Privacy Policy

1. Introduction

This Privacy Policy describes how Wedly Pte. Ltd. (UEN: 202605271C) ("Wedly", "we", "us", or "our") collects, uses, discloses, and protects personal data in connection with the Wedly platform at wedly.sg and all related services (the "Platform").

This Privacy Policy applies to all users of the Platform, including wedding photographers and videographers ("Vendors") and couples seeking wedding services ("Couples").

We are committed to complying with the Personal Data Protection Act 2012 ("PDPA") of Singapore and protecting your personal data. By using the Platform, you consent to the collection, use, and disclosure of your personal data as described in this Privacy Policy.

2. Data Protection Officer

We have appointed a Data Protection Officer ("DPO") to oversee our compliance with the PDPA and to address any questions or concerns you may have about our data protection practices.

3. Personal Data We Collect

3.1 Data Collected from Couples

When you register and use the Platform as a Couple, we may collect the following personal data:

• Name and email address (provided during registration via Google authentication or email sign-up).
• Google account information (if registering via Google authentication): name, email address, and profile picture as authorised by you during the Google sign-in process.
• Mobile phone number (provided when submitting a Booking Request).
• Payment card details: collected and processed by Stripe, our payment processor. Wedly does not store, access, or retain your full card details. Please refer to Stripe's privacy policy at stripe.com/privacy for information on how Stripe handles your payment data.
• Booking and transaction history on the Platform.
• Messages sent through the Platform's messaging feature.

3.2 Data Collected from Vendors

When you register and use the Platform as a Vendor, we may collect the following personal data:

• Business name, contact name, and email address.
• Portfolio content, including photographs and videos uploaded to your Storefront.
• Package details, pricing, and availability information.
• Google Calendar data: if you choose to sync your Google Calendar, we access calendar event titles and dates solely to assist you in managing your availability on the Platform. We do not access, store, or process any other calendar event details (such as descriptions, attendees, or locations).
• Stripe Connected Account information: Stripe collects and processes your identity verification (KYC), business, and bank account details during the Stripe Connect onboarding process. Wedly does not collect or store this information. Please refer to Stripe's privacy policy at stripe.com/privacy.
• Messages sent through the Platform's messaging feature.

3.3 Data Collected Automatically

When you access the Platform, we may automatically collect certain technical data, including:

• IP address and browser type.
• Device information and operating system.
• Pages visited, time spent on the Platform, and other usage data.
• Cookies and similar tracking technologies (see Section 10 below).

4. How We Use Your Personal Data

We use the personal data we collect for the following purposes:

• To operate the Platform: creating and managing accounts, facilitating communication between Vendors and Couples, processing Booking Requests, and enabling payment transactions through Stripe.
• To share contact information:upon a Confirmed Booking, we share the Couple's name, email address, and mobile phone number with the Vendor to facilitate direct communication regarding the wedding services.
• To process payments: facilitating Deposit charges, Platform Fee deductions, and Vendor payouts through Stripe Connect.
• To send notifications: sending transactional email notifications related to Booking Requests, confirmations, rejections, and other Platform activities via our email service provider, Resend.
• To manage availability: using Google Calendar data (where authorised by the Vendor) to assist Vendors in managing their availability on the Platform.
• To improve the Platform:analysing usage data and trends to improve the Platform's features, functionality, and user experience.
• To comply with legal obligations: responding to legal requests and preventing fraud or other illegal activities.

5. Disclosure of Personal Data

We may disclose your personal data to the following parties:

• Vendors (from Couples):Upon a Confirmed Booking, we share the Couple's name, email address, and mobile phone number with the relevant Vendor.
• Stripe: Payment card details, transaction information, and Vendor bank account and identity information are processed by Stripe Inc. and its affiliates under their own privacy policy.
• Google:If you use Google authentication or Google Calendar sync, certain data is shared with Google in accordance with Google's privacy policy.
• Resend: Email addresses are shared with Resend, our email service provider, for the purpose of sending Platform notifications.
• Analytics providers: We use Google Analytics and Mixpanel to collect and analyse aggregated and anonymised usage data to improve the Platform.
• Legal and regulatory authorities: We may disclose personal data if required to do so by law, regulation, legal process, or governmental request.

We do not sell your personal data to any third party.

6. Google User Data

Wedly accesses Google user data through the following integrations:

6.1 Google Authentication

Couples and Vendors may use Google sign-in to create an account. We access your Google account name, email address, and profile picture solely for account creation and authentication purposes.

6.2 Google Calendar

Vendors may optionally connect their Google Calendar to the Platform. We access calendar event titles and dates solely to help Vendors manage their availability. We do not access event descriptions, attendee lists, locations, or any other calendar data beyond what is necessary for availability management.

6.3 Google API Services User Data Policy

Our use and transfer of information received from Google APIs adheres to the Google API Services User Data Policy, including the Limited Use requirements. We only use Google user data for the purposes described in this Privacy Policy and do not use it for serving advertisements, transferring or selling to third parties, or any other purpose not explicitly authorised by the user.

7. Data Retention

We retain personal data for as long as it is necessary to fulfil the purposes for which it was collected, or as required by applicable law. Specifically:

• Account data: retained for as long as your account is active on the Platform.
• Mobile phone numbers:retained for as long as the Couple's account is active to facilitate future Booking Requests without requiring re-entry.
• Messages: chat history between Couples and Vendors is retained on the Platform for as long as both accounts remain active.
• Transaction records: retained for a minimum of 5 years in accordance with applicable tax and accounting requirements in Singapore.
• Portfolio content:Vendor-uploaded photographs and videos are retained for as long as the Vendor's account is active.

When personal data is no longer needed, we will take reasonable steps to delete or anonymise it.

8. Data Security

We take reasonable security measures to protect your personal data against unauthorised access, collection, use, disclosure, copying, modification, disposal, or similar risks. These measures include:

• Encryption of data at rest through our database hosting provider (Supabase).
• Encryption of data in transit using HTTPS/TLS.
• Access controls to limit who can access personal data to authorised personnel only.
• Payment card details are processed and stored exclusively by Stripe and are never stored on our servers.

While we take reasonable precautions, no method of transmission over the internet or electronic storage is completely secure. We cannot guarantee the absolute security of your personal data.

9. Your Rights Under the PDPA

Under the PDPA, you have the following rights in relation to your personal data:

• Right of Access: You may request access to the personal data we hold about you.
• Right of Correction: You may request the correction of any inaccurate or incomplete personal data.
• Right of Withdrawal: You may withdraw your consent for the collection, use, or disclosure of your personal data at any time, subject to legal and contractual restrictions. Please note that withdrawing consent may affect your ability to use certain features of the Platform.

To exercise any of these rights, please contact our Data Protection Officer at jemin@wedly.sg. We will respond to your request within 30 days.

Please note that Wedly does not currently offer an account deletion feature. If you wish to have your account and associated personal data deleted, please contact our Data Protection Officer, and we will process your request in accordance with the PDPA.

10. Cookies and Tracking Technologies

10.1 What Are Cookies

Cookies are small text files placed on your device when you visit a website. They help the website recognise your device and remember certain information about your visit.

10.2 Cookies We Use

We use the following types of cookies:

• Essential cookies: These are necessary for the operation of the Platform, including session and authentication cookies that keep you logged in as you navigate the Platform. These cannot be disabled.
• Payment cookies:Stripe sets cookies on the Platform for fraud detection and payment processing purposes. These are necessary for the secure processing of payments and cannot be disabled. Please refer to Stripe's cookie policy for more information.
• Analytics cookies: We use Google Analytics and Mixpanel to collect aggregated and anonymised usage data to understand how users interact with the Platform and to improve our services. These cookies can be disabled through your browser settings.

10.3 Managing Cookies

You can control and manage cookies through your browser settings. Please note that disabling essential cookies may affect the functionality of the Platform. Disabling analytics cookies will not affect your ability to use the Platform.

11. Third-Party Services

The Platform integrates with the following third-party services, each of which has its own privacy policy governing the collection and use of your data:

• Stripe (stripe.com/privacy): Payment processing, fraud detection, and Vendor identity verification.
• Google (policies.google.com/privacy): Authentication and Calendar integration.
• Resend (resend.com/legal/privacy-policy): Email notification delivery.
• Supabase (supabase.com/privacy): Database hosting and file storage.
• Google Analytics (policies.google.com/privacy): Website analytics.
• Mixpanel (mixpanel.com/legal/privacy-policy): Product analytics.

We encourage you to review the privacy policies of these third-party services to understand how they handle your data.

12. International Data Transfers

Your personal data may be transferred to and processed in countries outside of Singapore by our third-party service providers (such as Stripe, Google, Resend, and analytics providers). Where such transfers occur, we take reasonable steps to ensure that your personal data is protected in accordance with applicable data protection laws and the requirements of the PDPA.

13. Children's Data

The Platform is intended for users who are at least 18 years of age. We do not knowingly collect personal data from individuals under 18. If we become aware that we have collected personal data from a person under 18, we will take steps to delete such data promptly.

14. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technologies, legal requirements, or other factors. The updated Privacy Policy will be posted on the Platform with a revised "Last Updated" date. We will use reasonable efforts to notify you of material changes via email or Platform notification. Your continued use of the Platform after any changes constitutes your acceptance of the updated Privacy Policy.

15. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or our data protection practices, please contact us at: