Privacy
Privacy notice
TODO(owner): this notice has not been written.
The headings below describe what the site genuinely does with what it collects, so the finished notice can be written against reality rather than a template. Nothing here has been drafted as policy. This page is noindex until it is real, and it must be published before the enquiry form takes a single real submission.
1.Who is responsible for your data
TODO(owner): Trading name, the data controller's name, an address for correspondence, and a contact email. Whether an ICO registration is required.
2.What is collected when you enquire
TODO(owner): Name, email, phone, wedding date, ceremony time, venue, party size and anything written in the notes field. All of it goes into a Postgres database on the VPS.
3.What is collected automatically
TODO(owner): A salted hash of your IP address and your browser's user agent, kept to spot abuse of the form. The raw IP is never stored.
4.Why it is held, and on what basis
TODO(owner): Answering an enquiry and, if it becomes a booking, performing the contract. Decide and state the lawful basis for each purpose.
5.Who else processes it
TODO(owner): Resend for email delivery, Cloudflare for Turnstile and for R2 image hosting, and the VPS host. List each, what it sees, and where it is located.
6.How long it is kept
TODO(owner): Enquiries are never deleted by the application — status is changed instead. Decide an actual retention period and then make the application honour it.
7.Photographs
TODO(owner): Whether images of clients appear in the portfolio, how consent is obtained, and how it is withdrawn. Must agree with the booking terms.
8.Your rights
TODO(owner): Access, correction, erasure, objection, and how to exercise them. Include the ICO as the route for a complaint.
9.Cookies
TODO(owner): As built there are no analytics and no marketing cookies. If any are ever added, this section and a consent banner both become necessary.