Who we are

Marcy Rice and Sam Conran act as joint data controllers for this site. You can reach us at hello@marcyandsam.com.

What we collect

• The party information printed on your invitation (names and household), so we can match your RSVP to the right invitation.
• Your RSVP responses: attendance per event, meal choice, dietary notes, song request and message.
• A contact email, so we can send a confirmation of what you submitted and any updates about the day.
• A small, unsigned cookie that remembers which invitation you opened, so returning to the site drops you straight into edit mode.

Lawful basis

We rely on legitimate interests (organising our own wedding) and, where you tell us about dietary or medical needs, your explicit consent via submitting the form.

Where it lives

Everything is stored on Amazon Web Services in the eu-west-2 (London) region, encrypted at rest. Email is sent via Amazon SES and forwarded to a personal Gmail inbox for replies. We don't use any analytics, CRM, or advertising platforms.

How long we keep it

Personal data is deleted three months after the wedding. Anonymous aggregates (counts for the caterer, for instance) may be kept as part of our own records.

Your rights

You can ask us to show, correct, or delete any information we hold about you. Email us and we'll respond within seven days.

Sub-processors

• Amazon Web Services. Infrastructure, storage and email, under the AWS Data Processing Addendum.
• Google. Gmail for inbound email and Google OAuth for admin login.