Privacy Policy

About This Policy

This Privacy Policy explains how Wedding Parlay (“Wedding Parlay”, “we”, “us”) collects, uses, shares, and protects personal information when you use weddingparlay.com and the wedding sites we host at weddingparlay.com/w/.

It applies to two groups of people, and our role differs for each. If you buy and run a wedding site, we act as the controller of your account information and as a processor acting on your instructions for the information your guests submit to your site. If you are a guest taking part in someone else’s pool, the couple who runs that site is the controller of your information, and we process it on their behalf.

Contact details for data protection purposes: Wedding Parlay, [registered address], privacy@weddingparlay.com. Our representative in the EU and UK for the purposes of Article 27 GDPR is [EU/UK representative, if required]. We have not appointed a Data Protection Officer, as we are not required to do so.

Couples subject to the GDPR who need a written data processing agreement covering their guests’ information can request one at the address above.

Information You Provide

When you create an account and set up a wedding site, we collect:

• Account information — your names, the email address on the account, and your password, which is stored only as a salted hash.
• Wedding configuration — your site address, wedding date and time zone, prediction questions, entry price, payout structure, and the payment methods you tell guests to use.
• Collaborator information — the email addresses of anyone you invite to help run your site.
• Content you upload — photographs, captions, and any other material you add to your site.
• Payment information — your purchase is processed by Stripe. We receive a transaction record, including the card brand and last four digits, but never the full card number.
• Support correspondence — the messages you send us and our replies.

Information Guests Provide

Guests taking part in a pool submit the following, which we store on behalf of the couple running that site:

• the name and email address entered on their entry sheet, and a display name if they choose one;
• their predictions, their score, and whether their entry has been marked as paid;
• photographs and captions uploaded to the slideshow, together with the name attached to the upload, where the couple has enabled that feature.

Information We Collect Automatically

When you or your guests use the service, we and our hosting provider collect technical information automatically:

• Log data — IP address, browser type and version, referring page, and the date and time of each request, retained by Cloudflare as part of serving the site.
• Abuse-prevention identifiers — when an entry sheet is submitted or a photograph is uploaded, we store a one-way hash of the submitter’s IP address. It cannot be reversed into an address and is used to enforce rate limits.
• Device and session information — the cookies described in Section 5.

Cookies and Similar Technologies

We currently use three cookies, all of which are strictly necessary to provide the service you have requested and are therefore set without consent:

• an authentication cookie that keeps you signed in to your administrative pages;
• a site-access cookie that records that a guest has entered the password for a protected wedding site;
• a convenience cookie that remembers a guest’s name so that it does not have to be re-entered.

Analytics and Advertising Technologies

We do not currently use third-party analytics services, advertising networks, advertising cookies, or tracking pixels on Wedding Parlay.

We may introduce them in future — for example, analytics to understand how our marketing pages perform, conversion measurement to see which advertising campaigns bring couples to Wedding Parlay, or advertising services that display our advertisements to you on other websites and platforms. Where we do, those providers may set cookies or receive identifiers such as your IP address, device identifiers, and the pages you visited.

Before any such technology is introduced we will update this Policy and the date at the top of it, and give notice in accordance with Section 15. Where consent is required by the GDPR, the UK GDPR, or the ePrivacy Directive, we will ask for it through a cookie banner before any non-essential cookie or similar technology is set, and you will be able to withdraw that consent at any time without affecting the lawfulness of processing carried out beforehand.

Your browser also lets you block or delete cookies. Blocking strictly necessary cookies will prevent parts of the service, including signing in, from working.

We do not sell your guest list or your guests’ contact details, and we do not disclose personal information to data brokers.

How We Use Personal Information

We use personal information for the following purposes:

• To provide the service — creating and hosting your wedding site, accepting entries, scoring the leaderboard, generating printable materials, and displaying the slideshow.
• To take payment — processing your purchase and any add-on through Stripe, and issuing refunds.
• To communicate — sending transactional email such as entry confirmations, purchase receipts, results notifications, and password resets, and responding to support requests.
• To keep the service secure and reliable — enforcing rate limits, investigating abuse and fraud, diagnosing faults, and maintaining backups.
• To comply with law — meeting our tax, accounting, and other legal obligations, and responding to lawful requests.
• To improve and market the service — understanding aggregate usage of our marketing pages and, where permitted, promoting Wedding Parlay to prospective customers.

Legal Bases for Processing

If you are in the European Economic Area or the United Kingdom, we rely on the following legal bases under Article 6(1) GDPR:

• Performance of a contract (Art. 6(1)(b)) — providing the service to you, taking payment, and sending transactional email.
• Legitimate interests (Art. 6(1)(f)) — securing the service, preventing abuse and fraud, maintaining backups, and marketing our own service to existing customers. We have balanced these interests against your rights and you may object at any time as described in Section 13.
• Consent (Art. 6(1)(a)) — non-essential cookies and similar technologies, any future analytics or advertising technologies, and optional marketing email. You may withdraw consent at any time.
• Legal obligation (Art. 6(1)(c)) — retaining transaction records and responding to lawful requests.

How We Share Personal Information

We do not sell personal information. We disclose it only in the following circumstances:

• Service providers (processors) — Cloudflare, Inc. (hosting, database, file storage, and content delivery), Stripe, Inc. (payment processing; Stripe acts as an independent controller for its own compliance purposes), and Resend (transactional email delivery). Each is bound by contract to process personal information only on our instructions.
• At your direction — information submitted to a wedding site is available to the couple who runs it and to the collaborators they invite.
• Legal and safety — where we are required by law, court order, or a valid request from a public authority, or where disclosure is necessary to protect our rights, safety, or property, or those of our users.
• Business transfers — if we are involved in a merger, acquisition, financing, or sale of assets, personal information may be transferred as part of that transaction. We will give notice before your information becomes subject to a materially different privacy policy.
• Advertising and analytics providers — only if and when we introduce them, on the terms set out in Section 6.

International Data Transfers

The service is hosted on Cloudflare’s global network, and our service providers operate in the United States and elsewhere. Personal information may therefore be transferred to, and processed in, countries outside your own, including countries that have not received an adequacy decision from the European Commission or the UK government.

Where personal information is transferred out of the EEA or the UK, we rely on the European Commission’s Standard Contractual Clauses, the UK International Data Transfer Addendum, or another lawful transfer mechanism, together with the technical and organisational measures described in Section 12. You may request a copy of the relevant safeguards at the contact address in Section 1.

Data Retention

We retain personal information for as long as your wedding site remains active, so that you and your guests can return to the results after the event.

If you ask us to delete your site, we remove your account information, your guests’ entries, and all uploaded content from our live systems within 30 days. Copies held in encrypted backups are overwritten within a further 90 days.

We retain transaction records for as long as tax and accounting law requires, and abuse-prevention hashes for no longer than 12 months. Where we are required to keep information for legal reasons, we restrict processing to that purpose alone.

Security

We take appropriate technical and organisational measures to protect personal information, including encryption in transit (HTTPS), encryption at rest for stored data and backups, salted password hashing, isolation of each wedding’s data from every other wedding on the service, rate limiting, and access controls that restrict staff access to what is needed to operate the service or respond to a support request.

No method of transmission or storage is completely secure, and we cannot guarantee absolute security. If a personal data breach occurs, we will notify the competent supervisory authority within 72 hours where required by Article 33 GDPR, and affected individuals without undue delay where Article 34 applies.

Your Rights and Choices

Subject to local law, you have the right to request access to the personal information we hold about you, to have it corrected or erased, to restrict or object to its processing, to receive it in a portable format, and to withdraw any consent you have given. You also have the right not to be subject to decisions based solely on automated processing; we do not carry out such processing.

To exercise any of these rights, contact privacy@weddingparlay.com from the email address associated with your account. We respond within 30 days, and will tell you if we need longer. We do not charge a fee or discriminate against you for making a request.

If you are a guest at a wedding, the couple running that site is the controller of your information and your request is best directed to them. If that is not practical, contact us and we will assist them in responding.

California residents have the right to know what personal information is collected, disclosed, or sold or shared; to request deletion and correction; and to opt out of the sale or sharing of personal information for cross-context behavioural advertising. We do not currently sell or share personal information as those terms are defined by the CCPA. If that changes, we will provide a “Do Not Sell or Share My Personal Information” link before any such disclosure begins.

You can unsubscribe from any non-transactional email using the link in the message. Transactional email about your site and your purchase cannot be switched off while your account is active.

Children's Privacy

The service is not directed at children, and we do not knowingly collect personal information from anyone under 16 (or under 13 where local law sets that threshold). If you believe a child has submitted information to a wedding site, contact us and we will delete it.

Changes to This Policy

We may update this Policy from time to time. The date at the top of the page shows when it was last revised.

If a change materially affects how we handle personal information — including the introduction of analytics or advertising technologies described in Section 6 — we will notify account holders by email at least 14 days before it takes effect, and where the law requires consent we will obtain it before the change applies to you.

Contact and Complaints

Questions, requests, and complaints can be sent to privacy@weddingparlay.com, or to Wedding Parlay, [registered address]. General support enquiries go to support@weddingparlay.com.

If you are not satisfied with our response, you have the right to lodge a complaint with your local data protection supervisory authority. In the EEA this is the authority in your country of residence, work, or where the alleged infringement occurred; in the UK it is the Information Commissioner’s Office; in Canada it is the Office of the Privacy Commissioner of Canada.