Privacy Policy

MyWeddingPlan ("we", "us", or "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding planning platform.

1. Information We Collect

Personal Information

When you register for an account, we collect:

• Name and email address
• Wedding date and location
• Partner's name (if provided)
• Payment information (processed securely by Stripe)

Wedding Planning Data

As you use the Service, we store:

• Guest lists and contact information
• Budget and expense data
• Vendor information and contracts
• Documents you upload
• Photos and images
• Any other content you choose to add

Usage Information

We automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and features used
• Time and date of visits
• Referring website addresses

2. How We Use Your Information

We use your information to:

• Provide and maintain the Service
• Process payments and send transaction confirmations
• Send service-related communications (e.g., password resets, security alerts)
• Respond to your inquiries and provide customer support
• Improve and personalize the Service
• Monitor usage patterns and analyze trends
• Detect and prevent fraud or unauthorized access

3. Legal Basis for Processing (GDPR)

Under the General Data Protection Regulation (GDPR), we process your data based on:

• Contract: Processing necessary to provide the Service you requested
• Consent: Where you have given specific consent (e.g., marketing emails)
• Legitimate Interests: To improve our Service and prevent fraud
• Legal Obligation: Where we are required by law to process data

4. Data Sharing and Disclosure

We do not sell your personal information. We may share your data with:

• Service Providers: Third parties who help us operate the Service (e.g., Stripe for payments, cloud hosting providers)
• Collaborators: Other users you invite to your wedding (e.g., your partner, wedding planner)
• Legal Requirements: When required by law or to protect our rights
• Business Transfers: In connection with a merger, acquisition, or sale of assets

5. Data Security

We implement industry-standard security measures including:

• SSL/TLS encryption for all data transmission
• Encrypted storage for sensitive data
• Regular security audits and updates
• Access controls and authentication requirements
• Regular backups and disaster recovery procedures

6. Your Rights (GDPR)

Under GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Request limitation of processing
• Portability: Receive your data in a portable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise these rights, contact us at [email protected].

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide the Service. Since we offer lifetime access, your data will be retained indefinitely unless you request deletion.

If you request deletion, we will remove your personal data within 30 days, except where retention is required by law.

8. Cookies

We use cookies and similar technologies to:

• Keep you signed in
• Remember your preferences
• Understand how you use the Service
• Improve performance and user experience

You can control cookies through your browser settings. However, disabling cookies may limit your ability to use certain features.

9. Third-Party Services

We use the following third-party services:

• Stripe: Payment processing (Privacy Policy)
• Google Analytics: Usage analytics (Privacy Policy)

10. International Transfers

Your data may be processed in countries outside the UK/EEA. When this happens, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

11. Children's Privacy

The Service is not intended for children under 16. We do not knowingly collect personal information from children under 16. If we learn we have collected such information, we will delete it promptly.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. For significant changes, we may also send you an email notification.

13. Contact Us

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: [email protected]

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk