Who we are

Marcella Rice and Sam Conran act as joint data controllers for this site. You can reach us at hello@marcyandsam.com.

What we collect

• The party information printed on your invitation (names and household), so we can match your RSVP to the right invitation.
• Your RSVP responses: attendance per event, meal choice, dietary notes, song request and message.
• A contact email, so we can send a confirmation of what you submitted and any updates about the day.
• A small, unsigned cookie that remembers which invitation you opened, so returning to the site drops you straight into edit mode.
• Analytics on how the site is used (pages visited, buttons clicked) via PostHog, and error reports via Sentry if something breaks while you're using it.

Lawful basis

We rely on legitimate interests (organising our own wedding) and, where you tell us about dietary or medical needs, your explicit consent via submitting the form.

Where it lives

Everything is stored on Amazon Web Services in the eu-west-2 (London) region, encrypted at rest. Email is sent via Amazon SES and forwarded to a personal Gmail inbox for replies. We don't use any advertising platforms.

How long we keep it

Personal data is deleted three months after the wedding. Anonymous aggregates (counts for Wellington Arms, for instance) may be kept as part of our own records.

Your rights

You can ask us to show, correct, or delete any information we hold about you. Email us and we'll respond within seven days.

Sub-processors

• Amazon Web Services. Infrastructure, storage and email, under the AWS Data Processing Addendum.
• Google. Gmail for inbound email and Google OAuth for admin login.
• Sentry. Error monitoring, so we know when something's broken.
• PostHog. Usage analytics, hosted in their EU region.