Privacy Policy

1. Who we are

RSVPmadeSimple is a wedding website design and build service based in the United Kingdom. We provide done-for-you wedding websites, including RSVP forms, guest dashboards, and hosting, to couples across the UK. References to "we", "us", and "our" throughout this policy refer to RSVPmadeSimple.

You can contact us at admin@rsvpmadesimple.co.uk.

2. What information we collect

We collect the following categories of personal information:

• Enquiry information — your name, email address, wedding date, partner's name, and any details you share when submitting an enquiry through our website.
• Customer portal information — photos, colour preferences, event details, and messages shared through your personal customer portal during the build process.
• Payment information — we do not store card details. Payments are processed by a third-party provider (Stripe). We retain records of transactions for accounting purposes.
• Guest RSVP data — names, dietary requirements, meal choices, song requests, and other information submitted by your wedding guests through the RSVP form on your wedding website. This data is collected on your behalf and you are the data controller for your guests' information.
• Technical data — IP address, browser type, and pages visited, collected automatically through standard web server logs and analytics tools.

3. How we use your information

We use the information we collect to:

• Respond to your enquiry and communicate with you about your project
• Design, build, and deliver your wedding website
• Provide access to and support for your customer portal
• Process payments and maintain financial records
• Improve our service and website
• Comply with legal obligations

We do not use your personal information for unsolicited marketing without your consent. We do not sell your data to third parties.

4. Legal basis for processing

We process your personal information on the following legal bases under UK GDPR:

• Contract performance — processing necessary to deliver the service you have purchased or enquired about.
• Legitimate interests — improving our service and communicating with you about your active project.
• Legal obligation — retaining financial records as required by UK law.
• Consent — where you have given explicit consent, such as for optional marketing communications.

5. Data sharing

We share your information with a small number of trusted third-party providers who help us deliver our service:

• Stripe — payment processing
• Vercel — website hosting and deployment infrastructure
• Supabase — database services for customer portal data

All third-party providers are required to handle your data in accordance with applicable data protection law. We do not share your data with any other third parties without your consent, except where required by law.

6. Data retention

We retain your personal information for as long as necessary to deliver our service and meet our legal obligations. Project-related data is typically retained for 6 years from the completion of the project, in line with standard UK accounting requirements. You may request deletion of your data at any time, subject to any legal obligations we must meet.

7. Your rights

Under UK GDPR, you have the right to:

• Access the personal data we hold about you
• Request correction of inaccurate data
• Request deletion of your data
• Object to or restrict processing in certain circumstances
• Data portability — receive your data in a commonly used format
• Withdraw consent where processing is based on consent

To exercise any of these rights, please contact us at admin@rsvpmadesimple.co.uk. We will respond within one calendar month. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

8. Cookies

Our website uses cookies for essential functionality and analytics. See our Cookie Policy for full details.

9. Security

We take reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, or disclosure. All data is transmitted over HTTPS. However, no method of transmission over the internet is completely secure, and we cannot guarantee absolute security.

10. Changes to this policy

We may update this Privacy Policy from time to time. When we do, we will update the date at the top of this page. Continued use of our website or service after changes are published constitutes acceptance of the updated policy.

11. Contact

For any questions about this Privacy Policy or how we handle your data, please contact us at admin@rsvpmadesimple.co.uk.