Last updated: [INSERT DATE]
At Cafiero & McCall Weddings (“we”, “us”, “our”), we respect your privacy and are committed to protecting your personal data.
This Privacy Policy explains how we collect, use, store and share your personal data when you:
We aim to handle your information in a lawful, fair and transparent way, in line with applicable data protection law. A UK privacy notice should clearly explain who the business is, what data it collects, why it uses it, the lawful bases, sharing, transfers, retention, and individual rights.
Legal business name: [INSERT LEGAL BUSINESS NAME]
Trading name: Cafiero & McCall Weddings
Registered address: [INSERT REGISTERED ADDRESS]
Trading locations: Pompei, Campania, Italy and London, United Kingdom
Email: [INSERT CONTACT EMAIL]
Phone / WhatsApp: [INSERT NUMBER]
For the purposes of applicable data protection law, we are the data controller of the personal data described in this Privacy Policy. The controller is the organisation that decides how and why personal data is used.
Depending on how you interact with us, we may collect:
Where relevant to our services, we may process limited guest information such as:
Some of this information is personal data because it relates to an identifiable individual.
We collect personal data:
Your contact page currently gathers personal data through multiple forms, including wedding enquiries, private consultations, and guest assistance requests.
We may use your personal data to:
We rely on one or more of the following lawful bases:
Where processing is necessary to perform a contract with you, or to take steps at your request before entering into a contract. This is a common basis for handling enquiries, proposals, bookings, and client administration.
Where we need to process personal data to comply with legal, tax, accounting or regulatory obligations.
Where processing is necessary for our legitimate business interests, such as administering our business, maintaining records, responding to correspondence, protecting website security, and improving our services, provided those interests are not overridden by your rights and freedoms. Legitimate interests can be used in some circumstances, but the business must assess whether they are appropriate.
Where we rely on your consent, including for certain cookies and, where required, marketing communications. Non-essential cookies generally require consent under PECR, and analytics cookies are not usually treated as strictly necessary.
In limited cases, wedding or guest planning may involve more sensitive information, such as:
Where we process this type of information, we will do so only where there is a valid legal basis and an additional condition under data protection law, and only where it is genuinely necessary for the relevant purpose. Health data is treated as special category data and requires extra protection.
We may occasionally send news, updates, or promotional information about our services if you have asked to receive it or if we are otherwise permitted to contact you by law.
You can opt out of marketing at any time by:
We do not sell your personal data to third parties for their own marketing.
Electronic marketing is subject to PECR rules as well as data protection law, and consent is often required unless a limited exception applies.
Our website may use cookies and similar technologies to help it function and, where you consent, to understand how visitors use the site and improve performance.
Some cookies are strictly necessary for the website to operate. Others, including analytics and marketing cookies, will only be used where the required consent has been given.
More information can be provided in a separate Cookie Policy.
UK guidance says non-essential cookies generally require consent, and a consent mechanism must allow users to choose before those cookies are set.
We may share your personal data, where necessary, with:
Where third-party service providers process personal data on our behalf, we expect them to do so securely and appropriately. Where a business uses processors, UK GDPR generally requires written controller-processor terms.
Because our business operates internationally and may work with clients, suppliers, and service providers in different countries, your personal data may be processed outside your country of residence.
Where personal data is transferred internationally, we will take appropriate steps to ensure it remains protected in accordance with applicable data protection law.
International transfers under UK GDPR require appropriate safeguards where applicable.
We keep personal data only for as long as reasonably necessary for the purposes for which it was collected, including for legal, accounting, insurance, regulatory, and dispute-resolution reasons.
Our general retention approach is:
ICO guidance says personal data should not be kept for longer than necessary, and businesses should be able to justify retention periods.
Subject to applicable law, you may have the right to:
If you wish to exercise any of these rights, please contact us using the details above.
A privacy notice should explain individuals’ rights and how they can raise concerns.
If you have any concerns about how we use your personal data, please contact us first and we will try to resolve the issue fairly and promptly.
If you are not satisfied, you may also have the right to complain to the Information Commissioner’s Office (ICO) in the United Kingdom. UK guidance specifically recommends informing people of their right to complain to the ICO where relevant.
We take appropriate technical and organisational measures to help protect personal data against unauthorised access, misuse, loss, disclosure, or alteration.
However, no method of transmission over the internet or method of electronic storage is completely secure, so we cannot guarantee absolute security.
Our website may contain links to third-party websites, platforms, or services. If you use those links, those third parties may process your personal data under their own privacy policies. We are not responsible for their privacy practices.
We may update this Privacy Policy from time to time. The latest version will always be published on this page with the updated date shown at the top.