Privacy policy
- Who we are
- What we collect
- Why we hold it
- Who else sees it
- How long we keep it
- Cookies and tracking
- Your rights
- Security
- Complaints
- Changes to this policy
Who we are
This website belongs to Yasmin Daoud Wedding Design, a wedding and event planning studio based in Marbella, Málaga, Spain. For the purposes of the EU General Data Protection Regulation (GDPR) and the Spanish Ley Orgánica 3/2018 (LOPDGDD), we are the data controller for the information described below.
Registered name and address: [legal entity name, NIF and registered address].
You can reach us about anything in this policy at info@yasminweddingdesign.com.
What we collect
This is a small, quiet website. There is one place where you can give us information, and that is the inquiry form.
Information you give us
When you submit the form at /inquiries, we receive:
- Your first and last name.
- Your email address, and your telephone number if you choose to give it.
- What your inquiry is about, and the details you choose to add: an event date, a guest-count range, a location, a budget range, and anything you write in the free-text field.
- The fact that you ticked the box confirming you had read this policy, and the date and time your inquiry arrived.
Only your name, your email address and the type of inquiry are required. Every other field is optional, and you should tell us only as much as you are comfortable telling us.
Information we receive automatically
When the form is submitted, our server records the browser user-agent string and the IP address the request came from. The IP address is used only to apply a rate limit, a defence against automated form abuse, and is held in memory for ten minutes. It is never written to our database and never linked to your inquiry.
We do not build profiles, we do not track you across sites, and no automated decision-making or profiling within the meaning of Article 22 GDPR takes place on this website.
Why we hold it, and on what basis
| Answering your inquiry | So that Yasmin or a member of the team can write back to you personally and prepare a proposal. Legal basis: steps taken at your request before entering into a contract (Art. 6(1)(b) GDPR). |
|---|---|
| Keeping a record of the conversation | So we can pick up where we left off, and so we can show that consent to this policy was given. Legal basis: our legitimate interest in running the studio and in being able to evidence our compliance (Art. 6(1)(f) GDPR). |
| Protecting the form from abuse | Rate limiting and a hidden anti-bot field. Legal basis: our legitimate interest in keeping the site working (Art. 6(1)(f) GDPR). |
We do not send marketing email, we do not run a newsletter, and we do not sell, rent or share your details with anyone for their own purposes.
Who else sees it
Your inquiry is handled by Yasmin and the small team who work with her. Beyond that, only the following service providers process it on our behalf, under written instructions, and only to the extent that the service requires:
| Supabase | Stores the submitted inquiry in a hosted PostgreSQL database. Our project is provisioned in a European Union region, so the record stays inside the EU. |
|---|---|
| Resend | Delivers two emails when you submit the form: a notification to the studio and an acknowledgement to you. Where this involves a transfer outside the European Economic Area, the transfer is governed by the data processing agreement we hold with them, which relies on the European Commission’s Standard Contractual Clauses. |
| [hosting provider] | Serves the website itself and passes your submission to the two services above. It does not retain the contents of your inquiry. |
Where planning your celebration requires it, we may need to share specific details with a venue or a supplier: a guest number, a date, a dietary requirement. We will always tell you before we do so, and we share only what that supplier needs.
We may also disclose information where the law requires it, or to establish or defend a legal claim.
How long we keep it
- Inquiries that do not become a booking: up to twenty-four months from our last exchange with you, after which the record is deleted. Couples often come back to us a season or two later, which is why we do not delete sooner. If you would rather we deleted it now, say so and we will.
- Inquiries that become a booking: for as long as we are working together, and afterwards for the period that Spanish commercial and tax law requires us to keep contractual and accounting records.
- The rate-limiting IP record: ten minutes, in server memory only.
Cookies and tracking
This website sets no cookies of its own, uses no advertising or analytics cookies, and carries no tracking pixels. There is nothing to consent to, which is why you have not been shown a cookie banner.
Our three typefaces, Cormorant Garamond, Jost and Mrs Saint Delafield, are downloaded at build time and served from our own domain rather than from Google Fonts. Loading a page on this site therefore sends no request to Google and reveals your IP address to no third party.
The full detail is in our cookie policy.
Your rights
Under the GDPR you have the following rights over the information we hold about you. Exercising any of them is free, and you do not have to give a reason.
- Access. To be told whether we hold information about you, and to receive a copy of it.
- Rectification. To have anything inaccurate corrected, and anything incomplete completed.
- Erasure. To have your information deleted, where we have no overriding reason to keep it.
- Restriction. To have us pause our use of your information while a question about it is resolved.
- Portability. To receive the information you gave us in a structured, commonly used, machine-readable format, and to have it sent to another controller where that is technically feasible.
- Objection. To object to our processing where we rely on legitimate interests, on grounds relating to your particular situation.
- Withdrawal of consent. Where we rely on your consent, to withdraw it at any time, without affecting anything done before you withdrew it.
Write to info@yasminweddingdesign.com and we will respond within one month. We may ask you to confirm your identity first, so that we do not hand your information to somebody else.
Security
The site is served over HTTPS. Inquiries are written to the database from the server only, using a credential that is never sent to your browser, and the database is closed to public read and write access. Access to the studio inbox is limited to the people who need it.
No system is perfect. If you believe your information has been compromised, please tell us at once at info@yasminweddingdesign.com.
Complaints
If something about the way we handle your information troubles you, please come to us first, because we would rather put it right. You also have the right to complain to the Spanish supervisory authority, the Agencia Española de Protección de Datos (AEPD), at www.aepd.es, or to the supervisory authority in the EU country where you live or work.
Changes to this policy
If we change how this website handles information, we will update this page and change the date at the top. This version was published on 21 August 2026.