QuantRoads, Inc., a Delaware corporation in the United States, operates WeddingTa-da!. We are the controller for account administration, inquiries, security and operation of our own service. Contact [email protected]; mailing details are on our Contact and Imprint page.
For information collected by a couple from their guests, the couple determines the purpose and is the controller where data-protection law applies. We act as their processor, providing storage, RSVP collection and export under their instructions. See our Data Processing summary. Guests should normally contact their host about a reply; we can help route a request without disclosing another person’s information.
Account and sign-in: name, email, preferred service-email language, account identifier, authentication sessions and a password hash if you use email sign-in. Google sign-in supplies a Google identifier and profile information, including email and name, used to create or recognise your account; we do not request access to your Gmail or contacts.
Wedding and planner content: names, dates, venues, planning entries, design choices, invitation link, optional page-password hash, uploaded photographs and associated file details. Guest replies include name, attendance, party size, selected events, meal choice, optional email and note.
Service interactions: Bespoke inquiries, support correspondence, order and entitlement records. Technical information includes request times, IP addresses and browser or request details used in delivery, troubleshooting and abuse prevention. Do not include medical details, identity documents or other sensitive information in free-text fields.
Contract: we use account information and the content you provide to sign you in, save your work, deliver invitation hosting and respond to service requests. Steps you request before a contract, such as a Bespoke inquiry, also fall within this basis.
Legitimate interests: we use proportionate technical information to protect accounts, prevent spam and fraud, diagnose failures and maintain the service. We balance those interests against your rights. You may object to this processing.
Legal obligations: we retain or disclose records where required for lawful requests, accounting or regulatory duties. Consent: where an optional use requires consent, we ask separately and you may withdraw it without affecting earlier lawful processing. We do not treat acceptance of Terms as consent to marketing.
Guest data is processed under the couple’s instructions; the couple is responsible for identifying and explaining its own lawful basis. Meal choices and notes can reveal sensitive information, so avoid requesting it unless necessary and legally justified.
We operate from a US legal entity and information may be processed outside your country, including through infrastructure and support providers. Local laws may offer different protections. Contact [email protected] for information about the locations and safeguards relevant to your data.
Where EU or UK transfer rules apply, a restricted transfer requires a valid mechanism, such as an adequacy decision or applicable standard contractual clauses with the UK addendum or IDTA where needed, together with any required assessment and supplementary safeguards. We do not claim certification under the EU–US Data Privacy Framework.
Account information is retained while your account is active and as needed to address legal obligations or disputes. You may request deletion from Account settings. Wedding content, uploads and replies follow the hosting period: Ready is 12 months from publication or three months after the wedding, whichever is later; Bespoke is 24 months. After expiry there is a 60-day grace period and an export-notification requirement before scheduled deletion.
Security logs, support records and any legally required transaction records may follow different retention periods based on their purpose and legal requirements. Contact us for details for a particular record. Deleted content may persist temporarily in operational recovery copies until those copies cycle out; it must not be restored for ordinary use. Browser preferences remain on your device until you clear them.
Subject to applicable law and relevant exceptions, you can request access, correction, deletion, restriction, portability of information you provided, and objection to processing based on legitimate interests. Where processing relies on consent, you can withdraw consent at any time. We do not make decisions with legal or similarly significant effects solely through automated profiling.
Write to [email protected] with the account or invitation concerned and the right you want to exercise. Do not send passwords. We may ask for proportionate information to confirm identity. We normally respond to EU/UK rights requests within one month; if a permitted extension is needed, we explain why. Requests are normally free unless a legal exception applies.
You can complain to your local data-protection supervisory authority, including the UK Information Commissioner’s Office. Contacting us first is welcome but is not required. Guests can exercise rights with the couple who collected their reply; we assist the couple as their processor.
Our Cookie Policy lists sign-in, page-unlock, Google sign-in state, currency and language preference cookies, and device storage for preferences. We do not use advertising cookies. When configured, Cloudflare Web Analytics loads on public marketing pages to measure aggregate page usage and performance without analytics cookies or advertising identifiers. It is excluded from account, planner, authentication, password-recovery and guest-invitation routes. Private-route navigation is not tracked. It is not needed to use your planner or RSVP.
Access controls, password hashing and protected sign-in cookies help secure information. No service can guarantee absolute security. Report a suspected issue to [email protected]; see our Security page for safe reporting guidance.
Account holders must be adults. Guests may reply for a household, but should provide only necessary information about children and have appropriate authority to do so. If you believe a child has provided information without permission, contact us or the invitation host so it can be reviewed.
We will update the date on this page when this policy changes and communicate material changes through the product or account email where appropriate. For privacy questions and requests, write to [email protected].