Privacy Policy

1. Who we are

Wedly Pro is the controller for account, billing, support, and website analytics data under UK data protection law.

For supplier-entered client records (for example client names, event details, and notes), the supplier is the controller and Wedly Pro acts as processor on the supplier's instructions.

Contact: Support page

2. Information we collect

• Account data: name, email address, business name (if provided), and login account information.
• Client and booking data entered by suppliers: client names, contact information, event dates, notes, invoices, and booking records.
• Supplier payment details used in invoices: account name, sort code, account number, optional IBAN/BIC, and payment reference details.
• Website and product usage data: IP address, browser/device information, page and feature usage, and diagnostics/performance data.
• Contact/support data: name, email, message content, and any additional details provided in support requests.

3. How we use information

• Provide and maintain Wedly Pro services.
• Enable booking management, document generation, and invoicing.
• Display supplier payment instructions on invoices.
• Notify suppliers of important account or payment-detail changes.
• Provide support, troubleshoot issues, and improve product performance.
• Detect, prevent, and investigate fraud or unauthorised access.
• Send essential service and security communications.

We do not sell personal data.

We do not use personal data for third-party advertising.

5. Data processors and infrastructure

Wedly Pro uses service providers to operate the platform, including:

• Supabase (database and storage infrastructure)
• Vercel (website hosting and analytics infrastructure)
• Resend (transactional email delivery)

These providers process data under contractual terms and only for service delivery purposes.

6. International data transfers

Some providers may process data outside the UK. Where transfers occur, we use appropriate safeguards such as the UK International Data Transfer Agreement (IDTA) or the UK Addendum to standard contractual clauses, as applicable.

7. Data storage and security

We implement technical and organisational safeguards designed to protect personal data from unauthorised access, alteration, disclosure, and destruction.

Access to sensitive supplier payment details is restricted to authenticated supplier accounts. No system can be guaranteed completely secure, and users are responsible for protecting account credentials.

If we identify a personal data breach, we respond in line with UK GDPR requirements, including regulator and user notification where legally required.

10. Your rights

Under UK data protection law, you may request access, correction, deletion, restriction, portability, or objection to certain processing.

To exercise rights, contact support. We aim to respond within one month and may request identity verification.

You may also lodge a complaint with the UK Information Commissioner's Office (ICO).