Privacy Policy

Last updated: 18 May 2025

1. Who we are

Wedshots (“we”, “us”, “our”) is a trading name of Wedshots Ltd, a company registered in England & Wales (Company No. 14999999).

2. What data we collect

Account data - name, e-mail address and for couples and guests who create an account.
Event data - wedding date, venue, and tier selection (Silver/Gold/Platinum).
User‑generated content - photos, videos, captions, guestbook messages and votes uploaded to an event album.
Payment data - billing details handled by Stripe (we never see or store full card numbers).
Device & log data - IP address, browser, time‑stamp and actions (for security & analytics).
Cookies & similar tech - see Section 9.

3. How we use your data

Provide and maintain the Wedshots service and live wall.
Moderate uploads to keep albums safe and family‑friendly.
Process payments and renewals.
Send transactional e‑mails (e.g. upload confirmations, expiry reminders).
Analyse usage to improve performance and reliability.

4. Legal bases (UK GDPR)

Contract - most processing is necessary to fulfil our Terms of Service with the couple who created an event.
Legitimate interests - e.g. fraud prevention, service analytics.
Consent - where required for optional cookies or marketing.
Legal obligation - complying with tax and accounting laws.

5. Who we share data with

We never sell your personal data. We only share it with the following processors under written agreements:

Storj Labs Inc. - encrypted object storage for photos & videos (US/EU nodes).
Stripe Payments UK Ltd - payment processing and VAT calculation.
AWS Rekognition - automated image moderation (blurring nudity, violence, etc.).
Trusted human moderators under NDA (as needed for flagged content).

6. International transfers

Some providers are based outside the UK/EEA. Transfers rely on adequacy decisions or the International Data Transfer Addendum to the EU Standard Contractual Clauses.

7. Storage & retention

Photos and guestbook messages are stored for the period included in the purchased tier:
- Silver - 6 months
- Gold - 12 months
- Platinum - 24 months
Couples may extend storage at any time via paid renewal. Unrenewed albums are permanently deleted 30 days after expiry.
Billing records are kept for 7 years to satisfy HMRC requirements.
Back‑ups are purged on a 30‑day rolling cycle.

8. Security

All uploads are encrypted in transit (TLS 1.3) and at rest (AES‑256). Staff access is gated by SSO and audited. We maintain ISO‑27001‑aligned policies and conduct annual penetration tests.

9. Cookies & tracking

We use a single essential session cookie wedshots_session to keep you logged in. Non‑essential analytics cookies are opt‑in. For a full list see our Cookie Banner.

10. Your rights

You can:

Request a copy of your personal data (subject access request).
Ask us to correct, delete or restrict processing of your data.
Object to processing based on legitimate interests.
Withdraw consent at any time (for cookies/marketing).
Port your data to another service.

To exercise these rights e‑mail privacy@wedshots.com. We respond within 30 days.

11. Changes to this policy

We may update this Privacy Policy from time to time. Material changes will be announced via e‑mail or in‑app notice.

12. Contact

Questions? Reach us at privacy@wedshots.com.