Privacy Policy
How Fizz Wedding protects and handles your personal information
Effective Date: October 4, 2025 | Last Updated: June 12, 2026
Our Commitment to Privacy
At Fizz, we understand the deeply personal nature of your wedding day and the memories you create with the people you love. We are committed to protecting your privacy and handling your personal information with the utmost care and respect, recognizing that you are entrusting us with some of your most precious moments.
Privacy Summary: We collect only the information necessary to provide our wedding page services, we never sell your data, and you have full control over your information and your wedding page.
Information We Collect
Personal Information
When you create an account, we collect: Name (first and last name), Email address (for account access and important notifications), Password (securely encrypted), Profile photo (optional). Legal Basis: Contract performance and legitimate interests (account security)
Event Information
This includes all content you choose to share on your wedding page: Details about your wedding and your story as a couple, Photos and videos (stored securely with BunnyCDN), Guest book posts, messages, and well-wishes, Wedding details and family information, Custom wedding page URLs and settings. Legal Basis: Consent and legitimate interests (wedding page service provision)
Important: When guests submit posts, photos, or personal information to your wedding page, you (the wedding page owner/subscriber) are responsible for ensuring those individuals have consented to their data being shared with us. We process guest data on your behalf to provide the wedding page service you have requested. For guests: When you register as a guest on a wedding page, your name and email address will be visible to the wedding page owner for the purpose of managing access to their wedding page. Your guest book posts and uploaded media will also be visible on the wedding page. The wedding page owner's data export will include anonymous guest summary statistics (such as total guest count) but will not include your personal details.
Technical Information
To ensure security and improve our services, we collect: IP addresses (for security and approximate location), Browser type and version, Device information (mobile/desktop), Page visits and feature usage, Session data and authentication tokens. Legal Basis: Legitimate interests (service improvement and security)
How We Use Information
We use your information for: Wedding Page Services (Creating, maintaining, and securing your wedding page and content), Security & Safety (Protecting your account, preventing fraud, and maintaining service integrity), Service Improvement (Enhancing our services and developing new features to better serve you).
We use your information to:
- To create and manage your wedding page
- To communicate with you
- To enhance user experience
- Creating and managing wedding pages
- Communication
- Enhanced user experience
- Wedding Page Services
- Security & Safety
- Service Improvement
- Send important account and service-related communications
- Deliver subscription confirmations and billing information
- Notify you about wedding page activity (when enabled)
- Send system updates and security alerts
- Provide marketing communications (with your consent)
- Analyze email engagement to improve our communications
- Website analytics and user behavior analysis
- Conversion tracking and subscription optimization
- User experience improvement through usage data
Legal Basis for Processing
Under UK data protection law (UK GDPR), we must have a lawful basis for processing your personal information. We rely on different legal bases depending on how we use your data:
Consent
When guests submit posts, photos, or messages to wedding pages, they provide explicit consent for us to process and display their contributions. This consent is freely given and can be withdrawn at any time.
Applies to: Guest submissions, posts, photos, and messages on wedding pages
Contract
We process subscriber personal information as necessary to fulfil our contractual obligations to provide wedding page services, manage subscriptions, and deliver the features you have paid for.
Applies to: Service delivery, subscription management, account administration
Legitimate Interest
We have a legitimate interest in preventing fraud, improving our services, and ensuring platform security. We carefully balance these interests against your privacy rights.
Applies to: Fraud prevention, service improvement, security measures, analytics
Information Sharing
We share your information with third-party services to provide and improve our services. Additionally, guest information (name and email address) is shared with the wedding page owner who invited you, to enable them to manage access to their wedding page. Guest book posts and uploaded media are visible to all guests of the wedding page.
Third-Party Service Providers:
BunnyCDN
Purpose: Media Storage
Data Shared: Photos and videos
Privacy Policy: https://bunny.net/privacy
Supabase
Purpose: Database and Authentication
Data Shared: User data
Privacy Policy: https://supabase.io/privacy
Google OAuth
Purpose: Authentication
Data Shared: Authentication data
Privacy Policy: https://policies.google.com/privacy
Brevo (Email Service)
Purpose: Transactional and marketing email delivery
Data Shared: Email addresses, names, email preferences, delivery tracking data
Privacy Policy: https://www.brevo.com/legal/privacypolicy/
Google Analytics 4
Purpose: Website analytics and user behavior tracking
Data Shared: Website usage data, page views, user interactions, session information
Privacy Policy: https://policies.google.com/privacy
Google Tag Manager
Purpose: Tag and analytics management
Data Shared: Website events, user interactions, conversion tracking data
Privacy Policy: https://policies.google.com/privacy
CookieYes
Purpose: Cookie consent management and compliance
Data Shared: Cookie consent preferences, user choices, compliance records
Privacy Policy: https://www.cookieyes.com/privacy-policy/
Vercel
Purpose: Website hosting, analytics, and performance monitoring
Data Shared: IP addresses, page views, web vitals performance metrics, request metadata, user agent information
Privacy Policy: https://vercel.com/legal/privacy-policy
Sentry
Purpose: Error monitoring and session replay for debugging
Data Shared: Error data, browser information, session replays of user interactions, console logs, device information
Privacy Policy: https://sentry.io/privacy/
Data Security
We take protecting your memories and personal information seriously. Here's how we keep your wedding page content safe:
Data Retention
We only keep your information as long as needed for the wedding page services we provide or as required by law. Wedding page content is preserved while your page remains active, and account data is removed promptly when no longer needed.
Retention Periods:
- Wedding page content, photos, and guest posts: Preserved while the wedding page remains active, deleted within 30 days of permanent wedding page deletion
- Account details and profile information: Retained while your account is active, deleted within 30 days of account closure
- Payment and subscription data: Managed by Stripe according to their retention policies (typically 7 years for financial compliance)
- Guest posts and comments: Preserved as part of the wedding page while it remains active. Individual posts and comments can only be deleted by their authors within 24 hours of creation, after which they become part of the wedding page record
- Email preferences and marketing consent: Retained until you unsubscribe or close your account, with unsubscribe requests honored permanently
- Records required for legal compliance: Retained for 6 years as required by applicable business record retention laws (including UK Companies Act requirements)
Your Rights
You have rights regarding your personal information.
Access Your Information
View all personal information we hold about you. How: Go to Account Settings → Download My Data
Correct Your Information
Update or correct any inaccurate personal information. How: Go to Account Settings → Edit Profile
Delete Your Information
Permanently remove your account and all associated data. How: Go to Account Settings → Delete Account
Withdraw Consent
Withdraw your consent for data processing at any time. Important: Withdrawing consent will make your wedding page completely unavailable to all guests (including yourself) until consent is re-granted. How: Go to Account Settings → Privacy & Consent
Data Portability
Export your data in a structured, machine-readable format. How: Go to Account Settings → Download My Data
Object to Processing
Object to certain types of data processing, including marketing communications. How: Go to Account Settings → Privacy & Consent, or use unsubscribe links in emails
Email Communication Rights
You can unsubscribe from marketing emails at any time using the unsubscribe link in our emails. However, we will continue to send essential transactional emails (e.g., subscription confirmations, security alerts, wedding page activity notifications) that are necessary for the operation of your account and wedding page. These cannot be disabled as they are integral to the service.
Age Requirements
Special protections apply to children's personal information.
Our subscription services require users to be 18 years or older to enter into payment agreements. Guest access to wedding pages requires users to be 16 years or older. We do not knowingly collect personal information from children under 16, and will delete such data if discovered. If you become aware that a child under 16 has provided us with personal information, please contact us immediately.
International Data Transfers
Your personal information may be transferred to and processed in countries outside the UK and European Economic Area (EEA), including the United States. When we transfer your data internationally, we ensure appropriate safeguards are in place to protect your information. We use third-party services that may process data in different locations: • Stripe (payment processing) - EU/Ireland and US • Supabase (database hosting) - UK region • BunnyCDN (media storage and delivery) - UK (London) with US replication • Google Analytics (website analytics) - US All our service providers have Data Processing Agreements (DPAs) in place and are required to maintain appropriate security measures and comply with applicable data protection laws. For transfers to the United States, we rely on: • The UK Extension to the EU-US Data Privacy Framework (UK-US Data Bridge) for certified organisations • The UK International Data Transfer Agreement (IDTA) or UK Addendum to EU Standard Contractual Clauses where applicable • Adequacy decisions for countries with adequate data protection Where possible, we prioritise UK and EU-based data storage to minimise international transfers.
All data processing decisions, transfers, and operations are controlled from the United Kingdom and governed by UK law. While we may use service providers located internationally, we remain the data controller and ensure all transfers comply with UK data protection standards.
Governing Law & Supervisory Authority
Governing Law
This Privacy Policy and all data processing activities are governed by the laws of England and Wales. Any disputes arising from this policy or our data practices will be subject to the exclusive jurisdiction of the courts of England and Wales.
Supervisory Authority
Fizz Wedding Ltd is registered with and regulated by the UK Information Commissioner's Office (ICO) for data protection purposes. The ICO is the UK's independent authority set up to uphold information rights and data privacy for individuals.
Your Right to Complain
You have the right to lodge a complaint with the ICO if you believe your personal data has been processed unlawfully or if you are dissatisfied with how we have handled your data protection rights. You can contact the ICO or submit a concern through their online portal.
Visit ICO Concerns Portal →Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our data practices, legal requirements, or business operations. When we make material changes that affect how we collect, use, or share your personal information: 1. Notification: We will notify all active users via email at least 30 days before the changes take effect. 2. Grace Period: You will have 30 days from the notification date to review and accept the updated Privacy Policy. 3. Acceptance Required: During the grace period, you can continue using all features normally. After the grace period expires, if you have not accepted the updated Privacy Policy, administrative features (editing wedding page content, managing permissions, account settings) will be temporarily suspended. 4. Wedding Pages Stay Live: Your wedding page will remain accessible to your guests and fully functional during any suspension period. Only administrative access is affected. 5. Easy Acceptance: You can accept the updated Privacy Policy at any time by logging into your account and following the prompts. Minor updates (such as fixing typos, updating contact information, or clarifying existing language without changing its meaning) will be made without notification or requiring re-acceptance. You can always find the current version of this Privacy Policy on our website with the "Last Updated" date clearly displayed.
Contact Us
Fizz Wedding Ltd is the data controller responsible for your personal information. Company Number: 17194605 (England & Wales) For any questions or concerns about this policy, please contact us using the details below.
Data Protection Officer
Email: privacy@fizz.wedding