How we handle your information

WEDthread is run from the United Arab Emirates and is open to people around the world. We are responsible for the information described on this page (the "data controller"). You can reach us at hello@wedthread.co.

If you add other people's details (such as your wedding guests), you decide what to enter and why, so you are responsible for having a good reason to hold it. We keep that information safe and use it only to run the service for you.

Your account. Your email address, a password (stored only in scrambled form by our login provider), your first and last name, a phone number if you choose to add one, and the role you choose (couple, planner, venue, vendor or seller).

What you add. Wedding details, events, guest lists, RSVP answers, seating plans, menus, budget entries, notes, registry items, website content, photos and files you upload, and messages or enquiries you send through WEDthread.

Guest information. If you add guests, you give us their names and any contact, dietary or allergy details you enter. We receive this from you, not from the guests. Guests who answer an RSVP link give us their answers directly.

Sensitive details. Dietary and allergy information can reveal health or religious beliefs. Only add what you need, and make sure your guests are happy for you to record it. Anyone can ask us to remove it.

Business listings. Venues and vendors give us business details, contact information, photos and verification documents (such as a licence or tax number). Tax numbers and documents are visible only to the owner and our team.

Payments. Card details are handled by our payment provider, Stripe. We never see or store your full card number.

Technical and usage data. Basic information such as device type, browser, IP address and error logs, which we use to keep the service running and secure. If you accept analytics cookies, we also use Google Analytics, through Google Tag Manager, to see how the site is used (for example which pages are visited and roughly where visitors are from) so we can improve it.

The laws that protect your information depend on where you live. For people in the UK and the EU we rely on the following legal bases.

• To provide WEDthread to you (sign you in, save your plans, show your wedding website and registry, send the emails you ask for, pass enquiries between couples and businesses). Basis: it is needed to carry out our agreement with you.
• To keep the service safe and working (prevent misuse, review and verify business listings, fix problems). Basis: our legitimate interest in running a secure, reliable service.
• To understand and improve how the site is used, through analytics cookies. Basis: your consent, which you can withdraw at any time.
• To meet legal duties, such as keeping payment records or responding to lawful requests. Basis: legal obligation.

For people in the United Arab Emirates, we handle your information in line with Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data, usually with your consent or because it is needed to provide the service you asked for.

We do not sell your personal information, and we do not make decisions about you using fully automated processing.

People you choose. Collaborators you invite can edit your wedding. Venues and vendors you contact see what you send them. Anyone with the link can view your wedding website or registry once you publish it, so share those links carefully.

The public. Approved venue and vendor listings, and the content of published wedding sites and public registries, are visible to anyone. Reviews you leave show only your first name.

Service providers. We use trusted companies to run WEDthread, and they handle data only for that purpose: Supabase (database, sign-in and file storage), Cloudflare (hosting and domain), Resend (email delivery), Stripe (payments), and Google (website analytics through Google Analytics and Tag Manager, and Google Sheets if you choose to connect it).

We may also share information if the law requires it or to protect people's safety and the service.

We use your browser's storage to keep you signed in and to remember simple preferences, such as a collapsed sidebar and your cookie choice. These are needed for the site to work, so they are always on.

Analytics cookies are different: Google Analytics, loaded through Google Tag Manager, uses them to tell visits apart and measure how the site is used. We only turn them on if you choose Accept cookies in the cookie banner. Until then nothing from Google is loaded. You can change your mind at any time with Cookie settings at the bottom of any page, and you can also block or delete cookies in your browser.

• Sign-in and preferences (essential): kept in your browser until you sign out or clear it.
• Cookie choice (essential): remembers your answer to the banner.
• _ga and _ga_* (analytics, only with your consent): set by Google Analytics, lasting up to two years.

• Your account and wedding: for as long as your account is open. Deleting your wedding in Settings removes its events, guests, RSVPs, seating, budget, messages and website.
• If you ask us to delete your account, we will do so within one month. Copies in backups or logs are overwritten on a rolling basis.
• Payment records are kept by Stripe as the law requires.
• Analytics data is kept for no longer than 14 months.

You can see and edit most of your information in the app. You also have the right to:

• ask for a copy of your information;
• have it corrected, or deleted;
• ask us to limit how we use it, or object to a use based on our legitimate interests;
• receive the information you gave us in a portable format;
• withdraw your consent at any time (for analytics, use Cookie settings).

Email us and we will reply within one month. If you are unhappy with how we handle your information, you can complain to the UK's Information Commissioner's Office (ico.org.uk) to the data protection authority in your own country, or, if you are in the UAE, to the UAE Data Office.

Data is encrypted in transit, and access to each wedding is limited to its owner and invited collaborators. No system is perfectly secure, so please use a strong, unique password.

We are based in the United Arab Emirates, and our providers store and process information in several countries, which may be different from the one you live in. Where the law requires it, we use approved safeguards, such as the UK International Data Transfer Addendum and the EU Standard Contractual Clauses, to protect information about people in the UK and the European Economic Area when it is handled elsewhere.

WEDthread is meant for adults planning a wedding and is not directed at children under 16.

If we change this page in a way that matters, we will update the date above and, for significant changes, let account holders know.

Questions or requests about your information: hello@wedthread.co.