Privacy Policy

Effective Date: February 10, 2026 · Last Updated: February 10, 2026 · eesspp LLC d/b/a Wedding Memory

This Privacy Policy describes how eesspp LLC, doing business as Wedding Memory ("Wedding Memory," "we," "us," or "our") and wedding professionals using our platform ("Professionals") collect, use, disclose, and protect personal information through the WeddingFilmHub / Wedding Memory platform.

1. Scope & Data Controller

1.1 Who This Policy Applies To

Wedding Professionals (PROs): Photographers and videographers using Wedding Memory
Couples: End users accessing wedding content
Guests: Individuals accessing content via shared links/QR codes

1.2 Data Controllers

For Professional Data: eesspp LLC is the data controller
For Couple & Guest Data: The Professional (photographer/videographer) is the primary data controller; eesspp LLC is the data processor

1.3 Geographic Scope

This policy complies with the EU General Data Protection Regulation (GDPR), California Consumer Privacy Act (CCPA) / California Privacy Rights Act (CPRA), and other applicable state and international privacy laws.

2. Information We Collect

2.1 Information from Wedding Professionals

Account Information: Name, business name, email address, phone number, business address, payment information (processed by third-party payment processors).

Business Information: Website URL, social media handles, logo and branding materials, portfolio samples (optional).

Usage Data: Login times, IP addresses, device information, browser type, features used, pages accessed, performance metrics.

2.2 Information from Couples

Names, email addresses, wedding date and location, phone numbers (optional), login credentials, IP addresses, device information, access logs and timestamps.

2.3 Information from Guests

Name (if provided), email address (if comment notifications enabled), upload timestamps, device information, photos and videos uploaded, comments and messages, reactions and interactions.

2.4 Automatically Collected Information

Cookies and tracking technologies, IP addresses, browser type, operating system, device identifiers, referring URLs, page views, and time zone settings. See Section 10 for details.

2.5 Information We Do NOT Collect

Social Security Numbers (except as legally required for tax purposes)
Government-issued ID numbers (except for payment verification)
Sensitive health information
Precise geolocation (only approximate location from IP)

3. How We Use Information

3.1 Professional Data

Service Provision: Account management, platform access, billing. Communication: Support, updates, service notifications. Platform Improvement: Analytics, feature development, bug fixes. Legal Compliance: Tax reporting, legal obligations, fraud prevention. Marketing: Product updates, new features, tips (opt-out available).

Legal Bases (GDPR): Contract performance, legitimate interests (platform improvement, security), legal obligation (tax compliance, fraud prevention), consent (marketing communications).

3.2 Couple & Guest Data

Content Delivery: Storing and displaying wedding content. Access Management: Authentication, authorization. Guest Interactions: Facilitating uploads, comments, reactions. Communication: Service notifications, access information.

Legal Bases (GDPR): Contract performance, legitimate interests (service delivery, security), consent (guest uploads, optional communications).

3.3 Analytics & Improvement

Platform performance monitoring, user experience optimization, feature usage analysis, security and fraud detection.

5. International Data Transfers

Primary servers are located in the United States and European Union. For EU data, we use Standard Contractual Clauses (SCCs) for transfers outside the EEA. For UK data, we use UK-approved transfer mechanisms. For Swiss data, we comply with Swiss data protection requirements.

6. Data Retention

6.1 Professional Data

Active accounts: Retained while account is active
Post-termination: 90 days for operational purposes, then anonymized or deleted
Tax/legal records: Retained as legally required (typically 7 years)

6.2 Couple & Guest Data

Active weddings: Duration of service agreement with Professional
Post-wedding: Typically 90 days after wedding date, then permanently deleted
Longer retention: Only if Professional extends access

6.3 Backups

Backup retention: 30 days. Deleted data may persist in backups until the backup cycle completes. Backups are securely encrypted.

6.4 Legal Holds

Data subject to legal holds, investigations, or disputes is retained until resolution.

7. Your Rights & Choices

7.1 Rights Under GDPR (EU/EEA/UK Residents)

Right to Access: Request confirmation of processing and copies of your data
Right to Rectification: Correct inaccurate or incomplete data
Right to Erasure: Request deletion ("right to be forgotten") in certain circumstances
Right to Restrict Processing: Limit how we use your data in certain situations
Right to Data Portability: Receive your data in machine-readable format
Right to Object: Object to processing based on legitimate interests
Right to Withdraw Consent: Withdraw consent where processing is based on consent
Right to Complain: Lodge a complaint with your supervisory authority

7.2 Rights Under CCPA/CPRA (California Residents)

Right to Know: Categories and specific pieces of personal information collected
Right to Delete: Request deletion of personal information
Right to Correct: Request correction of inaccurate information
Right to Opt-Out: Opt out of "sales" or "sharing" (we don't sell or share)
Right to Non-Discrimination: Not be discriminated against for exercising rights

7.3 How to Exercise Rights

Email [email protected] with subject line "Privacy Request" or your specific right (e.g., "GDPR Access Request"). We may request identity verification to prevent unauthorized access.

Response Time: GDPR: within 30 days (may extend to 90 days for complex requests). CCPA: within 45 days (may extend to 90 days).

7.4 Do Not Track

We honor Do Not Track (DNT) browser signals. When DNT is enabled, analytics and tracking cookies are disabled.

8. Data Security

8.1 Security Measures

Encryption: Data encrypted at rest (AES-256) and in transit (TLS 1.2+)
Access Controls: Role-based access, multi-factor authentication
Monitoring: 24/7 security monitoring, intrusion detection
Infrastructure: Secure cloud infrastructure (Cloudflare, Supabase)
Audits: Regular security assessments and vulnerability testing

8.2 No Guarantee

While we implement industry-standard security, no system is 100% secure. You use the Service at your own risk.

8.3 Breach Notification

In the event of a data breach affecting your personal information: GDPR notification within 72 hours of discovery; CCPA notification without unreasonable delay; direct notification to you via email if high risk to your rights.

9. Children's Privacy

The Service is not directed to children under 18. We do not knowingly collect data from children under 18. Weddings often include photos/videos of minors — Professionals and couples are responsible for obtaining parental consent for uploads involving children.

Parents may request deletion of their child's information by contacting [email protected].

10. Cookies & Tracking Technologies

10.1 Essential Cookies (No Consent Required)

Session management, authentication, security features, and load balancing. These are required for the platform to function.

10.2 Analytics Cookies (Consent Required)

Usage statistics, performance metrics, feature popularity. Only loaded with your consent where required by applicable law.

10.3 Cookie Management

Most browsers allow you to refuse, delete, or manage cookies. Disabling essential cookies may impair platform functionality.

10.4 Third-Party Cookies

We do not use third-party advertising cookies. Any analytics cookies (if applicable) are disclosed above.

11. Marketing & Communications

11.1 Professional Communications

Transactional: Account notifications, billing, security alerts — cannot opt out
Marketing: Product updates, new features, tips — can opt out at any time

11.2 Couple Communications

We send service notifications (access information, deletion reminders) during the service period. We do not send marketing to couples unless they separately opt in.

11.3 Opt-Out

Click "unsubscribe" in any marketing email, or email [email protected]. Opting out of marketing does not affect transactional emails.

12. California-Specific Disclosures

12.1 CCPA Information Collection (Past 12 Months)

Category	Collected	Purpose	Shared With
Identifiers	Yes	Service provision	Service providers
Commercial Information	Yes	Billing	Payment processors
Internet Activity	Yes	Analytics	None currently
Geolocation (approximate)	Yes	Service delivery	Service providers
Audio/Visual	Yes	Content storage	Cloud storage
Professional Information	Yes	Service provision	None

12.2 Sales/Sharing of Personal Information

Do We Sell Personal Information? No. Do We Share Personal Information for Cross-Context Behavioral Advertising? No. Have We Sold/Shared in the Past 12 Months? No.

12.3 Sensitive Personal Information

We do not collect or use sensitive personal information except payment information, which is processed by third-party payment processors.

13. Changes to This Privacy Policy

We may update this Privacy Policy to reflect changes in legal requirements, new features, business practice updates, or best practices.

Material Changes: 30 days notice via email and prominent website notice. Minor Changes: Posted with updated "Last Updated" date. Continued use after changes constitutes acceptance. If you disagree, terminate your account before changes take effect.

14. Contact & Data Protection

Privacy Inquiries: [email protected]

eesspp LLC (d/b/a Wedding Memory)
Email: [email protected]
Legal: [email protected]

Supervisory Authorities

EU/EEA residents may lodge complaints with their local supervisory authority. California residents may contact the California Privacy Protection Agency.

↑ Back to top