Legal

Privacy Policy

Draft — not yet in force. This document is being prepared ahead of Elysian's commercial launch. It contains placeholders for seller details and is awaiting formal legal review.

Elysian operates from the United Kingdom. We collect only what is needed to run your wedding planning, your invitation and the replies and photographs that come back. This policy explains what that is, who handles it and how to remove it.

Who is responsible

Elysian Wedding Services, trading as Elysian, is operated by Selenge Erdenechimeg, a sole trader established in the United Kingdom.Business address: 16 Grand Union Crescent, London E8 4TR, United Kingdom.Privacy contact: privacy@elywed.com

When a couple enters guest information or asks a guest to submit an RSVP, the couple decides why that guest information is being collected. For that information, Elysian generally processes it on the couple’s instructions to provide the wedding service.

Elysian remains independently responsible for personal data it uses for its own purposes, such as account administration, service security, payments and legal compliance.

Why we use your information

The lawful bases below apply where Elysian decides why personal data is used. Where we process guest information only on a couple’s instructions, the couple is responsible for identifying the lawful basis for that collection.

  • Creating an account and providing Elysian — contract.
  • Running wedding tools and storing settings — contract.
  • Payments and purchase records — contract, and legal obligation where applicable.
  • Fraud prevention, security and abuse prevention — legitimate interests.
  • Necessary service and account emails — contract and/or legitimate interests.
  • Responding to privacy and data-rights requests — legal obligation.
  • Basic service analytics and service protection — legitimate interests, subject to applicable cookie and privacy rules.

What we store

  • Your account: name, email address and securely managed authentication credentials.
  • Your wedding: names, date, times, venue, wording and design.
  • Your planning records: Planning Journal tasks, Budget entries, supplier and contract details, seating arrangements and day-of timeline events.
  • Your guests: the names, emails and phone numbers you choose to add.
  • Replies: attendance, party size and any dietary, accommodation or song details your guests submit through an invitation or a standalone RSVP link.
  • Media: photographs uploaded by you or, with Wedding Day, by your guests through Photo Studio, along with any caption or name a guest chooses to add.
  • Gift List: the registry and cash-gift links you add. We never see gift transactions.
  • Purchases: which pass was bought for which wedding, when, the amount, an identifier from our payment processor, and the billing country, region and postal code from that payment. We do not store your street address.
  • Service logs and anonymous usage counts for your public pages: views, unique visitors, RSVP clicks and QR scans. No IP addresses, names or device fingerprints are stored for those counts.

Payments

Payments are processed by Stripe. Card details are entered on Stripe’s own hosted checkout — Elysian never receives or stores your full card number, expiry or security code. We receive confirmation that a payment succeeded, the amount, and identifiers we use to record the purchase and handle refunds.

Who processes data for us

  • Lovable — hosting, delivery of the website and app, technical error reporting, and the service and guest emails sent on our behalf.
  • Supabase — the database, sign-in system and file storage that hold your wedding data and uploaded photographs.
  • Stripe — payments, refunds and disputes. Card details are entered directly on Stripe’s hosted checkout and Elysian never receives your full card details.
  • Google — only if you choose to sign in with Google. Nothing is shared with Google simply by visiting our pages.

Some service providers may process personal data outside the United Kingdom. Where this happens, we use providers that maintain appropriate safeguards for international transfers as required by applicable data protection law.

Who can see your data

Access is enforced in the database itself. Only you can read your private wedding, planning records, guest list, replies and gallery.

Visitors holding a published invitation or RSVP link can view the relevant public page and submit an RSVP where enabled. Visitors to a Gift List page can view the registry or gift links you chose to publish. Guest Photo Studio links lead only to the guest-upload experience. Public visitors cannot see your private guest list, other guests’ replies or your private Photo Studio gallery.

Sensitive information in replies

Some information a couple chooses to ask for, such as dietary requirements, may reveal sensitive personal information. Couples should only ask guests for information they genuinely need and must have an appropriate lawful basis for collecting it. Elysian processes those responses only to provide the wedding tools requested by the couple.

How long we keep information

  • Wedding and content data — available according to your paid-access period, with a recovery and export period where applicable, then deleted in line with our retention practice. Paid access runs through your wedding date and for 12 months afterwards, following any change of wedding date, with a 90-day recovery period after that. We do not promise indefinite hosting, so please keep your own copies of anything precious.
  • Payment and accounting records — may be retained for tax, accounting and other legal obligations.
  • Support correspondence — retained for a reasonable support and legal period.
  • Security and system logs — retained for a limited security and operational period.
  • Deleted content — may persist temporarily in backups until the normal backup lifecycle removes it.

Your rights

You can export everything we hold about your wedding as a JSON file, and delete your wedding along with every guest, reply, photograph and design version, at any time from Settings. Deletion removes the wedding from the active service and cannot be undone through your account, though limited copies may remain temporarily in backups.

Under UK data protection law you also have the right to access, correct, delete or restrict the use of your personal data, to object to certain processing, to data portability, and — where processing actually relies on consent — to withdraw that consent. You can complain to the Information Commissioner’s Office.

Contact

Write to privacy@elywed.com for any question about your data, including access, deletion and export requests. For purchases, payments or refunds, write to weddings@elywed.com. We aim to respond within 5 business days.