WHO WE ARE

Saying I Do is a professional wedding planning service and we take our responsibilities to protect your privacy very seriously and recognise our responsibility to handle, manage and secure your data appropriately and legally. We operate in compliance with the European General Data Protection Regulation (GDPR) and Data Protection Act 2018 (UK).

Our website address is: https://www.sayingido.co.uk, and Saying I Do is the Data Controller for the personal data we collect about our customers, prospective customers, and those enquiring about our products and services.

YOUR RIGHTS

You have the following rights regarding your privacy and your personal data:

  • To be informed and understand how your data will be used, secured and managed.
  • To access your personal data we hold about you and understand how we process it.
  • To have your data kept accurate and up to date and to be disposed of securely when no longer required.
  • In some circumstances, restrict our processing of your data, and or to request we erase your personal data where this is appropriate.

To object to:

  • our processing or withdraw previously given consent.
  • marketing
  • our profiling of you and your data and automated decision making.

Not all rights will apply to all processing, however if you want to exercise any of these rights, please just contact us.

If you have concerns or a complaint about how we handle your data please contact us and we will try to resolve the issue. If you remain unhappy with how we have resolved your concern or complaint you have the right to contact the Information Commissioner’s Office for an independent review.

CHANGES TO THIS PRIVACY NOTICE

We keep our privacy notice under regular review. This privacy notice was last updated on 4th June 2020.

INFORMATION SECURITY

At Saying I Do we take security seriously and are committed to information security best practice. Saying I Do will store, process and transmit (when necessary) your information securely, we will do this using encryption and recognised appropriate security controls. When no longer required we will dispose of your data in a secure manner using recognised deletion and sanitisation techniques, cross cut shredding or appropriately vetted disposal contractors. If you have particular security requirements, please contact us to discuss how we can support you.

RETENTION

Data about customers: duration of your relationship with us, then 7 years.

Financial data: is kept for a minimum 7 years or if it relates to a customer then the above retention will apply. Further detail on specific retention periods can be provided on request.

THIRD PARTIES

We will not transfer your personal data to third parties for their use or purpose without your permission, except in the following circumstances:

  • If required to by law or court order.
  • If you do not pay your bills, we may choose to engage a third party to recover any money you owe us.
  • However, we do have a small number of companies providing services to us and they may process your data on our behalf. These third parties may include: our website hosting services, website analytics and profiling providers, relevant suppliers to fulfil your order.

If you have any questions about the third-party companies we use, please contact us. 

VISITORS TO OUR WEBSITE

WHAT WE HOLD

We generate log files from various servers: this will include an IP address assigned to you or, more likely, to someone who provides you with Internet access.

If you request information via our website contact form we will gather your name and contact details, so we can respond to you, you can of course opt out at any time by letting us know.

In order to more appropriately tailor our marketing to you we may profile your preferences and where you visit on our website, you can request to opt out of this if you require.

USING YOUR INFORMATION

DEALING WITH ENQUIRIES

If you have requested information via our website e.g. our contact form, we may also use your contact details to inform you of related products or services you may be interested in, however you can opt out at any time. We keep a record of enquiries received, to help us plan our business strategy and check that we are offering what potential clients want.

GDPR LEGAL BASIS FOR PROCESSING:

  • 6(a) Consent if you have asked us to provide you with information on a product and service and provided us with your details to enable us or one or more of our retailers to contact you.
  • 6(f) Legitimate interests of Saying I Do to generate business by maintaining contacts, generating quotations and communicating with prospective clients regarding their requirements. If you have previously been a customer of Saying I Do or have requested information regarding our products or services, we may send you information about related products and services we offer (marketing); however, you can object to this at any time and we will add you to our suppression list and cease sending you such marketing communications.

SECURITY AND PERFORMANCE

Saying I Do uses a third-party service to help maintain the security and performance of our website, as well as to determine website visitor behaviour and help us plan our business strategy, this helps us tailor our services and ensure they are relevant to our prospective client’s needs. To deliver this service it processes the IP addresses of visitors to the Saying I Do website.

USE OF COOKIES

In order to more appropriately tailor our marketing to you we may profile your preferences and where you visit on our website, you can request to opt out of this if you require.

When someone visits www.sayingido.co.uk we use a third party service, Google Analytics, to collect standard internet log information and details of visitor behaviour patterns. We do this to find out things such as the number of visitors to the various parts of the site. This information is only processed in a way which does not identify anyone. We do not make, and do not allow Google to make, any attempt to find out the identities of those visiting our website.

GDPR LEGAL BASIS FOR PROCESSING:

  • 6(f): Legitimate interests where it is in the business interests of Saying I Do to secure our IT infrastructure, improve the services we offer and gather data to aid business strategy planning.

We also rely on this to process your data for profiling purposes in order to record your preferences and movements on our websites in order to better tailor our marketing.

CUSTOMERS – THE DATA WE HOLD

As our customer or potential customer we will hold the following information about you:

  • Your name and contact information
  • Information about your enquiries, including communications with you
  • Information and documents about orders or enquiries, including communications with you
  • Billing and payment information
  • Your preferences and pages of our websites you have visited.

We also generate log files from various servers: this will include an IP address assigned to you or, more likely, to someone who provides you with Internet access.

BUSINESS CONTACTS AND SUPPLIERS – THE DATA WE HOLD

As a business contact or supplier, we will hold the following information about you:

  • Names, job roles and contact information of you and your employees
  • Information about your business activities and in some cases necessary information about your clients/customers

USING YOUR INFORMATION

We use the information we hold about you to provide the best service we can, to communicate with you regarding products or services we are providing or to inform you of other related products or services you may be interested in. We also use your information to bill you and keep track of payments.

GDPR Legal Basis for processing:

  • 6(a) Consent if you have asked us to provide you with information regarding our products and service via our website.
  • 6(b) Contractual requirement to fulfil our contracts with you and communicate with you regarding contracts.
  • Art 6(f) Legitimate interests of Saying I Do to generate business by maintaining contact, generating quotations / proposals and making you aware of other related products and services you may be interested in (marketing). However, you can object to this at any time and we will add you to our suppression list and cease sending you such marketing communications, you may still receive service communications. If the need arises we may also rely on legitimate interests for the recovery of unpaid debts.

PROVIDING ADVICE AND INFORMATION REGARDING OUR PRODUCTS AND SERVICES

We use the information we hold about you and/or your business to provide the best service we can, to communicate with you regarding services you may be interested in and to inform you of other related products or services you may be interested in.

In order to more appropriately tailor our marketing to you we may profile your preferences and where you visit on our website, you can request to opt out of this if you require.

GDPR LEGAL BASIS FOR PROCESSING

  • 6(a) Consent if you have asked us to provide you with information regarding our products and services
  • 6(f) Legitimate interests of Saying I Do to generate business by maintaining contacts, generating quotations/proposals and communicating with prospective customers regarding their requirements. If you have previously been a customer of the Saying I Do or have requested information about our products or services, we may send you information about related products and services we offer (marketing); however, you can opt out at any time and we will add you to our suppression list and cease sending you such marketing communications.

We also rely on this to process your data for profiling purposes in order to record your preferences and movements on our websites in order to better tailor our marketing.

DEALING WITH ENQUIRIES

If you give us a call or make contact by email, we will follow up on your enquiry and see if there is a way in which we can help you. We keep a record of enquiries received, to help us plan our business strategy and check that we are offering what potential customers want.

GDPR LEGAL BASIS FOR PROCESSING

  • Art 6(f) Legitimate interests of Saying I Do to generate business by maintaining contacts, generating quotations/proposals and communicating with prospective customers regarding their requirements. If you have previously requested information we may send you information about related products and services we offer, however you can object to this at any time and we will add you to our suppression list and cease sending you such marketing communications.

CONTACT INFORMATION

To contact us regarding any of the information enclosed in this policy, please email hello@sayingido.co.uk.