Legal

Privacy Policy

Last updated: July 2026

I am committed to protecting your personal data. This privacy policy explains how personal information is collected, used and looked after when you enquire about or buy wedding stationery, purchase a wedding website, use a Love & Letters guest website, or browse this marketing site.

1. Who Is Responsible for Your Data

Love & Letters, owned by Georgina Healey, is the data controller responsible for personal data processed in connection with this marketing website, stationery services, wedding website products, and related enquiries and support.

  • Contact email: info@loveandletters.uk

2. The Data I Collect

Depending on how you use Love & Letters, I may collect:

  • Your name, your partner’s name, email address, phone number (if you provide it), and wedding date.
  • Enquiry messages and details about stationery or website services you are interested in.
  • Delivery and billing addresses for stationery orders.
  • Personal details needed for stationery (for example venue names, guest names for place cards, invitations or seating charts).
  • For wedding websites: account details you set during setup, wedding content you add (venues, photos, wording, schedule, accommodation, gift registry links), guest list information you upload, and RSVP replies from your guests (including attendance, meal choices and dietary or accessibility notes where collected).
  • Technical information such as browser type, device information, and cookies or similar technologies needed for the site to work or used for analytics where allowed.

3. How I Collect Your Data

I collect information when you:

  • Fill out the enquiry form on this website.
  • Email or message me directly.
  • Purchase a wedding website through Stripe checkout.
  • Create or manage a couple admin account on your wedding website.
  • Upload guest details or edit wedding content in your admin area.
  • As a guest, view a password-protected wedding website or submit an RSVP.
  • Browse this marketing website (see cookies and analytics below).

4. Lawful Bases for Processing

Under UK GDPR, I only process personal data where I have a lawful basis. Depending on the activity, this may include:

Responding to enquiries

Legitimate interests, and/or steps taken at your request before entering a contract.

Creating and delivering stationery

Performance of a contract with you.

Providing and hosting wedding websites

Performance of a contract with you.

Processing wedding website payments

Performance of a contract, and legal obligation where payment records must be kept.

Keeping tax and accounting records

Legal obligation.

Website analytics

Consent, where analytics cookies or similar technologies require it.

Guest lists, RSVPs and related wedding-website guest information

Performance of a contract with the couple, and legitimate interests in operating the website service they have purchased. Couples decide what guest information is collected on their site.

Essential login cookies on wedding websites

Legitimate interests / necessary for providing the requested service securely.

5. How I Use Your Data

I use your information to:

  • Respond to enquiries and arrange consultations or quotes.
  • Design, print and deliver wedding stationery.
  • Provide, host and support wedding websites (including RSVP and admin features).
  • Process website payments and related order fulfilment.
  • Send service emails related to enquiries, purchases or your website (for example enquiry confirmations).
  • Keep business records and meet UK tax and legal obligations.
  • Improve this website through analytics where you have consented where required.

I will not sell your personal information. I will only send marketing communications where permitted by law and where you have provided consent where required.

6. Wedding Websites, Guests and Sensitive Information

Wedding websites are provided for couples to share details with their guests. In that context:

  • Couples control the content on their site and the guest information they choose to upload or collect.
  • Guests access the site with a password set by the couple, and may submit RSVP information the couple has chosen to collect.
  • I host and process that data so the website, admin tools and RSVP features can work.
  • Depending on the circumstances, Love & Letters may act as a processor when providing website services to couples, while the couple remains responsible for deciding what guest information is collected and for telling guests how it will be used for their wedding.
  • Couples are responsible for only uploading guest details they are allowed to share, and for providing any notices their guests need.
  • Admin and guest login sessions use a secure cookie so access can work while using the site.

Dietary requirements and similar details

Some information provided through RSVPs, such as dietary requirements or accessibility needs, may include sensitive information (including information that could relate to health). Where this applies, it is processed only to provide the wedding website or RSVP service the couple has requested, and is handled with appropriate care and access controls.

If you are a guest and have questions about an RSVP or guest list entry, please contact the couple first. You can also contact me using the details below.

7. Cookies and Similar Technologies

This marketing website and wedding websites use cookies and similar technologies as follows.

Essential cookies

Wedding websites use essential cookies for couple and guest login so the service can work securely. These are not used for marketing.

Analytics cookies (Google Analytics / GA4)

This marketing website may use Google Analytics to understand how visitors use the site. Analytics cookies are only placed if you click “Accept” on the cookie banner. Provider: Google. Purpose: site measurement and improvement. Duration: according to Google’s cookie settings for the tags in use.

If you do not accept analytics

If you do not consent to analytics cookies, Google Analytics may still send limited cookieless measurement signals where configured. These signals are used only for privacy-preserving measurement and are not used to identify you.

You can change your browser settings to block or delete cookies. Blocking essential cookies may stop wedding website login from working.

8. Sharing and Storing Your Information

I only share or store personal data with trusted service providers needed to run Love & Letters. Key providers include:

Supabase (processor)

Stores wedding website content, guest lists, RSVPs, images and related account data so websites can be hosted and managed. See Supabase’s privacy information at https://supabase.com/privacy

Resend (processor)

Sends enquiry form messages and related confirmation emails. See https://resend.com/legal/privacy-policy

Stripe (independent controller for payment data)

Processes wedding website purchases. Card details are handled by Stripe and are never stored on Love & Letters servers. Stripe acts as an independent controller for payment information it processes. See https://stripe.com/gb/privacy

Google (stationery files and analytics)

Stationery project details and guest lists you send for printing may be stored in Google Drive / Google Sheets while I fulfil your order. Google Analytics may be used on this marketing site as described above. See https://policies.google.com/privacy

Delivery companies

For stationery orders, I share your name and address with courier or postal services to ship your order.

Banking services

Stationery invoices may be paid by bank transfer. I do not see, handle or store your bank account details.

9. International Transfers

Some service providers (including Supabase, Stripe, Google, Resend and Google Analytics) may process personal data outside the UK.

Where this occurs, appropriate safeguards are used, such as UK International Data Transfer Agreements or other UK-approved transfer mechanisms, as provided by those suppliers.

10. Data Retention

I keep personal data only for as long as needed to provide my services, maintain business records, provide customer support, and meet legal obligations.

  • Tax and accounting records are normally kept for up to 6 years where required for UK tax purposes.
  • Client project information, including design notes, order details and communication records, may be retained after completion to help with customer support, future enquiries, reorders and business records.
  • Wedding websites stay live through your wedding and for 3 months afterwards. After that the website is archived and is no longer publicly available. The guest information it holds (such as guest lists and RSVP details) is then kept for one month, so it can be restored if needed, and is permanently deleted after that unless you have asked us to keep the site live for longer. You can request deletion sooner at any time.
  • Guest information collected for stationery or wedding websites, such as guest lists, addresses, dietary requirements and RSVP details, is only kept for as long as needed to provide the service and is deleted when no longer required.
  • Enquiry emails are kept as normal business correspondence for as long as needed to manage your enquiry and related records.

11. Client Responsibilities and Data Accuracy

Accuracy

You are responsible for ensuring spelling, titles and other details you provide (including guest lists and wedding website content) are accurate.

Guest information

By providing guest data for stationery, or by uploading guest details / collecting RSVPs on a wedding website, you confirm you have a lawful basis to share that information with Love & Letters and with the tools used to deliver your wedding.

12. Your Rights

Under UK data protection law, you may have the right to:

  • Access the personal data I hold about you.
  • Ask for inaccurate personal data to be corrected (rectification).
  • Ask for personal data to be erased in certain circumstances.
  • Ask for processing to be restricted in certain circumstances.
  • Object to certain processing.
  • Receive personal data in a portable format where applicable (data portability).
  • Withdraw consent where processing is based on consent (this does not affect processing already carried out).
  • Complain to the Information Commissioner’s Office (ICO) if you believe your data has been handled incorrectly: https://ico.org.uk

You can make a request by contacting me at the email below. Guests may also contact the couple who manages the wedding website. I may need to verify your identity before responding.

13. Contact Me

If you have any questions or concerns about how your data is handled, please contact: