Draft prepared for review. Yellow items must be completed, and the whole policy should be checked by a qualified lawyer in the countries you operate in, before the site goes live.
1. Who we are
The Aisle Advisors (“we”, “us”) is the trading name of [legal business name], [company type and registration number], with its registered address at [registered address, country]. We are the controller of the personal information described in this policy.
Questions about privacy, or requests about your information: info@aisleadvisors.com. [If you appoint one: name of your Data Protection Officer / Information Officer]
2. What we collect and why
We only ask for what we need to answer you and to work with you.
| When | What we collect | Why we use it | Legal basis | How long we keep it |
|---|---|---|---|---|
| You send the enquiry form or email us | Your name, email address or phone number, your message and, if you choose to include it, the items in your cart | To reply, answer your questions and arrange your free call | Steps you ask us to take before a contract; our legitimate interest in replying to enquiries | [e.g. 24 months] after our last contact, unless you become a client |
| You become a client | Contact details and the wedding details you choose to share (date, destination, budget, guest numbers, vendor quotes and contracts you send for review) | To provide the package or add-on you bought | Performance of our contract with you | For the length of the service, then [e.g. 7 years] where tax and accounting law requires it |
| You buy something | Name, email, what you bought, amount and date. Card details are handled by our payment provider, Stripe. We never see or store your full card number. | To take payment, send what you bought, and keep the records the law requires | Performance of a contract; legal obligation | As required by tax and accounting law [e.g. 7 years] |
| You visit the website | Technical data your browser sends to our host (IP address, browser type, pages requested, time) | To deliver the site and keep it secure | Legitimate interest in running a secure website | Kept by our hosting provider for up to [e.g. 30 days] |
We do not use analytics, advertising or tracking cookies, we do not sell or rent your personal information, and we do not make decisions about you by automated means.
Please don’t send us sensitive information (for example about health or religion) unless it matters for your wedding. If you do share it, for example a religious ceremony you are planning, we use it only to help you with that, and only with your agreement.
3. Who we share it with
We share personal information only where needed:
- Service providers who work for us, under contracts that require them to protect it:
- website hosting: [hosting provider]
- delivery of the enquiry form: [form service, if used]
- email: [email provider]
- booking calls: [calendar tool, if used]
- payments: Stripe
- Wedding vendors, only when you ask us to contact them for you (for example with the vendor booking add-on). Your contract with a vendor is between you and that vendor, and their own privacy policy applies to what they do with your details.
- YouTube (Google), only if you choose to play one of our destination videos. See our Cookie policy.
- Professional advisers and authorities, when the law requires it or to protect our legal rights.
4. International transfers
We work with couples and vendors in many countries, including Indonesia, South Africa and Spain, and some of our service providers are based outside your country (for example in the United States). Where data protection law requires it, we put appropriate safeguards in place for these transfers, such as the European Commission’s Standard Contractual Clauses, or we rely on an adequacy decision.
5. Your rights
Depending on where you live, you can ask us to:
- give you a copy of your information
- correct it
- delete it
- restrict or object to how we use it
- send it to you or to another company
- withdraw any consent you gave, at any time
Email info@aisleadvisors.com. We will reply within one month, or sooner if your local law requires it. We may ask you to confirm your identity first.
You can also complain to your data protection authority. For example:
- the authority in your EU country (in Spain, the AEPD)
- the ICO in the UK
- the Information Regulator in South Africa
- the OAIC in Australia
We would appreciate the chance to put things right first.
6. Security
We use reputable providers, encrypted connections (HTTPS) and limited access to protect your information. No system is perfectly secure. If a breach affects you, we will tell you and the relevant authority when the law requires it.
7. Children
Our services are for adults planning their own wedding. We do not knowingly collect information from anyone under 18.
8. Changes
If we change this policy, we will update it on this page and change the date at the top. If a change is significant, we will tell clients directly.