Privacy Policy

WeddedWay operates WeddedWay, a wedding planning platform for couples and their guests.

For privacy questions or to exercise your rights, contact us at enquiry@weddedway.com.

When you sign up as a couple, we are the data controller for your account information (name, email, login details, billing) and how we run the Service.

When you add guests to your wedding site (names, emails, RSVPs, dietary requirements, photos, and similar), you are the data controller for that guest information and we act as your data processor, handling it only on your instructions to provide the Service. Our Terms of Service include data-processing terms for this purpose.

When you visit a couple's wedding website as a guest, the couple is the data controller for information you submit to them. We process that information on the couple's behalf.

We may collect:

• Account details — email address, password (stored securely hashed), and names you provide at signup.
• Wedding details — partner names, wedding date, website address, venue, and content you add (news, photos, seating plans, tasks, and similar).
• Guest information — data couples enter about guests or that guests submit via RSVP, registration, or photo upload.
• Payment information — handled by Stripe; we receive subscription status and limited billing metadata, not full card numbers.
• Support and contact messages — name, email, and message content when you contact us.
• Technical data — IP address, browser type, device information, and usage data via cookies and similar technologies (see our Cookie Policy).
• Error and performance data — diagnostic information to keep the Service reliable (e.g. via Sentry).

Under UK GDPR and EU GDPR we rely on:

• Contract — to provide the Service you signed up for, including account management and premium features.
• Legitimate interests — to secure and improve the Service, prevent abuse, and respond to enquiries (balanced against your rights).
• Legal obligation — where we must retain or disclose information by law.
• Consent — for non-essential cookies and analytics where required (you can withdraw consent via our cookie banner).

Couples are responsible for choosing a lawful basis for guest data they collect. We provide tools; we do not decide how couples use guest lists.

We use trusted service providers (“sub-processors”) who process data on our behalf:

• Supabase — authentication and database hosting
• Vercel — application hosting, analytics, and performance insights (with consent)
• Stripe — payment processing
• Resend — transactional and support email delivery
• Sentry — error monitoring and session replay (with consent for replay)

We may also disclose information if required by law, to protect rights and safety, or in connection with a business transfer. We do not sell personal information.

Some providers may process data outside the UK or EEA (for example, in the United States). Where required, we use appropriate safeguards such as the UK International Data Transfer Agreement and/or EU Standard Contractual Clauses, and we assess transfer risks as part of our vendor due diligence.

We keep information only as long as needed:

• Account data — while your account is active and for a reasonable period after deletion for backups, disputes, and legal compliance.
• Wedding and guest data — while the wedding site exists; couples can delete content from their dashboard. When a wedding is deleted, associated guest data is removed from active systems.
• Support messages — typically up to 24 months unless a longer period is needed to resolve an issue.
• Analytics— according to each provider's retention settings, generally in aggregated or pseudonymised form.

If UK GDPR or EU GDPR applies, you may have the right to access, rectify, erase, restrict, object to processing, and data portability. You may also withdraw consent where processing is based on consent, and lodge a complaint with a supervisory authority (in the UK, the ICO at ico.org.uk).

To exercise rights relating to your WeddedWay account, email enquiry@weddedway.com. For guest data on a wedding site, contact the couple directly in the first instance; we can assist couples with export or deletion requests for data we process on their behalf.

You can delete your account at any time from Account settings in the app.

We use technical and organisational measures appropriate to the risk, including encryption in transit, access controls, row-level security in our database, and separation of wedding data by tenant. No method of transmission or storage is 100% secure; please use a strong password and keep login details confidential.

The Service is intended for adults planning weddings. We do not knowingly collect personal information from children under 16. If you believe a child has provided us personal information, contact us and we will take appropriate steps.

We may update this policy from time to time. We will post the new version on this page and update the “Last updated” date. Material changes may also be notified by email or in-app notice where appropriate. Policy version: 2026-07-12.

Questions about this policy: enquiry@weddedway.com. General support: enquiry@weddedway.com.