and records which pages you visited, your approximate location, your device and browser, and which site referred you. The approximate location is derived from your IP address, which GA4 uses in transit to estimate a coarse location and does not store. We use it to see which pages people actually use. It is the only analytics or advertising tag on the site. There is no advertising pixel, no session recording, and no cross-site tracking.
• Vercel, which hosts the site and keeps standard server logs containing IP addresses and browser user-agent strings, as any web server does.

Booking

Booking does not happen on this website. When you press a book button you leave eventfulsets.com for our booking page on Draftrow, the booking platform we use to take and manage requests.

To save you re-entering things, the link carries over what you already chose here: the product, the quantity, the date, whether you picked pickup or delivery, and your postal code if you entered one for a delivery quote. Those travel in the web address itself. Your street address is deliberately never put in a link, because web addresses end up in browser history and in the logs of any site you visit next.

On the booking page you are asked for:

• Your name and phone number, and your email address if you want to give one
• The event date
• The delivery address, only if you chose delivery rather than pickup
• What you want to rent and how many
• Anything you write in the notes box

Submitting that form creates a booking request for us to review and reply to.

How your booking is processed

What you submit is already structured, so it is written straight to our booking records. Submitting the form does not send your details to an AI model, and nothing you enter is used to train one.

How booking data is stored

Your name, phone number, email address, delivery address and notes are encrypted before they are written to the database, using AES-256-GCM. The database is Neon PostgreSQL, hosted on Amazon Web Services in Northern Virginia, in the United States.

That means your booking information is stored outside Canada and is subject to United States law, including lawful access requests by US authorities. We are telling you this because it is a real consequence of the choice and you are entitled to know it before you submit anything.

If there is a breach

If booking information is lost, stolen, or accessed by someone who should not have it, and that creates a real risk of significant harm to you, we will report it to the Office of the Privacy Commissioner of Canada and notify the people affected, as PIPEDA requires. We keep a record of any breach, as the law also requires.

Everyone in the path

These are all of them. We do not sell your information, and we do not share it with anyone for advertising.

• Vercel — hosts this website and the booking page
• Google Analytics — website analytics on this site only
• Draftrow — runs the booking form and stores booking requests
• Neon — the encrypted database behind Draftrow
• Cloudflare Turnstile — the “verify you are human” check on the booking form, which exists to keep bots out
• Upstash — rate limiting on the booking form. It works from a hashed version of your IP address, never the address itself

How long it is kept

Booking requests are kept while we need them to serve you and to keep our own records. When a booking is deleted it goes into a 30-day recovery window, after which an automated job permanently deletes it. Google Analytics data is retained for the period set on our Analytics property; Google's options are 2 or 14 months.

Cookies

The only cookies this site sets are Google Analytics ones. You can block them with your browser settings, with any content blocker, or with Google’s opt-out add-on. Nothing on this site stops working if you do. The booking page uses Cloudflare Turnstile, which needs to run for the form to be submitted.

Your choices

Under Canadian privacy law (PIPEDA) you can ask what personal information we hold about you, ask for a copy, ask us to correct it, and ask us to delete it. Email privacy@eventfulsets.com, or use the notes box on the booking form, and we will action it. If you are asking about a booking, tell us the name and phone number you booked with so we can find the right record.

Children

This is a business-to-customer rental service and is not directed at children. We do not knowingly collect information from anyone under 13.

Changes

If what we collect changes, this page changes with it and the date at the top moves. We will not quietly add a tracker and leave this page saying otherwise.

Contact

Eventful Sets is based in Whitby, Ontario. For anything on this page, email privacy@eventfulsets.com. For anything else, info@eventfulsets.com or the booking form.