Data Processing Agreement

You (My Wed Hub account owner) act as controller for the personal data you enter about third parties: guests, companions, vendors, venue contacts and any collaborators you invite. MyWedHub acts as processor for that data. For your own account and billing data, we act as controller — see the Privacy Policy.

• Purpose — providing the My Wed Hub wedding planning service to you.
• Duration — for as long as your account is open.
• Categories of data subject — your guests and their companions, your vendors and venue contacts, and the collaborators you invite.
• Categories of data — names, contact details, RSVP and attendance status, dietary and accessibility requirements, table and seating assignments, payment responsibilities you record, plus anything you add through custom fields, notes or uploaded documents.
• Special category data — dietary requirements and accessibility notes can reveal health or religious information. Only record them where you have a lawful basis and keep them to the minimum you need.

• Process the data only on your documented instructions, which the service itself constitutes.
• Never use your data for our own purposes, never sell it, and never use it to train AI models.
• Keep it confidential and ensure our staff and providers are bound to do the same.
• Apply appropriate technical and organisational measures — encryption in transit and at rest, row-level access control so only your workspace members can read your data, private storage buckets with short-lived signed links, and access logging.
• Assist you in responding to data subject requests and, where required, in carrying out a data protection impact assessment.
• Notify you without undue delay, and in any event within 72 hours of becoming aware, of any personal data breach affecting your data.

• Have a lawful basis for holding the personal data you enter.
• Inform the people concerned how their data will be used, including that a planning tool is being used to hold it.
• Keep the data accurate and no more extensive than you need.
• Control who you invite into your workspaces and remove access when it is no longer needed.
• Respond to requests from your guests about their data; we will help where we can.

You authorise us to engage the subprocessors listed on our Subprocessors page (6 at the date of this document). Each is bound by written terms no less protective than these. We will give at least 30 days' notice before adding or replacing one, and you may terminate if you reasonably object.

Your planning data is stored in the European Union. Where a subprocessor processes data outside the European Economic Area, the transfer relies on the European Commission's Standard Contractual Clauses together with supplementary safeguards.

The service gives you direct control: you can view, edit, export and delete any guest, vendor or document record yourself, which lets you satisfy access, rectification, erasure and portability requests without involving us. If you need our help, email support@mywedhub.com.

• Account and profile data — For as long as your account is open, then deleted within 30 days of account deletion.
• Wedding workspaces, guest lists, budgets and documents — Until you delete them, or within 30 days of account deletion.
• Billing records and invoices — 6 years, as required by Spanish commercial and tax law.
• Email delivery logs and suppression lists — 24 months, to protect deliverability and honour unsubscribes.
• Security and error logs — 90 days.
• Google Calendar connection credentials — Until you disconnect the integration or delete your account, then deleted immediately.

On termination you may export everything from Account settings. We delete your data within 30 days of account deletion, except where law requires us to keep billing records.

On reasonable written request, and no more than once a year, we will provide the information you need to demonstrate compliance with this agreement. We do not offer on-site audits of our infrastructure providers; their own certifications and reports are available through them.

This agreement forms part of, and is subject to, the Terms of Service. Where they conflict on the processing of personal data, this document prevails. It is governed by the law of Spain.

Professional planners and agencies who need a counter-signed DPA for their own clients can request one at support@mywedhub.com. Include your legal entity name and address and we will return a signed PDF.