Privacy Policy

Last updated September 2026

This site is operated by EventPlanza — a trading name of Bartlomiej Kordulasinski, sole trader, of 156A Manchester Road, Wigan, WN2 2EA, United Kingdom. That is the data controller for the purposes of UK GDPR; you can reach us at [email protected]. This page explains what data we collect when you use eventplanza.com and app.eventplanza.com, and why.

What we collect

Account & purchase details — your email address, and the details you enter into your planner (guest list, budget, timeline, vendors, etc.). This data belongs to you and is used only to run your planner.
Payment information — payments are processed by Stripe. We never see or store your full card details; Stripe handles that under its own privacy policy.
Guest-submitted data — if you share your gift list, gallery, or RSVP links with guests, whatever they submit (an email to reserve a gift, a photo upload) is stored against your planner so you can manage it.
Basic analytics — we log page visits to understand site usage. Visitor IP addresses are never stored in plain form — they're one-way hashed (HMAC) before being saved, so we can measure unique visits without being able to reconstruct your IP address.
Transactional email — order confirmations, password resets, and planner-related emails are sent via Brevo, our email delivery provider.

What we don't do

We don't sell your data. We don't run third-party ad tracking. We don't share your planner's contents with anyone except you and the guests you choose to share links with.

Why we're allowed to hold it

Under UK GDPR every use of your data needs a lawful basis. Ours are:

Running your planner and taking payment — performance of our contract with you. Without this data there is no planner to give you.
Sending transactional email (purchase confirmations, password resets) — performance of our contract.
Keeping purchase records — legal obligation. UK tax law requires us to keep records of sales.
Basic analytics and keeping the service secure — our legitimate interests in understanding usage and preventing abuse, balanced against your privacy by never storing an IP address in a form we can read back.
Non-essential cookies — your consent, given through the cookie banner and withdrawable at any time on our cookie policy page.

Who else processes it

We use a small number of providers who process data on our behalf, under contract and only on our instructions:

Stripe — payment processing. Stripe is based in the United States and receives your email address and payment details directly; we never see your card number.
Brevo — transactional email delivery (EU-based).
Cloudflare — serves and protects every page of this site, so all traffic passes through it. US-based.
Netcup — our hosting provider. Your planner data is stored on servers in Germany.

Where a provider is outside the UK, the transfer is covered by that provider's own approved safeguards (UK International Data Transfer Agreement or the equivalent standard contractual clauses).

How long we keep it

Your planner and its contents — for your access period plus a short grace period, after which it may be deleted.
Gallery photos — for the retention window shown on your gallery page; they are purged automatically after it.
Purchase records — six years after the end of the tax year they fall in, because UK tax law requires it. If you delete your account we keep the sale record but remove your name and email from it, so it cannot identify you.
Analytics — page visits are stored without any readable IP address, so they stop being personal data once written.

Your rights

Under UK GDPR you have the right to:

See what we hold about you, and get a copy.
Correct anything inaccurate.
Delete your data — the "right to be forgotten".
Portability — receive your data in a structured, machine-readable format.
Restrict or object to how we use it, including anything we do on the basis of legitimate interests.
Withdraw consent at any time where consent is the basis, without affecting what came before.

Two of these you can exercise yourself, immediately, without asking us: Settings → Your data in your planner lets you download everything we hold as a single file, or delete your account and all its contents outright. For anything else, email [email protected] and we will deal with it within one month.

Cookies

We use a small number of cookies, and ask before setting any that are not strictly necessary. What each one does, and how to change your mind, is set out on our cookie policy page.

Complaints

If you think we have handled your data badly, please tell us first — email [email protected] and we will try to put it right. You also have the right to complain to the Information Commissioner's Office, the UK's data protection regulator, at ico.org.uk/make-a-complaint or on 0303 123 1113. You do not have to come to us first.

Contact

Questions about this policy? Email [email protected].