Legal
Data Processing Agreement
Version 1.0 · 3 September 2026 · Forms part of the Terms of Service
1. Roles
When you put couple and enquiry data into Wedding Flow, you are the data controller and Wedding Flow Ltd is the data processor. We process that data only on your documented instructions — principally to store it, to send communications you configure, and to produce the reporting you ask for.
2. Subject matter and duration
The subject matter is the couple, enquiry, wedding and communication data your team records in the service. Processing lasts for the life of your subscription plus the retention period in our Privacy Policy (30 days after cancellation), after which the data is deleted automatically.
3. Our obligations
We keep personal data confidential, restrict access to team members who need it to support you, encrypt data in transit and at rest, maintain audit logs of changes, and operate role-based access control inside your workspace. We support you in responding to data-subject requests: workspace administrators can export or erase an individual's data from Settings → Privacy & data, and we will assist with anything that cannot be done self-service.
4. Sub-processors
We use the sub-processors listed on our Sub-processors page, each under a written agreement imposing equivalent obligations. We will notify you of any intended addition or replacement of a sub-processor and you may object on reasonable grounds.
5. Security incidents
We monitor the platform continuously and will notify you without undue delay — and in any event within 48 hours — after becoming aware of a personal-data breach affecting your data, with the information you need to meet your own notification obligations.
6. Transfers and assistance
Data is hosted in secure cloud infrastructure; where any transfer outside the UK/EEA occurs, it is protected by an appropriate transfer mechanism such as the UK International Data Transfer Addendum or EU Standard Contractual Clauses. We will provide reasonable assistance with data-protection impact assessments and consultations with supervisory authorities.
7. Deletion
On expiry of the retention period we delete workspace data automatically, including backups as they age out. You can export your data at any time while your subscription is active.
8. Contact
Data-protection questions can be sent to hello@weddingflow.co.uk. A printable copy of this agreement is available on request.