Privacy policy

1. Who we are

Flip & Flow is run by Spun Ltd, a UK company. You can reach us at hello@flipandflow.co.uk.

For your account and how you use the site, we're the controller: we decide how that information is used. For guest details that couples add, the couple is the controller and we look after the details for them (we're their processor).

2. What we keep

• Your account: your name and email address, and your password, stored scrambled so nobody can read it. If you sign in with Google, we keep the link to your Google account, not your Google password.
• Your events: everything you add, such as dates, venues, your schedule, budget, suppliers and payments, website words and photos, to-dos, and links to documents you keep elsewhere. We also record who did what in each event (its activity list), so everyone planning can see it.
• Your guests: names, children's ages, email addresses, sides and tags, replies, meal choices, dietary needs, seating, the gifts they've given you, and any message they leave you.
• Payments: what you bought and for which event, how much and the VAT in it, your billing country, the email address for your receipt, when you agreed to have it straight away, and Stripe's references for the payment. Your card details go straight to Stripe: we never see or keep them.
• Messages to us: what you send through the contact form, with your name and email so we can reply, and our own short note on where it's got to.
• Signing in: while you're signed in, we keep the internet address (IP address) and browser type you signed in from, so you stay signed in and we can spot misuse.

3. Why we use it

• To run the service you asked for (our contract with you): showing your plans to you and the people you invite, sending the emails you ask us to, and replying when you get in touch.
• To keep it safe and working (our legitimate interests): limiting repeated sign-in attempts, stopping spam, and finding and fixing problems.
• Because the law says so, such as keeping records of payments for tax.

We don't use your information for advertising, we don't sell it, and we don't make automated decisions about you.

4. If you're a guest

The couple added your details, and they decide how they're used. To see, change or remove what they hold about you, ask them first. If you can't, contact us at hello@flipandflow.co.uk and we'll help.

Dietary needs can say something about your health, so the reply page asks for them in one box, only for people who are coming. Dietary needs and your messages to the couple are deleted three months after the wedding, by ourselves. Your name and whether you came are kept, so the couple can write their thank-you notes, until they delete their event.

Your private reply link only shows your own invitation. Nobody else's replies are shown to you.

5. Who sees it

• People you plan with: everyone you invite to an event can see it. Viewers can look but not change anything.
• Guests and the public: only what you choose to publish. Your website can have a password, and each guest's reply page is private to their invitation.
• Us, to run the site and help you: our admin pages show your name and email, when you joined and last signed in, your events' names and dates, which tabs they use, how many guests they have, what you've paid, and your messages to us. They don't show what's in your plans, such as your guests' names, dietary needs, notes, budget or website words. We only look at those if you ask us to help with something in your event, and then only what we need to. Anything we change on your account, such as turning on early access to new features, is recorded with who did it and when.
• Companies that help us run the site, only for that purpose and under contract:

Stripe also uses some payment details for its own purposes, such as preventing fraud and meeting its legal duties, as explained in Stripe's privacy policy. If you dispute a payment with your bank, we share the details of that purchase with Stripe and your bank to answer it.

We keep your information in the UK. If one of these companies handles it elsewhere, it's protected by the safeguards UK law requires. We'd only share it with anyone else if the law made us.

6. How long we keep it

• Your account and events: until you delete them. Deleting an event removes everything in it, photos included. Deleting your account removes it and any events only you are on.
• Dietary needs and guests' messages: three months after the wedding.
• Payment records: six years, as UK tax law requires. They stay even if you delete the event or your account, but only the payment's own details (what was bought, the amount, the event's name and the receipt email), not anything from the event itself.
• Signed-in sessions: 60 days, or until you sign out.
• Trying the demo: your copy of the demo wedding is deleted after 4 hours, or as soon as you quit the demo.
• Messages to us: until we've dealt with them and no longer need them.
• Backups: deleted information can stay in our backups for a short while before they're replaced.

7. Your rights

You can ask us for a copy of what we hold about you, to correct it, to delete it, or to stop or limit how we use it. Much of this you can do yourself: change anything in your events, download your guest list, or use Delete my account on My events.

For anything else, email hello@flipandflow.co.uk. We'll reply within a month. If you're unhappy with how we've handled your information, you can complain to the Information Commissioner's Office, though we'd like the chance to put it right first.

8. Cookies

We only use cookies that the site needs to work, so there's nothing to accept or turn off. We don't use advertising or tracking cookies.

Shared schedules also remember, on your own device only, whose schedule you were looking at, and the demo remembers which page you were on.

When you pay, you do it on Stripe's own page, which uses its own cookies to keep the payment secure and prevent fraud. Those are Stripe's, covered by its privacy policy, and only on its site.

9. Changes to this policy

If we change how we use your information, we'll update this page and its date. If it's a big change, we'll tell you by email or when you next sign in.