Privacy Policy

Effective date: 1 March 2026

1. Who we are

MyWedSite (“we”, “us”, “our”) operates my-wedsite.com. We are the data controller for data you provide when creating or managing your account. For personal data about your wedding guests, you (the couple) act as the data controller, and we act as your data processor.

2. Data we collect

Account data: your email address and password (hashed), collected on signup.
Wedding details: couple names, wedding date, site URL, and content you add to your pages.
Guest data: RSVP responses, names, email addresses, dietary requirements, and any photos guests upload. You are responsible for having a lawful basis for collecting this data from your guests.
Billing data: billing name and address. Card details are handled solely by Stripe — we never see or store them.
Usage data: server logs, error reports, and anonymised analytics to improve the service.

3. How we use your data

To provide and maintain the MyWedSite service.
To process payments via Stripe.
To send transactional emails (RSVP notifications, billing alerts, account updates). We do not send marketing emails without your consent.
To comply with legal obligations.

4. Lawful basis (UK GDPR)

We process your personal data on the following bases:

Contract: processing necessary to provide the service you signed up for.
Legitimate interests: security monitoring, fraud prevention, and service improvement.
Legal obligation: where required by law (e.g. financial records).

5. Data storage and transfers

Your data is stored in Supabase data centres within the European Economic Area (EEA). Payment processing is handled by Stripe (US) under standard contractual clauses. Email delivery is handled by Resend (US) under standard contractual clauses.

6. Data retention

We retain your account data for as long as your account is active. After account deletion, data is soft-deleted and permanently purged within 90 days, except where we are required to retain it for legal or accounting purposes.

7. Your rights

Under UK GDPR you have the right to:

Access the personal data we hold about you.
Correct inaccurate data.
Request erasure of your data.
Object to or restrict processing.
Data portability.
Lodge a complaint with the ICO (ico.org.uk).

To exercise any of these rights, email us at hello@my-wedsite.com.

8. Cookies

We use only essential cookies required for authentication and session management. We do not use tracking or advertising cookies.

9. Changes to this policy

We may update this policy from time to time. We will notify you of significant changes by email or via a notice in your dashboard.