Privacy Policy and Cookie Notice
1. Data we collect, why, and our legal basis
We do not knowingly collect special-category data (such as health, religion or sexual orientation) and ask you not to put it into forms. Because weddings and events can reveal some of these things indirectly, please only share what is needed. We do not sell your personal data.
- Contact forms and emails (name, email, message, event details) — to reply to your enquiry and prepare a quote. Legal basis: pre-contractual steps / legitimate interest.
- Orders and purchases (name, email, billing address, country, order details, tax ID if provided) — to deliver what you bought, issue invoices and process refunds. Legal basis: contract; legal obligation (tax and accounting).
- Payments — payment is handled by Stripe. We receive confirmation, the last four card digits and billing details, not your full card number. Legal basis: contract; fraud prevention.
- Client onboarding and intake forms (couple or host names, event date and location, photos, text, music choices, other content you supply) — to build and maintain your website. Legal basis: contract.
- Website and account usage (IP address, browser type, device, pages visited, dates and times) — security, troubleshooting, and (if you accept analytics cookies) understanding how the site is used. Legal basis: legitimate interest; consent for analytics cookies.
- Newsletter or marketing emails (only if you opt in) — to send updates and offers. Legal basis: consent, which you can withdraw at any time.
- Customer support (messages and files you send) — to resolve your issue. Legal basis: contract / legitimate interest.
2. How long we keep data
- Enquiries that do not lead to an order: up to 12 months.
- Client website content and RSVP data: for the hosting period you purchased, plus 30 days afterwards so you can export it, then deleted or anonymised.
- Newsletter data: until you unsubscribe.
- Server logs: up to 12 months.
3. Who we share data with
We do not sell, lease or market personal data. Data may be shared only when necessary for the service — for example with web hosting providers, email platforms, payment processing services or competent authorities when required by law. All suppliers must meet adequate security and confidentiality standards.
4. Guest data and RSVP responses
When a couple or host uses our RSVP system, their guests may enter names, email addresses, attendance, meal choices, plus-ones, song requests, photos or messages.
- The couple or host is the data controller for their guestsu2019 data. They decide what to collect and why.
- We are the data processor. We store and process it only to provide the service and on the hostu2019s instructions. We do not use guest data for our own marketing.
- Guests who want to access, correct or delete their data should first contact the couple or host. You can also email us at info@zemperf.com.
- RSVP dashboards are protected by password or private link. Hosts must not share those links publicly.
5. Cookies
Strictly necessary (no consent needed): cart, checkout, login, security, cookie choice, Stripe fraud prevention. Preferences, analytics and marketing cookies need your consent: language settings, visit counting (e.g. Google Analytics / Plausible, if used), and ads (none at present). Some features load third-party content (Stripe, Google Maps, embedded video) whose providers may set their own cookies under their own policies. You can block or delete cookies in your browser settings; blocking strictly necessary cookies may stop the cart, checkout or login from working.
6. Your rights
You have the right to access, rectify or erase your personal data, restrict or object to certain processing, and data portability. Contact us at info@zemperf.com to exercise any of these rights.
7. Security
We use HTTPS encryption, password-protected admin areas, access limited to what is needed, and regular updates. No system is perfectly secure. If a breach affects your rights, we will notify you and the authorities as the law requires.
8. Links to other sites
Our site may link to other websites. We do not control them and are not responsible for their privacy practices.