Privacy Policy

OurDay is a wedding planning service operated by Keegan Digital Solutions LTD (company number 17465217), of Can be found on companies house.

If you have any questions about this policy or want to exercise your rights, contact us at info@keegandigitalsolutions.co.uk. For anything else, you can reach us at info@keegandigitalsolutions.co.uk.

OurDay lets couples plan their wedding and collect responses (RSVPs) and contact details from their guests. This policy explains what information the service collects, why, how it is used, and the choices available to you. It covers two groups of people:

• Couples — people who create an OurDay account to plan their wedding.
• Wedding guests — people invited to a wedding who respond using an OurDay RSVP page. Guests never need an OurDay account to read this policy or respond to an invitation.

Whenever personal information is used, UK data protection law (the UK GDPR) requires a lawful basis. The bases OurDay relies on are:

• Account creation and authentication — contract (Article 6(1)(b)): creating and running your account is what you asked for when you signed up. A small amount of security logging is kept under legitimate interests (Article 6(1)(f)).
• Providing the wedding-planning service — contract (Article 6(1)(b)): storing your wedding details, guests, budget, suppliers, tasks and invitations is necessary to provide the service you signed up for.
• Guest and RSVP management — for couples, contract (Article 6(1)(b)). For guests, legitimate interests (Article 6(1)(f)): the couple's and OurDay's interest in organising a wedding the guest was genuinely invited to. Dietary and accessibility information has its own, stricter basis — your explicit consent — explained in the special-category section below.
• Billing and subscriptions — contract (Article 6(1)(b)): taking payment and managing the subscription you signed up for. Keeping billing records where the law requires is legal obligation (Article 6(1)(c)).
• Customer support — legitimate interests (Article 6(1)(f)) in answering enquiries, and contract where the enquiry concerns your account or subscription.
• Security and fraud prevention — legitimate interests (Article 6(1)(f)) in keeping the service and your information secure, and legal obligation (Article 6(1)(c)) where security measures are required by law.
• Legal and record-keeping obligations — legal obligation (Article 6(1)(c)) where we must keep records, for example tax and accounting records relating to payments.

This mapping is OurDay's own assessment of the service. If you think we are relying on the wrong basis for something, contact info@keegandigitalsolutions.co.uk.

When you create an OurDay account and plan your wedding, we collect:

• Account information: your name, email address, and the authentication details needed to keep your account secure (for example an encrypted password when you sign up with email, or your Google account identifier if you sign in with Google).
• Wedding information: your wedding date and venue details, your budget information and budget entries, your supplier details, your tasks and checklist, and your invitation designs.
• Subscription status: which OurDay plan you are on and the state of any subscription, including a reference that identifies you to our payment provider so we can recognise your subscription.

We do not store your payment card details. Card details are entered into and handled securely by Stripe, our payment provider — see “How payments work” below.

Guests are invited by the couple and respond through a secure invitation or RSVP page. Some guest information is entered by the couple, and some is submitted directly by the guest:

• Provided by the couple: the guest's name and any grouping (for example a household), and whether a plus-one is permitted. This is information the couple hold as part of their own guest list.
• Submitted by the guest: when a guest responds, they may provide their email address, telephone number, postal address, whether they are attending, the name of a plus-one, their meal choice, and — only where the couple has switched the question on and the guest has given explicit consent — their dietary requirements and accessibility requirements.

Each invitation link contains an unguessable code, and a guest's responses are only ever visible to the couple whose wedding they were invited to. Guests cannot browse or see other guests' information, and guests have no access to the couple's budget, suppliers, tasks or billing details.

Dietary requirements and accessibility requirements can reveal health, religious or other sensitive information, so UK data protection law treats them as special-category data. Because of that, OurDay handles them more carefully than the rest of an RSVP:

• Explicit, optional consent. These questions only appear when the couple has switched them on. Before you can type anything, you'll see a separate, unticked consent box: “I explicitly consent to the processing of the dietary and accessibility information I provide so that appropriate arrangements can be made for this wedding.” Consenting is entirely your choice — it is never a condition of RSVPing, and you can respond fully without it. If you don't consent, this information is simply not collected.
• What we record. When you consent, we record that you consented, the date and time you consented, and the version of this Privacy Policy that applied — alongside your guest record.
• Changing your mind. You can withdraw your consent at any time: re-open the same secure invitation link, untick the consent box (or edit the details) and resubmit — withdrawing consent removes the information. You can also ask the couple to remove your details from their guest list, or contact info@keegandigitalsolutions.co.uk directly (no OurDay account needed).
• Who sees it. Only the couple organising the wedding. It is never shown to other guests or published anywhere.

The legal condition we rely on for this information is your explicit consent(UK GDPR, Article 9(2)(a)).

Three parties are involved in OurDay, and it helps to be clear about what each actually does:

• OurDay (Keegan Digital Solutions LTD) — designs and runs the OurDay service, and decides how account, technical, billing and support information is handled. For that information, OurDay is responsible to you under this policy.
• The couple — decides who to invite, adds guests to their guest list, switches the optional RSVP questions on or off, and uses the responses to organise their wedding. The couple is responsible for their own use of their guests' information, and for having an appropriate reason to enter guests' details in the first place.
• Guests — choose what to submit through the RSVP pages, as described in this policy, and can review, change or remove their responses through their secure invitation link.

For guests' information, OurDay stores and processes it in order to provide the RSVP service the couple asked for. This policy simply describes in plain terms what each party does, so you always know who you can contact about your information: the couple for anything about your invitation or responses, and info@keegandigitalsolutions.co.uk for anything about how OurDay itself handles data.

We use the information described above to:

• provide your (or the couple’s) wedding planning workspace, including guests, budget, suppliers, tasks and invitations;
• record RSVP responses and contact details so the couple can organise their wedding;
• manage your subscription and keep your account and the service secure;
• respond when you contact us for help;
• meet our legal and record-keeping obligations.

We do not sell your information. We do not send marketing emails to wedding guests, and we never subscribe guests to OurDay marketing.

Subscriptions for the web version of OurDay are processed through Stripe. When you pay, your card details are entered directly into Stripe's secure checkout — they do not pass through OurDay's servers and we do not see or store them. We only receive confirmation of the subscription, the plan you are on, and an identifier that lets us recognise your Stripe customer record if you contact us about billing.

To manage payments, Stripe also processes your email address and the subscription details. Stripe's own privacy policy, which explains how Stripe handles your data, is available on Stripe's website.

OurDay relies on a small number of third-party providers. Only the services below are currently enabled:

• Base44 (application platform and hosting) — OurDay is built on the Base44 platform, which hosts the application, runs its servers and stores all app information (accounts, weddings, guests, budgets, suppliers, tasks, invitations) on OurDay's behalf under contract with us. Categories of information: everything in the app. Why: to host and run the service.
• Stripe (payments and subscriptions) — processes payments, manages subscriptions and carries out fraud prevention. Categories of information: your email address, subscription and billing records, and your card details (entered on Stripe's own secure checkout — never visible to OurDay). Why: to take payment and manage your subscription.
• Google (sign-in) — if you choose “Continue with Google”, Google shares your account identifier (name and email address) with OurDay to sign you in. Categories of information: your Google account identifier. Why: authentication. Google also uses its own cookies on Google's pages during the sign-in process, under Google's own policies.

If we ever enable further sign-in providers (for example Microsoft, Facebook or Apple) or other services, we will update this policy before they are switched on.

International transfers: some of these providers may process information outside the UK. UK data protection law requires that transfers outside the UK are protected by safeguards — typically an adequacy regulation or the International Data Transfer Addendum.

Retention follows the actual behaviour of the service:

• Active accounts: couple and wedding information is kept while your account is open.
• Guest records: kept while the couple's account is active, or until the couple removes the guest from their list — removing a guest deletes their details and disables their personal invitation link.
• Special-category consent records: stored alongside the guest record they relate to and deleted with it.
• Support requests: kept only as long as needed to respond, plus a short period afterwards.
• Billing records: kept for as long as the law requires for tax and accounting purposes (see below).

Deletion and backups. When you delete your account, your records are removed from the live database and every public invitation and RSVP link stops working immediately. As with any hosted service, copies may continue to exist in backups and system logs for a limited period before being deleted in the normal course of operation. The exact backup retention periods are set by our hosting provider — we have deliberately not stated a period we have not verified.

If a couple cancels their paid OurDay subscription, their wedding information is not deleted — cancelling a subscription and deleting an account are separate actions. Deleting a guest from a guest list, or deleting the account, works as described above at any time.

You can ask us to show you the information we hold about you, correct it, or delete it. UK law also gives you other rights in relation to your personal information, including withdrawing consent at any time where consent is our basis for using information.

• Couples: you can download your wedding data from Settings, or delete your account from Settings → Account, at any time.
• Guests: you can review or change your response using the same invitation link, ask the couple to remove your details from their guest list, or contact us directly at info@keegandigitalsolutions.co.uk — you do not need an OurDay account to make a privacy request.

You can also complain to the Information Commissioner's Office (ICO), the UK supervisory authority for data protection, if you believe your information has been mishandled.

OurDay itself uses only the storage strictly necessary to keep you signed in and make the service work and secure. We do not use advertising or marketing trackers. For more detail, including the storage third parties such as Stripe and Google use on their own pages, see our Cookie Policy.

We may update this policy from time to time. When we do, the version number and date at the top of this page change. If a future change is significant, we will let account holders know and ask them to review the updated policy.

Privacy questions and requests: info@keegandigitalsolutions.co.uk. Anything else: visit our Support page or email info@keegandigitalsolutions.co.uk.

Keegan Digital Solutions LTD, Can be found on companies house.