Privacy Policy

Version privacy-v2 · Last updated 10 September 2026 · Data controller: Said We Do Ltd, registered in England & Wales (company no. 17325013), registered office 27 Palmeira Road, Bexleyheath, United Kingdom, DA7 4UU (“We Do”, “we”, “us”, “our”).

We Do helps couples plan their wedding and connect with the right suppliers. That means we look after some personal information, including, sometimes, details about your faith. Here's exactly what we collect, why, and the control you have over it.

The short version

• We collect only what we need to help you plan and to connect couples with suppliers.
• If your wedding involves a faith, that's special-category data, we only ever process or share it with your explicit consent, and you can withdraw it any time.
• When you enquire with a supplier, we share your details with the suppliers you choose, so they can respond.
• Some supplier listings start from public business information. Any supplier can claim, edit or have their listing removed at any time, no account needed.
• We never sell your data.
• You have strong rights over your data, and you can complain to the ICO.

1. Who this applies to

This policy covers couples using We Do, suppliers listing with us, and visitors to our website. Where suppliers receive a couple's details through us, the supplier becomes an independent controller of that data under their own privacy obligations.

2. What we collect

• Account details, your name, email, password and settings.
• Wedding details, city, approximate date, guest numbers, budget band, the type or faith of your wedding, and the notes you add while planning.
• Enquiry content, the messages and requirements you send to suppliers, and Concierge requests (including a UK contact number if you give one).
• Supplier business details, for vendors: business name, contact, company number, categories, faiths and cultures served, areas, listing content, photos, embedded videos and reviews. Much of this is shown publicly on your We Do listing and on the shareable mini-site you can publish.
• Payment details, taken securely by our payment provider, Stripe. We don't store your card details.
• Usage & device data, how you use the site, plus cookies and similar technologies (see section 8).

3. Faith & special-category data (important)

The type or faith of your wedding can reveal your religious beliefs. Under the UK GDPR this is special-category data, which gets extra protection.

• We only process it on the basis of your explicit consent, captured through a clear, separate tick, not bundled into anything else.
• We use it to match you with suitable suppliers and, when you choose to enquire, to share it with the suppliers you select so they can respond.
• You can withdraw your consent at any time. That stops any future processing, though it can't undo what's already been shared.
• When we describe a supplier as serving a particular faith or culture, that describes the services the business offers (for example, a caterer who caters Hindu weddings). It is not a statement about any individual's beliefs, and it is not special-category data about the supplier.

4. How we use your data, and our lawful bases

• Running your account & the planning tools, to provide the service you asked for (performance of a contract).
• Matching you with suppliers and sharing enquiries, for ordinary details, performance of a contract and our legitimate interests in running the marketplace; for faith details, your explicit consent (Article 9).
• Building and maintaining our supplier directory, including creating draft listings from public business information (see section 7), our legitimate interests in offering couples a useful, comprehensive directory.
• Taking payment for Plus and vendor fees, performance of a contract and legal obligation (e.g. tax records).
• Improving and securing the service, our legitimate interests in a safe, well-run platform.
• Marketing, consent, or our legitimate interests for relevant business-to-business contact, always with an easy way to opt out.

5. Who we share it with

• Suppliers you choose, when you enquire or ask to be connected, we share the relevant details (including faith details, with your explicit consent) so they can respond.
• The service providers who help us run We Do, listed in section 6. They act on our instructions under written data-processing terms.
• Where the law requires it, or to protect our rights, users or the public.

We never sell your personal data.

6. The service providers we use

We rely on a small number of trusted providers (processors) to run We Do. They only process data on our instructions, under written data-processing terms:

• Supabase, our database, sign-in and file storage (hosted in the EU).
• Vercel, hosting and delivery of our websites and apps.
• Resend, sending our transactional and account emails.
• Stripe, processing payments (Stripe is an independent controller for its own payment and fraud purposes).
• PostHog, privacy-focused product analytics to understand and improve how the app is used (EU-hosted; loaded only with your consent).
• Plausible, cookieless, privacy-friendly website analytics (no personal cookies, aggregated only).
• Google, “Sign in with Google”, and public business-listing data we use to build our supplier directory (see section 7).
• Meta, an advertising measurement pixel, loaded only with your consent.

We keep this list current. If we add or change a provider, we'll update this policy.

7. Suppliers we list from public sources

To give couples a genuinely useful directory from day one, some supplier listings begin as draft profiles we build from public business information, for example business listings and details available through Google and on suppliers' own public pages. We do this on the basis of our legitimate interests in offering couples a comprehensive directory, balanced against the supplier's interests.

• These drafts contain business information only, such as business name, category, area and publicly listed contact details. We do not source special-category data (such as anyone's religious beliefs) this way.
• When we first contact a supplier about a draft listing, we tell them where the information came from and how to claim, change or remove it, in line with our transparency duty under Article 14 UK GDPR.
• A supplier can claim their listing (to edit and control it), object to it, or ask us to remove it at any time, with no account needed, by emailing privacy@saidwedo.com or replying to our email. We action removals promptly.

8. Cookies & similar technologies

We use essential cookies to run the site and keep you signed in. For non-essential tracking we ask for your consent through our cookie banner:

• PostHog (product analytics) and the Meta pixel (advertising measurement) load only if you accept.
• Plausible is cookieless and privacy-friendly, so it runs without setting personal cookies.

You can change your choice at any time through the cookie banner and your browser settings.

9. Where your data is held

We aim to store and process your data in the UK or the European Economic Area. If any provider processes data outside the UK, we make sure appropriate safeguards are in place (such as UK-approved transfer terms).

10. How long we keep it

We keep your data only as long as we need it, for your account while it's active, for enquiries as long as needed to provide and evidence the service, and longer only where the law requires (for example, financial records). When we no longer need it, we delete or anonymise it.

11. How we protect it

We use appropriate technical and organisational measures, including access controls, encryption in transit, row-level security and least-privilege access, to keep your data secure, and we keep these under review.

12. Your rights

Under UK data protection law you have the right to:

• access the data we hold about you;
• have inaccurate data corrected;
• have your data erased in certain cases;
• restrict or object to certain processing;
• data portability;
• withdraw consent at any time (including for faith data); and
• complain to a regulator.

To exercise any of these, email privacy@saidwedo.com. We'll respond within the time the law allows (usually one month).

13. Complaining to the ICO

If you're unhappy with how we've handled your data, please tell us first so we can put it right. You also have the right to complain to the UK's data protection regulator, the Information Commissioner's Office (ICO), at ico.org.uk or on 0303 123 1113.

14. Children

We Do is intended for adults planning a wedding. It isn't aimed at children, and we don't knowingly collect data from anyone under 18.

15. Changes to this policy

We may update this policy from time to time. The current version is always on our site, and we'll flag any material changes.

Questions about your privacy?

Email our team at privacy@saidwedo.com, we're glad to help.