Privacy Policy - Ceremonio

Introduction

Ceremonio Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding venue management platform ("Service"). By using the Service, you consent to the practices described in this policy.

Information We Collect

Personally Identifiable Information

We collect information that can be used to identify you, including:

Business and contact information: company name, trading name, contact name, telephone number, address, and email address
Account credentials: username and password
Payment information: billing details processed through our third-party payment processors
Customer data: information you store in the Service about your clients, including names, contact details, wedding details, and guest information

Non-Personally Identifiable Information

We automatically collect certain information when you use the Service:

Device information: browser type, operating system, and device identifiers
Usage data: pages visited, features used, and interaction patterns
Log data: IP addresses, access times, referring URLs, and error logs
Cookies and similar technologies: session data and preferences

How We Use Your Information

We use personally identifiable information solely to provide the Service. Specifically, we use your information to:

Create and manage your account
Provide access to the Service and its features
Process payments and manage subscriptions
Send administrative communications, including service updates and security alerts
Provide customer and technical support
Send promotional materials (only with your consent)
Improve and develop the Service
Ensure security and prevent fraud
Comply with legal obligations

Data Sharing and Third Parties

We do not sell your personal information. We may share your information with:

Payment Processors

We use Stripe to process payments. When you provide payment information, it is transmitted directly to Stripe and is subject to their privacy policy. We do not store complete payment card details on our servers.

Service Providers

We work with third-party providers for hosting, data storage, analytics, and customer support. These providers are contractually obligated to protect your data and may only use it to provide services to us.

Professional Advisors

We may share information with lawyers, accountants, and other professional advisors in connection with business operations.

Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Cookies and Tracking Technologies

We use cookies and similar technologies to maintain session state, remember preferences, and analyse usage patterns. You can control cookie settings through your browser, but disabling cookies may affect Service functionality.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

Encryption of data in transit and at rest
Access controls and authentication requirements
Regular security assessments and monitoring
Employee training on data protection

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as reasonably necessary to provide the Service and fulfil the purposes described in this policy. Specifically:

Active accounts: data is retained while your subscription is active
Cancelled accounts: data may be retained for up to 90 days to allow for reactivation, after which it will be deleted
Legal obligations: certain data may be retained longer if required by law

Upon account termination, you may request export of your data within 30 days. After this period, your data will be deleted in accordance with our retention schedule.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

All Users

Access your personal data held by us
Request correction of inaccurate data
Request deletion of your data (subject to legal obligations)
Opt out of promotional communications
Export your data in a portable format

UK GDPR Rights

Under the UK General Data Protection Regulation, you have the following rights:

Right to be informed about how your data is used
Right to restrict processing of your data
Right to object to processing based on legitimate interests
Right to data portability
Right to withdraw consent at any time
Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating and improving the Service.

International Data Transfers

Our services are provided from the United Kingdom. Where we use service providers that may process data outside the UK, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements or transfers to countries with adequate data protection laws as recognised by the UK.

Children's Privacy

The Service is not intended for use by individuals under 18 years of age. We do not knowingly collect personal information from children. If we become aware that we have collected data from a child, we will take steps to delete such information.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Email: privacy@ceremonio.com
Ceremonio Ltd

For UK/EU data protection matters, you may also contact the Information Commissioner's Office (ICO) at ico.org.uk.