Privacy Policy

Last updated: [date]

1. Controller

The controller of your personal data is [Operator company name, registered office, company ID]. Contact: info@uniqplanner.com.

2. What data we process

• Account data – name, e-mail, password (stored only as a secure hash), language, role (couple, vendor, venue).
• Wedding planning data (couples) – wedding date and place, tasks, budget, wish list, wedding website content and the guest list including RSVP answers, dietary requirements and seating that the couple enters.
• Business data (vendors and venues) – profile information, photos and videos, price lists, invoices issued through the Platform and their recipients.
• Communication – inquiries, chat messages and support requests.
• Payment data – subscriptions are paid through Lemon Squeezy; we receive only the subscription status and basic billing details, never full card numbers.
• Technical data – IP address, browser information and, with your consent, analytics data.

3. Purposes and legal bases

• Providing the Platform and your account – performance of a contract (Art. 6(1)(b) GDPR).
• Invoicing and accounting – legal obligation (Art. 6(1)(c)).
• Security, fraud prevention and service e-mails – legitimate interest (Art. 6(1)(f)).
• Newsletter and analytics cookies – your consent (Art. 6(1)(a)), which you can withdraw at any time.

Couples act as the controller of their guests' data they enter; we process it on their behalf only to provide the planning tools and the wedding website.

4. Where data is stored and who processes it

Our database and file storage are hosted by Supabase in the European Union. Other processors: our hosting provider ([hosting provider]), e-mail delivery ([e-mail provider]), Lemon Squeezy as merchant of record for subscription payments (it processes payment data as an independent controller), and – only with your consent – Google Tag Manager / Google Analytics and Microsoft Clarity for analytics. Where data is transferred outside the EU, it is protected by the EU–US Data Privacy Framework or standard contractual clauses.

5. How long we keep data

We keep account data while your account exists. After you delete your account, your data is deleted or anonymised within [30] days, except where we must keep it longer by law (e.g. invoices for [10] years).

6. Cookies

We use necessary cookies (sign-in session, language, your cookie choice) that the Platform needs to work. Analytics cookies (Google Tag Manager, Microsoft Clarity) are used only after you allow them in the cookie bar. You can change your choice anytime via "Cookie settings" in the footer.

7. Your rights

Under the GDPR you have the right to access your data, to rectification, to erasure, to restriction of processing, to data portability and to object, and to withdraw consent. You can export your data and delete your account directly in your account settings, or write to us. You also have the right to lodge a complaint with a supervisory authority (in the Czech Republic: Úřad pro ochranu osobních údajů, www.uoou.cz).

8. Security

We use encrypted connections (HTTPS), hashed passwords, role-based access checks on the server and regular database backups.

9. Changes

We may update this policy. We will inform registered users about material changes.