GDPR & Privacy Policy

1. Introduction

Wedding ("we", "our", or "us") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

2. Data Controller

The data controller responsible for your personal data is Wedding. If you have any questions about this Privacy Policy or our data practices, please contact us at info@sposal.com.

3. Personal Data We Collect

We collect and process the following types of personal data:

• Account Information: Email address, password (encrypted), and account preferences
• Wedding Information: Partner names, wedding date, location, and budget details
• Guest Information: Names, email addresses, attendance status, dietary requirements
• Checklist Data: Custom checklists, tasks, and associated budget information
• Usage Data: Log data, IP addresses, browser type, pages visited
• Communication Data: Messages sent through our platform, RSVP responses

4. Legal Basis for Processing

We process your personal data based on the following legal grounds:

• Consent: When you create an account and use our services
• Contract: To provide you with the wedding planning services you requested
• Legitimate Interests: To improve our services, ensure security, and prevent fraud
• Legal Obligation: To comply with legal requirements and regulations

5. How We Use Your Data

We use your personal data for the following purposes:

• Providing and managing your wedding planning account
• Enabling guest list management and RSVP functionality
• Sending invitation emails to your guests
• Tracking your wedding budget and checklists
• Communicating with you about your account and services
• Improving our services and user experience
• Ensuring security and preventing unauthorized access

6. Data Sharing and Disclosure

We do not sell your personal data. We may share your data only in the following limited circumstances:

• Service Providers: Email delivery services, hosting providers (only as necessary)
• Wedding Guests: Information you choose to share with your guest list
• Legal Requirements: When required by law, court order, or government regulation

7. Data Retention

We retain your personal data for as long as your account is active or as needed to provide you services. You may delete your account at any time, after which we will delete your personal data within 30 days, except where we are required to retain it for legal or legitimate business purposes.

8. Your Rights Under GDPR

Under GDPR, you have the following rights regarding your personal data:

• Right to Access: Request a copy of your personal data
• Right to Rectification: Correct inaccurate or incomplete data
• Right to Erasure: Request deletion of your personal data ("right to be forgotten")
• Right to Restriction: Limit how we use your data
• Right to Data Portability: Receive your data in a structured, machine-readable format
• Right to Object: Object to processing based on legitimate interests
• Right to Withdraw Consent: Withdraw consent at any time (without affecting prior processing)
• Right to Lodge a Complaint: File a complaint with your local data protection authority

To exercise any of these rights, please contact us at info@sposal.com.

9. Data Security

We implement appropriate technical and organizational measures to protect your personal data, including encryption, secure servers, access controls, and regular security audits. However, no method of transmission over the internet is 100% secure.

10. International Data Transfers

Your data may be transferred to and processed in countries outside the European Economic Area (EEA). We ensure that such transfers are protected by appropriate safeguards, such as Standard Contractual Clauses approved by the European Commission.

11. Cookies and Tracking

We use essential cookies to maintain your session and ensure proper functionality of our service. We do not use third-party tracking or advertising cookies. You can control cookie settings through your browser.

12. Children's Privacy

Our services are not intended for children under 16 years of age. We do not knowingly collect personal data from children under 16. If we become aware that we have collected data from a child under 16, we will take steps to delete it.

13. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date. We encourage you to review this policy periodically.

14. Contact Us

If you have any questions about this Privacy Policy or our data practices, please contact us: