Privacy Policy

Last updated: 8 September 2026

Introduction

Ceremonio Ltd ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding venue management platform ("Service").

Two Kinds of Data

Ceremonio holds personal data in two different roles, and your rights work differently in each:

  • Venue accounts. For the information venues give us about themselves and their staff, we decide how it is used and we are the controller.
  • Couples and guests. For the information a venue stores in Ceremonio about its couples and their guests, the venue decides how it is used and is the controller; we only process it on the venue's instructions.

If you are a couple or a guest, contact your venue to exercise your rights over this data, and we will help them respond.

Information We Collect

Personal data

We collect information that can be used to identify you, including:

  • Business and contact information: company name, trading name, contact name, telephone number, address, and email address
  • Account credentials: username and password
  • Payment information: the identifier and status of the Stripe account your venue connects, and for each online payment its amount, date and Stripe reference. Card details are entered on Stripe's payment page and never reach our servers
  • Customer data: information your venue stores in the Service about its clients, including names, contact details, wedding details, and guest information (see "Two Kinds of Data" above: your venue is the controller of this data)

Information collected automatically

We automatically collect certain information when you use the Service:

  • Device information: browser type, operating system, and device identifiers
  • Usage data: pages visited, features used, and interaction patterns
  • Log data: IP addresses, access times, referring URLs, and error logs
  • Cookies and similar technologies: session data and preferences

How We Use Your Information

We use personal data to provide and improve the Service, to run and promote our business, and to meet our legal obligations. Specifically, we use your information to:

  • Create and manage your account
  • Provide access to the Service and its features
  • Process payments and manage subscriptions
  • Send administrative communications, including service updates and security alerts
  • Provide customer and technical support
  • Tell you about Ceremonio features and services relevant to your venue, based on our legitimate interest in growing a business-to-business service (you can opt out at any time)
  • Improve and develop the Service
  • Ensure security and prevent fraud
  • Comply with legal obligations

Data Sharing and Third Parties

We do not sell your personal information. We may share your information with:

Payment Processors

Online card payments from your couples are processed by Stripe through your venue's own Stripe account. Card details are entered on Stripe's hosted payment page, go directly to Stripe and are subject to Stripe's privacy policy. We keep a record of each payment (amount, date and Stripe reference) so your accounts balance, and we never store payment card details on our servers.

Service Providers

We work with a small number of third-party providers, each contractually obligated to protect your data and only permitted to use it to provide services to us: Amazon Web Services (hosting and backups, London region), Google Workspace (email and documents), Google Analytics (website analytics, only with your cookie consent), Meta (advertising measurement, when enabled and only with your cookie consent), Slack (internal alerts), and Stripe (online card payments from your couples, through your venue's own Stripe account).

Professional Advisors

We may share information with lawyers, accountants, and other professional advisors in connection with business operations.

Legal Requirements

We may disclose your information when required by law, court order, or governmental authority, or when we believe disclosure is necessary to protect our rights, your safety, or the safety of others.

Cookies and Tracking Technologies

The website uses these cookies and similar technologies:

  • Essential. Session state and your cookie choice (stored as cookie_consent in your browser). These are needed for the site to work and are always on.
  • Analytics. Google Analytics 4 (cookies beginning _ga), which helps us understand how visitors use the site. Set only if you choose Accept in the cookie banner.
  • Advertising measurement. Meta Pixel (cookies _fbp and _fbc), which measures how our advertising performs. Runs only when enabled on the site and only if you choose Accept.

You make your choice in the banner on your first visit. To change it at any time, use the "Cookie settings" link in the footer of any page.

Data Security

We implement appropriate technical and organisational measures to protect your personal information, including:

  • Data is encrypted in transit
  • Backups are encrypted at rest in AWS S3
  • Access controls and authentication requirements
  • Automated dependency and vulnerability checks on every release
  • Everyone with access to customer data follows our data protection procedures

However, no method of transmission over the Internet or electronic storage is 100% secure. While we strive to use commercially reasonable means to protect your information, we cannot guarantee absolute security.

Data Retention

We retain your information for as long as reasonably necessary to provide the Service and fulfil the purposes described in this policy. Specifically:

  • Active accounts: data is retained while your subscription is active
  • Cancelled accounts: data may be retained for up to 90 days to allow for reactivation, after which it will be deleted
  • Legal obligations: certain data may be retained longer if required by law

Upon account termination, you may request export of your data within 30 days. After this period, your data will be deleted in accordance with our retention schedule.

Your Rights

Depending on your location, you may have certain rights regarding your personal information:

All Users

  • Access your personal data held by us
  • Request correction of inaccurate data
  • Request deletion of your data (subject to legal obligations)
  • Opt out of promotional communications
  • Export your data in a portable format

UK GDPR Rights

Under the UK General Data Protection Regulation, you have the following rights:

  • Right to be informed about how your data is used
  • Right to restrict processing of your data
  • Right to object to processing based on legitimate interests
  • Right to data portability
  • Right to withdraw consent at any time
  • Right to lodge a complaint with a supervisory authority

Our legal basis for processing your data includes: performance of our contract with you, compliance with legal obligations, and our legitimate interests in operating and improving the Service.

International Data Transfers

Our services are provided from the United Kingdom. Where we use service providers that may process data outside the UK, we ensure appropriate safeguards are in place, including UK International Data Transfer Agreements or transfers to countries with adequate data protection laws as recognised by the UK.

Children's Privacy

Our customers are businesses, and the Service is not intended for use by individuals under 18 years of age. We do not knowingly collect information directly from children. Where a venue records children as guests (names or dietary needs on a guest list, for example), the venue is the controller of that data and we process it on the venue's instructions.

Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes via email or through the Service. Your continued use of the Service after such notice constitutes acceptance of the updated policy.

Contact Us

If you have questions about this Privacy Policy or wish to exercise your rights, please contact us at:

Data protection lead: Tim Hockham
Email: privacy@ceremon.io
Ceremonio Ltd, registered in England & Wales, company no. 16966940
HSL Business Hub, Ground Floor, 437 Warrington Road, Rainhill, Prescot, L35 4LL
ICO registration: ZC165968

For UK/EU data protection matters, you may also contact the Information Commissioner's Office (ICO) at ico.org.uk.