Privacy Policy

1. Introduction

Wedding Prepped ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding website creation service.

We comply with the General Data Protection Regulation (GDPR) and the UK Data Protection Act 2018. By using our service, you agree to the collection and use of information in accordance with this policy.

2. Data Controller

Wedding Prepped is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at:

Email: info@weddingprepped.com

3. Information We Collect

3.1 Account Information

• Name and email address
• Password (encrypted)
• Payment information (processed securely via Stripe)

3.2 Wedding Website Information

• Partner names and contact details
• Wedding date and venue information
• Photos you upload
• Welcome messages and announcements
• Gift registry preferences and payment details (bank details, PayPal)

3.3 Guest Information

• Guest names, email addresses, and phone numbers
• RSVP responses and dietary requirements
• Special requests and accommodation needs
• Gift contributions and messages

3.4 Technical Information

• IP address and browser type
• Device information
• Usage data and analytics
• Cookies and similar technologies

4. Legal Basis for Processing

We process your personal data under the following legal bases:

• Contract: To provide our wedding website service to you
• Consent: For marketing communications and cookies
• Legitimate Interest: To improve our services and prevent fraud
• Legal Obligation: To comply with tax and accounting requirements

5. How We Use Your Information

• To create and manage your wedding website
• To process payments and manage your subscription
• To send RSVP notifications and updates
• To provide customer support
• To send important service announcements
• To improve our services and user experience
• To comply with legal obligations

6. Third-Party Services

We share your data with the following third-party service providers:

7. Data Retention

We retain your data for the following periods:

• Account data: Until you delete your account, plus 30 days for backup purposes
• Wedding website data: Until you delete your account or 12 months after your wedding date, whichever is later
• Payment records: 7 years (legal requirement for accounting)
• Analytics data: 26 months

8. Your Rights

Under GDPR, you have the following rights:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Request correction of inaccurate data
• Right to Erasure: Request deletion of your data ("right to be forgotten")
• Right to Portability: Request your data in a machine-readable format
• Right to Restrict Processing: Request limitation of data processing
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time

To exercise any of these rights, please contact us at info@weddingprepped.com or use the account settings in your dashboard.

9. Cookies

We use the following types of cookies:

• Essential Cookies: Required for the website to function (authentication, security)
• Analytics Cookies: Help us understand how visitors use our site

You can control cookies through your browser settings. Note that disabling essential cookies may affect website functionality.

10. Data Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (HTTPS), secure password hashing, and regular security assessments. However, no method of transmission over the Internet is 100% secure, and we cannot guarantee absolute security.

11. International Transfers

Your data may be transferred to and processed in countries outside the UK/EEA. When this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

12. Children's Privacy

Our service is not intended for individuals under 18 years of age. We do not knowingly collect personal data from children.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last updated" date. We encourage you to review this Privacy Policy periodically.