Privacy Policy

Safain Labs Ltd (registered in England and Wales under company number 17079217), at 8 Mill Hill, Newmarket, England, CB8 0JB, operates The Wedding Pics and is the data controller for account, billing, security and service-operation information. Couples decide how wedding content is collected, shared and used for their event and may have their own controller responsibilities. Contact us at privacy@thewedding.pics.

Account information includes name, email, authentication records, event details and payment status. Guest content can include photos, videos, audio, messages, guest names and file metadata. We also retain security data such as hashed IP addresses, hashed user-agent values and abuse-attempt timestamps.

• We use account, event, upload and payment-status information because it is necessary to perform our contract with the couple.
• We use limited security, fraud-prevention, support and reliability data for our legitimate interests in protecting users and operating a safe, dependable service.
• We retain information where necessary to comply with legal obligations, resolve disputes and establish or defend legal claims.

We do not sell personal information or use wedding media to train public AI models. We do not make solely automated decisions with legal or similarly significant effects.

Media is stored in private object storage and accessed through expiring signed links. Event upload and storage periods follow the selected plan and are shown in the dashboard. Export links normally expire after 7 days. Security records are kept only while reasonably needed to investigate abuse and protect the service. Account and support records are retained while the account is active and then deleted or anonymised unless a longer period is required for legal claims, tax or accounting duties.

Recovery copies are isolated from the public product and protected against overwrite for 30 days. When content is deleted, its recovery copy is made unavailable and queued for deletion as soon as that protection period permits. Couples can request account deletion from account settings.

We use Cloudflare for hosting, security and object storage; Supabase for authentication and database services; Stripe for payments; and Resend for transactional email. Providers may process information outside the United Kingdom. Where an adequacy regulation does not apply, we rely on appropriate international transfer safeguards such as the UK International Data Transfer Agreement or UK Addendum to approved contractual clauses. Email privacy@thewedding.pics to ask for information about or a copy of the relevant safeguards.

Couples can hide or delete uploads, disable guest access and download originals. Depending on the processing and lawful basis, you may request access, correction, deletion, restriction or portability, or withdraw consent where consent applies. Guests should identify the wedding event and upload so we can coordinate the request with the couple.

Your right to object: you may object at any time to processing based on legitimate interests by emailing privacy@thewedding.pics. We will stop unless we have compelling legitimate grounds or need the processing for legal claims.

Please contact us first if you have a concern. You also have the right to complain to the Information Commissioner at ico.org.uk/make-a-complaint.

We use essential cookies for signed-in sessions and short-lived, HttpOnly wedding-PIN access. We do not require advertising cookies. If optional analytics are introduced, they will be documented here and consent will be requested where required.