Legal
Privacy Policy
Seal the Date Ltd · Updated 6 October 2026
This policy explains how Seal the Date Ltd (“we”, “us”), a UK company based in the Midlands, handles personal data when you use Seal the Date at sealthedate.com and related services (digital wedding invitations, RSVP, checkout, partner referrals and the studio dashboard).
We process personal data under the UK GDPR and the Data Protection Act 2018. For questions contact studio@sealthedate.com.
1. Who we are
Controller: Seal the Date Ltd. We provide luxury digital wedding invitations with envelope-opening experiences, guest management and online RSVP. We do not sell personal data.
2. Data we collect
- Account & studio data — name, email, password (hashed via our auth provider), role (couple, partner or studio admin).
- Order & payment data — email, order reference, package, template choices, amounts and payment status. Card details are collected and processed by Stripe; we do not store full card numbers.
- Wedding configuration — couple names, dates, venues, copy, photos, music and design choices you upload or enter.
- Guest & RSVP data — guest names, contact details, household, meal/dietary notes, song requests, attendance and messages submitted via invitation links.
- Referral / partner data — partner business details, referral codes and attribution cookies.
- Technical & analytics — IP address (for security and rate limiting), user agent, pages viewed and product events (for example checkout started). We scrub obvious PII from analytics props.
- Communications — transactional emails (order, preview, RSVP notices) and optional studio newsletter sign-ups.
3. How we use data (purposes & lawful bases)
- Contract — create accounts, take payment, build and host invitations, process RSVPs and support your order.
- Legitimate interests — secure the service, prevent abuse, improve the product, attribute referrals and understand funnel performance (balanced against your rights).
- Legal obligation — tax, accounting and responding to lawful requests.
- Consent — non-essential cookies/marketing where required (see our Cookie notice); you may withdraw consent at any time.
4. Processors & international transfers
We use specialist processors under contracts. Current stack:
- Supabase — authentication, database and media storage for weddings, guests and orders.
- Stripe — payment processing and refunds (Stripe is an independent controller for much payment data; see Stripe's privacy policy).
- Resend — transactional email delivery when configured.
- Vercel — application hosting and edge delivery.
Some providers may process data outside the UK/EEA with appropriate safeguards (for example standard contractual clauses). Ask us for the current list if you need detail for a DPIA.
5. Sharing
We share data with processors above as needed to run the service; with couples for their own guest/RSVP lists; and with authorities when legally required. Partners see attribution and commission-related order summaries, not full guest RSVP content.
6. Retention
We keep account and wedding data while your invitation is active and for a reasonable period afterwards (orders and tax records typically up to six years). Guests and RSVPs are retained for the couple's wedding lifecycle unless you ask us to delete sooner where we can. Analytics events are retained for product reporting and then aggregated or deleted.
7. Your rights
Under UK GDPR you may request access, rectification, erasure, restriction, portability and objection (including to certain legitimate-interest processing), and you may complain to the ICO. Contact studio@sealthedate.com. We may need to verify identity before acting.
8. Children
The service is aimed at adults arranging weddings. We do not knowingly market to children. Guest lists may include minors' names provided by couples; couples are responsible for that collection.
9. Security
We use HTTPS, access controls, hashed credentials via our auth provider, and role-based studio admin. No method of transmission or storage is perfectly secure; report concerns to studio@sealthedate.com.
10. Changes
We may update this policy; the “Updated” date above will change. Material changes may also be notified by email or in-product notice where appropriate.
Related: Terms of Service · Cookie notice · Refund & cancellation.
