Last updated 30 July 2026.
Whoopla is a directory of local kids' party suppliers, operated in the UK. This notice explains what personal data we hold and what you can do about it. It covers two different groups of people: visitors who browse the site, and the suppliers we list.
We do not set cookies, we do not use an analytics service that profiles you, and there are no accounts to create. You can browse the whole directory without telling us anything about yourself.
One thing we do count. When you tap "Call" or "Visit website" on a supplier's listing, your browser sends us a small ping saying which button was tapped on which listing, the country the request came from, and the name of the site that linked you here, if your browser passes one. The site's name only, such as chatgpt.com, never the page you were on there. If you arrive from an AI assistant such as ChatGPT, we count that arrival the same way. That is the whole record: no cookie, no identifier, nothing that links the tap to you or to anything else you did on the site. We count these so we know which listings actually send suppliers enquiries, and which sites send parents to us.
The enquiry form on a supplier's listing asks for your name, an email address or phone number to reply to, an optional party date, and your message. We store exactly what you type, and we pass it to the one supplier you chose, so they can reply to you directly. It goes to nobody else, and we delete enquiries after 12 months. If you want one deleted sooner, email hello@whoopla.co.uk.
We do not use your enquiry to market anything to you, with one exception you control. The form has a box, unticked, that you can tick to hear about Whoopla's own party products. If you leave it alone nothing happens and you will never hear from us. If you tick it, here is exactly what you have agreed to: emails from Whoopla about our own party-bag and sweet-cone products only, never about anything a supplier sells, and not on a fixed schedule — mostly in the few weeks before a party date you told us about. Every one has an unsubscribe link that works in one click, takes effect immediately, and never needs a reply from you.
If you tick it we keep your email address, the party date if you gave one, which listing you enquired from, and the exact wording you agreed to, so we can show you asked. That record is kept separately from the enquiry itself and outlives the 12-month deletion above, for a reason worth being plain about: if we deleted it, we would lose both the proof you consented and the record that you unsubscribed, and an address that had opted out could quietly end up back on the list. When you unsubscribe we keep the record precisely so that it stays honoured. Ask us at hello@whoopla.co.uk and we will delete it outright.
To keep automated spam out of suppliers' inboxes, the form runs a quick automated check called Turnstile. It is run by Cloudflare, who already host the site, and it does not use cookies or track you across sites.
Two things still happen that are worth knowing. Our host, Cloudflare, processes technical information such as your IP address in order to serve pages and protect the site. And our pages load fonts from Google Fonts, which means your browser makes a request to Google's servers and Google receives your IP address. If that matters to you, a content blocker will stop it and the site will still work.
This is the important part, because you did not give us this information directly.
Much of this is business information. But where you are a sole trader, or your business name is your own name, it can also be personal data, so we treat it that way throughout.
We did not buy a marketing list. There are exactly two sources:
Our lawful basis is legitimate interests. Our interest is running a directory that helps parents find suppliers who genuinely cover their area, and your interest is a free listing that sends you enquiries with no commission and no fee. We have weighed that against your rights, and we have written that assessment down. The information we publish is already public, we publish nothing we could not see on your own site or your Google listing, and you can have the listing changed or taken down at any time.
Claiming is you telling us the listing is yours. When you use the claim form we store your name, the email address you type, anything you ask us to change, and the country the request came from, alongside a record of which address we sent the confirmation link to. We keep that claim record for 12 months and then delete it.
We also store a one-way scrambled version of your IP address, which we use only to stop the form being abused to send unwanted email to suppliers. It is not readable back to an address and we do not use it to work out anything about you.
The confirmation link only ever goes to the contact address already on the listing, never to an address someone types into the form. That is deliberate: it means nobody can use the form to send mail to an address of their choosing, or to redirect your confirmation link somewhere else.
For as long as your listing is published. If you ask to be removed, we delete the listing and keep only the minimum needed to make sure an automated update does not add you back. That record deliberately holds no phone number, no email address and no postal address.
You can ask us to give you a copy of what we hold, correct anything wrong, delete it, restrict what we do with it, or object to us holding it at all. Because we rely on legitimate interests, you have the right to object, and we will act on it. You do not have to give a reason.
Email hello@whoopla.co.uk and tell us your business name and what you want. We aim to reply within a few days and to act within one month, which is the statutory limit.
If you are unhappy with how we handle it, you can complain to the Information Commissioner's Office at ico.org.uk.
Nobody, with one exception you control: if you send an enquiry, we pass your message and reply details to the supplier you chose to contact. Beyond that we do not sell data and we do not pass it to advertisers or lead brokers. The site is hosted by Cloudflare, which processes data on our behalf in order to serve it, to store enquiries, and to run the spam check.
If this notice changes we will update the date at the top.
The quickest route, and what most people want, is on the for suppliers page.