Your guests trusted youwith this, not us

Version 1 · 6 August 2026

Who we are

vowto is a trading name of JL Dennis Ltd, whose full details are on the terms page. For anything about your information, write to hello@vowto.co.

Two different relationships

This is the part worth understanding, because it decides who you ask for what.

You, as our customer

We decide what we hold about you and why, so for your own details we are the controller and this policy is the whole answer.

Your guests

You decide who goes on your guest list and what you ask them. Their details are yours: you are the controller, and we hold them on your behalf as your processor. We do not decide what to collect, we do not use it for anything of our own, and we never market to your guests. If a guest asks to see or delete what is held about them, that request is properly yours to answer, and we will help you do it.

What we hold about you

• Your names, as you want them to appear on your site
• Your email address, which becomes your login and receives your welcome message
• Your wedding date and roughly where the wedding is
• The web address you chose
• Confirmation from Stripe that you paid, and a reference for it
• Correspondence, if you write to us

We never see your card details. Payment happens on Stripe's own checkout; what reaches us is that a payment succeeded, and an email address to send your site to.

What your site holds about your guests

Whatever you put in it, which typically means:

• Names, and which household or party they belong to
• Email addresses and telephone numbers
• Whether they are coming, and to which parts of the weekend
• Dietary requirements and allergies
• Access and medical notes, where you have asked for them
• Messages left in the guestbook, and photographs uploaded

Some of that is what the law calls special category data. An allergy or a medical note says something about a person's health, and a dietary requirement can say something about their religion. It deserves more care than an address, which is why it is kept the way described below, and why we would rather you asked your guests for it plainly and told them where it lives.

Why we hold it

• To do what you paid for. We cannot build and run your site without your names, your date and your email address.
• Because we have to. Records of a sale have to be kept for tax purposes.
• Because it is reasonable. Keeping your site secure, fixing it when it breaks, and writing to you about your own wedding site.

We do not send marketing to guests, ever. We will not add you to a mailing list you did not ask for.

Where it is kept

Four companies touch it besides us, each doing one job:

• Stripe takes the payment, and is the merchant of record for the sale. They hold your payment details; we do not.
• Supabase holds the database your guest list lives in, and the storage your photographs live in. Hosted in the EU.
• Vercel runs the website itself and serves it to your guests. Hosted in North America and central Europe.
• Resend sends the emails, so that an RSVP notification reaches you.

Each is bound to use what they hold only to provide that service. Where any of them processes information outside the UK, it is done under the safeguards UK data protection law requires for international transfers.

How one wedding is kept apart from another

This is worth saying in detail, because it is the question that actually matters when the data includes medical notes.

Every wedding gets its own separate area of the database, and its own separate store for photographs. A site is connected to its own area and cannot reach another's, not because a filter is applied and could be forgotten, but because it is never pointed at anybody else's tables in the first place. Alongside that, every table refuses to be read unless the reader is entitled to it, and everything that writes runs on our own servers rather than in your guests' browsers.

Signing in to a dashboard requires being on that wedding's own list of permitted people, which is set when the site is created and is separate for each couple.

How long we keep it

• Your site and everything in it: until at least twelve months after your wedding, as set out in the terms. We write to you before anything is removed.
• Records of the sale: six years, because tax law requires it.
• Correspondence: two years, then deleted.

If you ask us to delete your site sooner, we will, and it is not recoverable afterwards. That is deliberate, and it is worth saving anything you want to keep first.

Cookies, and what is stored in your browser

Visits to this marketing site are counted with cookieless analytics that cannot identify you. There is nothing personal in that to switch off, which is why you are not asked about it.

We also advertise, and we would like to know which adverts bring people here. That needs one Google advertising cookie, so we ask before setting it. Until you say yes the tag loads with consent refused and puts nothing on your machine: Google is told that a sale happened, without a cookie and without anything that identifies you, and estimates the rest from everybody's behaviour at once. Say no and the site behaves in exactly the same way, and until you answer either way nothing is stored. Your answer is kept in your own browser, and the Cookies link at the foot of any page brings the question back if you change your mind. Nothing here is sold, and no advertiser other than Google is given anything at all.

A wedding site stores one thing in the browser: your sign-in session, so that you are not asked to log in on every page of your own dashboard. It is necessary for the dashboard to work at all, which is why you are not asked to consent to it, and it is readable only by your own site. When you sign out it goes.

Your rights

You can ask us to:

• Show you what we hold about you
• Correct anything wrong
• Delete it, where we do not have to keep it
• Give it to you in a portable form, or send it somewhere else
• Stop or limit what we do with it

Write to hello@vowto.co and we will answer within a month. There is no charge.

If you are a guest at somebody's wedding rather than our customer, ask the couple: the information is theirs, not ours. If you cannot reach them, write to us and we will pass it on.

If you think we have handled your information badly, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would rather you told us first and gave us the chance to put it right.

Changes

If we change this policy we will change the date at the top, and if the change is significant we will email you about it rather than hope you notice.