This policy explains how The Wedding Planning Co. handles personal information and how you can exercise your privacy choices. Read it with our Cookie Policy for information about website technologies and cookie controls.
Last updated: 1 November 2026
1. Who we are and how to contact us
The Wedding Planning Corporation (“TWPC”, “we”, “us”) operates this website, its vendor directory and editorial services. Our Delaware file number is 10228677. We are responsible for the personal information described in this policy, subject to the separate responsibilities of vendors and service providers explained below.
For privacy questions or requests, email info@theweddingplanningco.com, call +1 (305) 546-1527, or write to The Wedding Planning Corporation, Privacy Enquiries, 16192 Coastal Hwy, Lewes, Delaware 19958, United States. This is our correspondence address.
2. What this policy covers
This policy covers visitors, vendor representatives, subscribers, people contacting us, and people included in editorial submissions. TWPC supplies directory subscriptions and editorial content. We do not book wedding services, collect wedding deposits or vendor service payments, or provide escrow. Vendors handle their own customer relationships and privacy practices. This policy does not replace their policies or give permission for unrelated marketing.
3. Information we collect
- Contact and account information: names, business names, email addresses, telephone numbers, account identifiers, login information, correspondence and preferences.
- Directory and editorial information: business descriptions, locations and service areas, websites, social links, photographs, credits, wedding details, submission materials and permissions supplied to us.
- Subscription and transaction information: selected plan, billing details, invoices, payment and refund status, transaction references, subscription history and payment-authorisation records. Available payment summaries can include card brand, last four digits and expiry.
- Technical and activity information: IP address, browser and device information, pages and links used, referring pages, approximate location, timestamps, cookie or similar identifiers, security events and consent choices. If you consent to Analytics cookies, this includes website events such as clicks on a vendor’s email or phone link and newsletter signups (these events do not include your name, email address or message content). If you also consent to Marketing and audience insights, Google can associate this activity with your signed-in Google Account through Google signals, so we receive aggregated cross-device, demographic and interest reports (such as age range, gender and interest categories), as explained in section 8.
These are current categories, not a statement that every category is collected from every person. Photographs and wedding stories can reveal private or sensitive information, including relationships or religious beliefs. Do not submit identification documents, full payment credentials, or unnecessary sensitive information through ordinary website forms or email.
4. Where information comes from
We receive information directly when you register, purchase, submit content, set preferences or contact us; automatically through the website and its tools; from Google, as aggregated Google Analytics reports, including Google signals reports where you have consented; and from payment providers. A vendor, photographer, couple or other authorised contributor may supply information about people featured in a submission. Contributors must have the permissions required by our submission terms and applicable law. Being named in a submission does not remove your privacy rights.
5. Why we use information
We use information to administer accounts and subscriptions, assess and publish profiles or submissions, respond to enquiries, provide support, manage billing and cancellations, keep records, prevent abuse, protect the website and, with your consent, understand how the website is used (including visits, vendor enquiries and newsletter signups) and understand our audience across devices and by broad demographics and interests. We do not currently run advertising or remarketing campaigns. We also use it to handle rights requests, complaints and legal claims, and meet applicable legal obligations.
Where EU or UK data-protection law applies, our relevant grounds are: performing a contract with you for account and subscription administration; legitimate interests in communicating with business representatives, administering editorial content, maintaining security and resolving disputes, subject to your rights; applicable legal obligations for required records and disclosures; and consent for optional marketing, tracking or other processing where required. Sensitive information needs an additional lawful condition where the law requires one. Acceptance of website terms is not blanket privacy consent. Where publication relies on consent, we require informed permission for the relevant identifying details, images and quotations, and separate explicit consent where required for sensitive information. A copyright licence does not override withdrawal of data-protection consent.
If information needed to provide a requested service is not supplied, we may be unable to create an account, process a payment or assess a submission. Optional marketing and tracking choices are separate from information needed for the service.
6. Public profiles and editorial content
Information approved for a public listing or publication may be viewed, indexed, copied or shared by other people and search engines. Choose business contact details suitable for publication. Submission permissions and publication rights are addressed in our Wedding Submission and Publication Terms; they do not override mandatory privacy rights. Contact us about an inaccurate credit, unwanted personal information or a privacy concern. Removing material from our site does not immediately remove independent copies or search-engine caches.
7. Payments through Airwallex
For subscriptions using Airwallex checkout, payment details are entered in Airwallex’s secure payment form. We share information needed to arrange checkout and receive billing, transaction and subscription records to administer your membership. Airwallex can save a payment method for renewals you authorise. Cancelling a subscription and requesting deletion of personal information are separate requests; necessary transaction and authorisation records may remain after cancellation.
Airwallex processes payment, transaction and related technical information for payment services, security, fraud prevention and legal obligations. Its independent processing, international transfers and privacy rights are described in the Airwallex Global Privacy Policy. Where it processes information on our instructions, this policy explains our purposes. Payment-provider privacy terms do not replace TWPC’s responsibilities.
8. Cookies, analytics, audience insights and reCAPTCHA
The website uses cookies and similar technologies for functions such as login, security and preferences. Essential cookies are always active. Optional categories – Functional, Analytics, Marketing and audience insights, and Uncategorized – stay off unless you turn them on, and you can choose each one separately. Our use of a provider’s tool does not mean every feature offered by that provider is enabled.
Google Analytics (Analytics cookies): If you consent to Analytics cookies, we use Google Analytics 4, a web analytics service provided by Google LLC, to understand how the website is used. Google Analytics does not load until you give that consent. It sets first-party cookies named twpc_public_ga and twpc_public_ga_13BNT5B74E that last up to 90 days, and collects information such as the pages you view, how you arrived at the website, how long you stay, your browser and device type, approximate location derived from your IP address and events such as clicks on a vendor’s email or phone link and newsletter signups. We do not send Google your name, email address, message content or a user ID. Google states that Google Analytics does not log or store IP addresses from users in the EU, Switzerland or the UK.
Google signals (Marketing and audience insights): Google signals is a Google Analytics feature that Google classifies as an advertising feature. We use it only if you separately consent to Marketing and audience insights in addition to Analytics. With that consent, we allow Google to use advertising cookies and identifiers (“ad storage”) with Google Analytics. Google can then associate your activity on our website with your Google Account, if you are signed in and have turned on ad personalization, so that Google Analytics can give us cross-device reports (for example, a visit on a phone followed by a return visit on a laptop) and demographic and interest reports, such as age range, gender and interest categories. This works by using Google Analytics first-party cookies together with Google’s own account and advertising identifiers. We see these reports only in aggregated form and cannot use them to identify you.
We have not linked Google Analytics to Google Ads. We do not use Google Analytics data for remarketing or personalized advertising, and we keep Google’s ad personalization and advertising user-data signals switched off. If that changes, we will update this policy first and ask for any consent the law requires.
Google processes this information as described in How Google uses information from sites or apps that use our services and the Google Privacy Policy.
Your choices for Google Analytics and Google signals:
- Decline or withdraw either consent at any time through Cookie Settings. Turning off Marketing and audience insights stops Google signals; turning off Analytics stops Google Analytics altogether.
- Manage ad personalization linked to your Google Account, which Google signals relies on, in Google’s Ads Settings.
- Install the Google Analytics opt-out browser add-on to stop Google Analytics from being used in your browser on any website.
- Browser signals: see section 13 for how we respond to Global Privacy Control and Do Not Track.
When you first visit, our cookie banner lets you choose Accept, Reject or Preferences. Use the Cookie Settings link in the website footer, then select Cookie Preferences, to review or change your choices at any time, including declining optional categories. Consent-based processing requires the relevant consent; withdrawing it does not invalidate earlier lawful processing. Cookie choices can be specific to a browser or device, and clearing cookies can remove a saved choice. Browser controls can restrict cookies but may affect website functions. A cookie preference is not an unsubscribe request for email.
Google reCAPTCHA helps protect our forms against security threats, fraud and automated abuse and may assess technical information and interactions, including through cookies. On vendor sign-in and registration pages, reCAPTCHA loads when you open the form, even if you reject optional cookies, to provide the anti-abuse protection required for those forms. TWPC determines the purposes of this use, and Google processes reCAPTCHA Customer Data on our behalf under the Google Cloud Terms of Service and Cloud Data Processing Addendum. Read Google’s privacy policy for Google’s own processing. Contact us if a privacy choice appears not to take effect or a security check prevents you from making a request.
9. Who receives information
Recipients include authorised personnel and providers supporting hosting, website administration, communications, security, consent management and payments. Current services include Hostinger website hosting, Airwallex, Google reCAPTCHA and SureCookie, and Google LLC for Google Analytics if you consent to Analytics cookies and for Google signals if you also consent to Marketing and audience insights. Embedded Vimeo media can also receive technical information when loaded, as described in our Cookie Policy. The fonts used for TWPC page design are hosted locally. Separately, reCAPTCHA can load Google-hosted fonts inside its security interface. Authorised administrative and editor views, including editor previews, may load Google Fonts and Hostinger assistant resources for website administration. Information relevant to a request may also go to professional advisers, public authorities where legally required, or a prospective business successor subject to appropriate confidentiality and legal restrictions. Publicly submitted content is disclosed as described above. A provider may act on our instructions or for its own purposes; the relevant provider’s notice explains its independent processing.
10. International processing
TWPC is a United States corporation. Information may be processed in the United States and other countries where our providers and their service partners operate. Their locations and legal protections may differ from your own. Airwallex’s global privacy policy describes its international processing. Provider locations alone do not establish where every item of your information is stored or accessed.
Where applicable law restricts an international transfer, an appropriate lawful transfer mechanism is required. The applicable mechanism depends on the recipient and processing. Contact us for information about the arrangements relevant to your information. We do not claim that TWPC holds a Data Privacy Framework certification or that standard contractual clauses have been executed for every provider relationship. Agreement to this policy is not consent to waive international-transfer protections.
Google Analytics information, including Google signals information, is processed by Google LLC in the United States and other countries where Google operates. Google LLC participates in the EU-U.S. Data Privacy Framework, the UK Extension to it and the Swiss-U.S. Data Privacy Framework. The data processing terms Google offers for Google Analytics also provide standard contractual clauses where they are required. As stated above, this describes Google’s participation, not a TWPC certification.
11. How long information is kept
Profile publication and membership access follow the cancellation arrangements in the Vendor Subscription Terms. A request to close an account or remove a profile is distinct from erasure of separate billing, consent, complaint or legal records. SureCookie is configured to remove cookie-consent logs older than 365 days through scheduled cleanup. Recurring-payment authorisation records are retained for at least 24 months after the final transaction, and longer where a legal obligation or unresolved dispute requires it.
Google Analytics keeps user-level and event-level data for our website for 14 months. Because we have turned on “reset on new activity”, the 14 months restarts each time the same browser returns, so this data is deleted 14 months after a visitor’s last activity. Google applies a 2-month limit to age, gender and interest data, and Google signals data follows our shorter retention setting. Aggregated reports that do not identify individuals may be kept longer. Our Google Analytics cookies last up to 90 days on your device, and Google’s own advertising cookies follow the periods listed in our Cookie Policy, unless you delete them sooner.
We maintain necessary membership and billing records in our website systems hosted by Hostinger and use relevant payment records held by Airwallex. When a billing dispute, chargeback or related complaint arises, or legal proceedings are reasonably anticipated, we preserve relevant existing records and retain necessary correspondence, supporting documents and case notes to investigate, respond and establish or defend claims.
For other information, retention depends on the service or publication’s continuing purpose, the need to resolve an enquiry, applicable accounting and legal requirements, and the period reasonably needed to establish or defend claims. Editorial material can remain published independently of a vendor subscription. Providers apply their own retention obligations to information they control. A deletion request may be subject to lawful exceptions; we will explain an applicable exception rather than treating cancellation as deletion of every record.
12. Your choices and rights requests
You can ask us to explain our processing, correct information, provide access or a copy, or consider deletion by contacting us using section 1. You can withdraw consent or object to direct marketing at any time. To withdraw cookie consent, including for Google Analytics or Google signals, use Cookie Settings. Use an unsubscribe option in marketing messages where provided, or contact us; necessary account, billing and service messages may continue.
We may request proportionate information to verify an access, correction or deletion request and protect other people’s information. We do not require payment credentials for a privacy request. An authorised agent may contact us; evidence of authority or identity may be needed where permitted. We respond within the period required by the applicable law and explain any permitted extension or refusal. Exercising a legal privacy right will not result in unlawful discrimination. You may ask us to reconsider a refusal or appeal where applicable law provides that right. Email us with the subject “Privacy Appeal” and identify the decision. We will explain our response and any available regulator complaint route within the applicable statutory period. An opt-out does not require identity verification where the law prohibits it.
13. Additional regional rights
EEA and United Kingdom: Where the relevant law applies, you may have rights of access, correction, erasure, restriction, portability, withdrawal of consent and objection to processing based on legitimate interests. You may complain to your local data-protection authority or the UK Information Commissioner’s Office. Contacting us first is optional. We ordinarily respond to GDPR or UK GDPR rights requests within one month, subject to permitted extensions and verification. You may object at any time to direct marketing, and on grounds relating to your circumstances to processing based on legitimate interests. Where we rely on consent, you may withdraw it without affecting earlier lawful processing. TWPC has not appointed an EU or UK representative; our direct contact details are in section 1. For visitors in the EEA and the UK, we rely on your consent for Google Analytics and, separately, for Google signals, including storing and reading the related cookies and identifiers on your device. Each consent is optional, is off until you give it and can be withdrawn through Cookie Settings at any time without affecting earlier lawful processing.
United States: Depending on your state and whether its law applies to TWPC, you may have rights to know, access, correct, delete or obtain a portable copy of personal information, and to opt out of sale, sharing, targeted advertising or certain profiling. California rights can include limiting specified uses of sensitive personal information. Applicable exceptions and eligibility rules still apply.
We do not sell personal information for money. We have not linked Google Analytics to Google Ads and we do not use it for remarketing. However, when you consent to Marketing and audience insights, Google signals lets Google use advertising cookies and identifiers and associate your activity on our website with information from your Google Account. Some state privacy laws may treat this as “sharing” personal information for cross-context behavioral advertising (California) or as targeted advertising or a “sale” (other states). We therefore treat it as an activity you can opt out of:
- It is off unless you turn on Marketing and audience insights.
- You can opt out at any time by turning that category off in Cookie Settings or by contacting us using section 1 with the subject “Opt-Out of Sharing”. We do not require identity verification for an opt-out.
Global Privacy Control: if your browser sends a Global Privacy Control signal, we treat it as a request to opt out of sale, sharing and targeted advertising for that browser, and our website does not load Google Analytics or turn on Google signals for that browser.
Do Not Track: our website does not load Google Analytics or turn on Google signals when your browser sends a Do Not Track signal.
14. Security, automated tools and children
We use website, account and provider security controls to protect information, but no system guarantees absolute security. Keep account credentials confidential and contact us promptly about suspected unauthorised access. Security and payment tools may automatically assess activity or flag a transaction. Contact us if you believe a check has incorrectly affected you; provider-controlled decisions may also need review by that provider. Applicable rights concerning significant automated decisions are preserved.
Vendor subscriptions and submissions are intended for adults. Children may appear in submitted photographs; the submitter must have appropriate permissions, including parental or guardian permission where required. Do not submit unnecessary identifying details about children. Contact us about a child’s information or any submission made without the required permission so we can assess and address it.
15. Changes to this policy
We will update this policy when our practices or applicable requirements change and revise the date above. We will give additional notice or seek consent where required for a material change. A revised policy does not retrospectively authorise a new use requiring consent. Mandatory privacy rights apply regardless of the law chosen in our commercial terms.