Template — replace the bracketed details with your own and have it checked before launch.
Who we are. Echoes is run by [YOUR BUSINESS NAME], [ADDRESS]. Contact: hello@example.com.
What we collect. From customers: names, event date and email address, to create and deliver your guest book. Payments are handled by Stripe; we never see your card details. From guests: the name you type, your voice recording and, if you choose to add one, a photo.
Why. To provide the service you bought (contract), and so guests can leave a message for the couple (legitimate interests / consent by choosing to record).
Who can hear recordings and see photos. Only the guest book owner, via their private link. Recordings and photos are stored in a private, access-controlled storage bucket.
Processors. Netlify (hosting), Supabase (database and file storage), Stripe (payments), Resend (email).
How long we keep data. [e.g. Recordings are kept for X years after your event, or until you ask us to delete them.]
Your rights. You can ask for access to, correction or deletion of your data at any time by emailing us. Guests who want a message removed can ask the couple or contact us. You can complain to the ICO (ico.org.uk).