1. Scope
This Privacy Policy explains how [Company legal name] (“EverAfter Live,” “we,” “us,” or “our”) handles personal information when organisers create and manage events, guests upload photos, or anyone visits or uses our service.
The event organiser may make decisions about who is invited and what content appears in an event. Contact the organiser first for event-specific questions or removal requests; you may also contact us.
2. Information we collect
Information you provide
We collect event and partner names, wedding dates when provided, chosen event links, display names, uploaded photos and their metadata, and communications sent to support. Organisers also receive a management key used to control their event.
Information collected automatically
When you use the service, we may collect device and browser details, approximate location derived from IP address, request timestamps, pages or features used, error and performance data, and security logs. We may use cookies, local browser storage, or similar technologies to maintain event access, remember management credentials on a device, prevent abuse, and operate core features.
3. How we use information
We use information to create and operate events; process, store, and display uploads; authenticate event organisers; provide support; maintain reliability and security; detect fraud or misuse; understand and improve service performance; comply with legal obligations; and communicate important service or policy updates.
We do not sell personal information. We do not use private wedding photos for targeted advertising.
4. Legal bases
Where data-protection law requires a legal basis, we rely on performance of our contract, our legitimate interests in operating and securing the service, compliance with legal obligations, and consent where appropriate. You may withdraw consent at any time, without affecting earlier lawful processing.
6. Retention
We keep personal information only as long as reasonably needed for the purposes described above, including to provide active events, meet legal obligations, resolve disputes, and protect the service. Actual event-content retention periods must be inserted here before launch: [Insert event and account retention schedule]. Backups and security logs may persist for a limited additional period.
7. Your rights and choices
Depending on where you live, you may have rights to access, correct, delete, restrict, or object to processing; obtain a portable copy; withdraw consent; or appeal a decision. You may also have the right to complain to a data-protection authority.
Contributors can remove their own photos where that functionality is available. For other requests, email us with enough detail to identify the relevant event and content. We may need to verify your identity and may retain information where required by law.
8. Security
We use reasonable technical and organisational safeguards designed to protect information, including access controls and secure transport. No online service can guarantee absolute security. Keep management keys private and use care when sharing event links.
9. International transfers
Our providers may process information in countries other than your own. Where required, we use recognised safeguards for international transfers, such as contractual protections or adequacy decisions. Specific hosting locations and transfer mechanisms should be confirmed before launch.
10. Children
The service is not directed to children who are below the age at which they may consent to online data processing in their location. Event organisers should supervise children’s participation and obtain any permissions required before uploading images of minors.
11. Changes to this policy
We may update this policy as the service or law changes. We will revise the effective date and provide additional notice when required. Material changes will apply prospectively unless the law permits otherwise.
12. Contact
For privacy questions or requests, email support@everafter.live or write to [Company legal name], [Company address]. If required, add your privacy representative or data protection officer here: [Privacy contact details].