Privacy Policy

WWYM (“When Will You Marry”) is operated by 2 Percent Cargo Ltd. (company number 09757356), registered in England and Wales. Contact: info@2percentcargo.com.

What we collect

• Site owners — site slug, password, partner names, wedding details, contact email, Stripe customer ID (never card details), custom domain info, and — if you sign in with Google or Apple — that account’s ID, email address and name, and whether Apple is hiding your email address
• Guests — email, phone (optional), names, attendance, meal/dietary choices, messages, communication opt-in preferences
• Gift contributors — name (optional), amount, currency, payment method, messages
• Automatic — IP address (security only, not stored long-term), Google Analytics cookies (anonymous usage data)

How we use it

To operate the service: sending RSVP confirmations, delivering event updates to opted-in guests, processing payments, verifying domains, and preventing abuse. We do not sell or share your data with third parties for marketing.

Legal basis (UK GDPR)

Contract (providing the service), consent (opt-in communications, and storing any cookie that isn’t essential to running the site), and legitimate interests (security, analytics, and understanding which campaigns and websites bring us new customers).

Storing information on your device is governed separately by PECR. We ask for your consent before setting any non-essential cookie, and you can withdraw it at any time from Cookie preferences below. If you decline, we store nothing — but we may still process information your browser sends us in the ordinary course of a request, such as a campaign tag carried in a web address, on the basis of our legitimate interest in knowing where new customers come from. We’ve weighed that against your interests: it is limited to a campaign name and a referring website’s address, is never combined with anything that identifies you personally, and is never shared.

Third-party processors

Sweego (email and SMS), Stripe (payments), Cloudflare (DNS, CDN, storage), Railway (hosting), Sentry (error monitoring), Google Analytics. Data is processed within the EU where possible. If you choose to sign in with Google or Apple, they handle that sign-in under their own privacy policies.

Data retention

Site data is kept while your site exists. Deleting your site permanently removes all associated data (RSVPs, gifts, broadcasts). Email suppression records are kept indefinitely to prevent sending to bounced addresses.

Cookies

We use essential sign-in cookies (httpOnly and secure: a session cookie, plus short-lived ones while you sign in with Google or Apple or open a partner invite), a small cookie that simply remembers your cookie choice itself, Google Analytics cookies, and the marketing-attribution cookie described below. We do not use third-party advertising cookies, and we do not track you across other websites. You can opt out of analytics via the Google Analytics opt-out add-on.

If you accept cookies, we set a wwym_attr cookie when you arrive from a campaign link or from another website, to record what referred you to us so we can understand where new customers come from. If you decline cookies, or haven’t made a choice yet, this cookie is never set — no consent, no storage. An ordinary direct visit sets no such cookie either way. When it is set, it holds a source, a medium (for example “social” or “referral”), a campaign name, the referring website’s address, and the date and time you arrived — never your name, email, browsing history, or a full web address. It lasts 30 days, is deleted as soon as you create an account, and is never shared with anyone else.

Campaign details carried in a link you clicked — for example, which ad or social post brought you here — can still be recorded when you sign up even if you decline cookies, because that information travels with you in the web address itself rather than being written to your device. When you create an account, we also note whether you arrived from another website — a simple yes or no, recorded so we can tell a genuinely direct visit apart from a referral we weren’t able to record. Which website it was is only ever stored if you accepted cookies, through the wwym_attr cookie above; if you declined, or haven’t made a choice, we keep the yes and never the name.

Your rights

Under UK GDPR you can access, correct, delete, or export your data, object to processing we carry out on the basis of legitimate interests, withdraw consent for opt-in communications, or change your cookie choice at any time from Cookie preferences above. Email info@2percentcargo.com and we’ll respond within 30 days. You may also complain to the ICO.

Changes

We may update this policy and will post changes here with an updated date.