In short. Wedwell stores your wedding plan so you can organise your day. We never sell your data, show adverts or track you across the web. Guests' dietary and access needs are encrypted and only ever come from the guest themselves. AI help is off until you switch it on. You can export or delete everything at any time.
1. Who we are
Wedwell is made and run by Epicurean Digital Consultants Ltd, a company registered in England and Wales (company number 16622200), 30 Durham Road, Wimbledon West, London SW20 0TW. We are the data controller for the personal data described here.
Privacy questions and requests: hello@epicureandigitalconsultants.com.
2. Who uses Wedwell
| You are | What this means for your data |
|---|---|
| A couple | You hold an account and own the wedding plan. You decide what helpers, guests and suppliers can see. |
| A helper (family or friend) | You hold an account and see only what the couple allows. The budget and guests' dietary details are hidden unless the couple switches them on for you. |
| A guest | You have no account. A couple has added your name and, if they have it, your email or postal address so they can invite you. Your personal RSVP link lets you reply and, if you choose, tell them your dietary or access needs. |
| A supplier | You have no account. You receive an expiring link to a pack with only the details for your part of the day. |
If you are a guest or supplier, the couple decides to include you in their plan. We process your details on their behalf and for the wedding only. You can ask us or the couple to correct or remove your details at any time.
3. What we collect
| Data | Who it comes from |
|---|---|
| Name, email address, account identifiers, sign-in device and time | You, when you create an account or accept an invitation |
| Your wedding plan: dates, venues, steps, cards, tasks, notes, run sheet, seating, risks, decisions and change history | You and your helpers |
| Guest names, household names, side, postal address, email, RSVP, meal choice, travel needs, children by age band only | The couple, and each guest through their RSVP link |
| Dietary and access needs (see section 4) | Only the adult guest concerned, with their explicit consent |
| Supplier business names, contact names, email, phone, quotes, contracts and receipts | The couple |
| Budget figures and payments you record to suppliers | The couple |
| Purchase history: which package or add-on you bought, when, and the order reference | Google Play or Stripe, after you buy. We never see or store card numbers. |
| Photos, videos, files and documents you add (Our Story moments, quote and receipt snaps, guest photos where that add-on is on) | You, your helpers and, where enabled, your guests |
| Messages you send us through the app on a paid package, and questions suppliers send through their pack | You and your suppliers |
| One contact at a time from your phone's contact picker, when you choose to add a guest that way. We do not read your contact list. | You |
| How the app is used: which steps are opened and where people stop. Cookieless and switchable off in Settings. | Your device, only while analytics is on |
We do not collect your device location, advertising identifiers, browsing history, crash reports that identify you, or any data about race, religion, politics or sexual orientation.
4. Dietary and access needs
Dietary requirements and accessibility needs can reveal health information, so we treat them as special-category data under UK GDPR.
- They come only from the adult guest concerned, through their own RSVP, and only after that guest gives explicit consent. One person replying for a household cannot give this information for another adult.
- They are encrypted at field level in our database (AES-256-GCM) and are never included in AI requests, supplier packs without a code, or messaging apps.
- They are visible only to the couple and, where one is assigned, the coordinator. Every time an Epicurean Digital Consultants team member views them, a reason is recorded in an audit log.
- A guest can change or withdraw them at any time from their RSVP link or by emailing us.
5. Why we use it and our lawful basis
| Purpose | Lawful basis (UK GDPR Article 6 / 9) |
|---|---|
| Running your account and your wedding plan | Performance of a contract with you |
| Processing guest and supplier details on the couple's behalf | Legitimate interests of the couple as organiser of their wedding, balanced against the guest's or supplier's interests |
| Dietary and access needs | Explicit consent of the guest (Article 9(2)(a)) |
| Service emails: deadlines, invitations, purchase confirmations, account warnings | Performance of a contract |
| Marketing emails | Consent, given separately in the app and withdrawable with one tap |
| AI help (section 6) | Consent |
| Keeping accounting records of purchases | Legal obligation (UK tax law) |
| Security, fraud prevention and audit logs | Legitimate interests in keeping the service safe |
| Usage analytics | Legitimate interests in improving the product; you can switch it off in Settings |
6. AI help
Wedwell can suggest wording, checklists and plans with help from an AI model provided by Anthropic. This is off until you switch it on, and you see a short privacy note the first time. When it is on, we send only the minimum needed for the request. Guests' dietary and access needs are excluded by design, and your Our Story entries are sent only if you turn on story captions. The AI never books, pays, sends messages, changes seating or deletes anything. Anthropic processes this data for us under contract and does not use it to train its models.
7. Who we share it with
We do not sell personal data and we do not share it with advertisers. We use a small number of service providers who act on our instructions:
| Provider | What for |
|---|---|
| Hostinger International Ltd | Hosting the app, the API and the database |
| Cloudflare, Inc. (R2) | Storing photos, files and generated PDFs |
| Resend, Inc. | Sending service emails such as invitations and deadlines |
| Stripe Payments Europe, Ltd. | Card payments on the web. Stripe holds the card details; we hold the order reference. |
| Google Play | Purchases made in the Android app. Google holds the payment details; we hold the purchase token. |
| Anthropic, PBC | AI help, only when you have switched it on |
Within the app, the couple controls who sees what: helpers see what they are allowed to, guests see only their own invitation and never the guest list or seating, and suppliers see only their own section of the plan. We may also disclose data where the law requires it, for example to respond to a lawful request from a public authority.
8. Where data is stored
Our servers and database are in the United Kingdom or the European Economic Area. Some providers above may process data in the United States. Where that happens we rely on the UK's adequacy regulations, the UK International Data Transfer Agreement or the UK Addendum to the EU Standard Contractual Clauses, together with the providers' own technical safeguards.
9. How long we keep it
| Situation | Retention |
|---|---|
| Free account | Deleted 30 days after your last sign-in. We email you on day 21 and day 28 with a one-tap "keep my account" and a free download of your plan and Our Story photos. |
| Paid package | Fully active until 90 days after your wedding date, then read-only for 30 days so you can export, then deleted. The extended archive add-on keeps it read-only for a further 12 months. |
| Postponed wedding | Pausing your plan freezes this clock. |
| Guests and suppliers | Deleted with the couple's plan, or earlier when the couple removes them or they ask us to. |
| Supplier pack links | Expire after 7, 14 or 30 days, or the day after the wedding for day-of packs. |
| Purchase records | Kept for 6 years after the end of the financial year, as UK tax law requires, without the wedding plan attached. |
| Sign-in sessions | 30 days. One-time sign-in links expire after 15 minutes. |
| Security audit logs | Up to 2 years. They never contain the content of your plan or any dietary or access information. |
Deleted items go to a recovery bin first so an accidental deletion can be undone, then are removed for good.
10. Security
All connections use TLS. Dietary and access needs, guest addresses and sealed Our Story entries are encrypted in the database. Sign-in is by single-use link, with Google or Apple sign-in where available; we store no passwords for couples or helpers. Our own team signs in with a password plus an authenticator code, every sensitive view is logged, and we keep a 72-hour incident checklist that includes notifying the Information Commissioner's Office and you where the law requires it.
11. Your rights
Under UK GDPR you can ask us to:
- Access the personal data we hold about you and receive a copy;
- Correct anything inaccurate;
- Delete your data. See how to delete your account and how to delete some data without closing your account;
- Export your plan in a portable format. Every account, free or paid, can export at any time;
- Restrict or object to processing based on legitimate interests;
- Withdraw consent for AI help, marketing emails or dietary and access information at any time, without affecting what happened before.
Email hello@epicureandigitalconsultants.com from the address on your account. We confirm within 3 working days and complete requests within one month. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office, though we would like the chance to put things right first.
12. Children
Wedwell accounts are for adults aged 18 and over. Children appear in a plan only as guests, recorded by age band (baby, child, teen), never by date of birth, and never with dietary or access details of their own: a parent or guardian gives those with the child's RSVP.
13. Cookies and analytics
The web app uses only the cookies and local storage needed to keep you signed in and remember your preferences. Statistics are cookieless, privacy-friendly and can be switched off in Settings. There are no advertising cookies and no tracking pixels in our emails.
14. Changes and contact
When this notice changes we update the version and date at the top and, for material changes, tell you in the app or by email before they take effect.
Epicurean Digital Consultants Ltd · 30 Durham Road, Wimbledon West, London SW20 0TW · hello@epicureandigitalconsultants.com