Privacy Policy
This policy explains how Aptus IQ Limited collects and uses personal information in running the Amoura Studio website and service, and your rights over it.
1. Who we are
Aptus IQ Limited is a private limited company registered in England and Wales under company number 17406473, with its registered office at Chester House Lloyd Drive, Cheshire Oaks Business Park, Ellesmere Port, CH65 9HQ.
You can contact us regarding any privacy or data protection matter by email at contact@amourastudio.co.uk, or in writing to The Data Protection Lead, Aptus IQ Limited, Chester House Lloyd Drive, Cheshire Oaks Business Park, Ellesmere Port, CH65 9HQ.
2. If you are a couple or a wedding guest
Amoura Studio is used by wedding planners and venues. When a planner or venue uses it to prepare stationery with you, sends you a link to fill in your wording, choose a design or keep your guest list, publishes your wedding website, or sends you an invitation or a reminder to reply, the planner or venue is responsible for your information (it is the "controller"), and we process it on its behalf and on its instructions (we are its "processor").
That includes what a couple enter — their names, the day's details, photographs, their guest list and seating — and what a guest gives when they reply: whether they are coming, their meal choices and any dietary needs, answers to the couple's questions, and any message left in the guestbook. Dietary needs can say something about a person's health or beliefs, so they are used only to plan the meal, shown only to the couple and their planner or venue, and printed only on what the couple ask for (the caterer's sheet, for example).
To ask about, correct or delete that information, please contact the planner or venue the couple are working with. We help them respond to those requests. Their own privacy notice explains how they use your information.
The rest of this policy covers the information we are responsible for ourselves.
3. What we collect, and why
If you sign your business up through our website, we collect your business's name, the plan you choose, and your name, position and email address, together with the date and time, your internet address and your browser type, as the record of your acceptance of our terms. We hold these for up to a day while you complete your payment with Stripe; once it is complete they become part of your business's account (below), and if you do not complete it they are deleted. We email your business's access code to the address you give.
If your business subscribes, we collect:
- the name of your business and its contact details, which you enter as your business's details;
- when someone at your business accepts our terms: their name, position and email address, the date and time, their internet address and their browser type. We keep this as evidence of the agreement and use the email address to send notices about your account and our terms;
- your business's access code, which we store only in a scrambled (hashed) form that cannot be read back;
- your billing details. Payments are handled by Stripe: we receive your billing name, address and email and the type and last four digits of your card or bank account, but never your full card or bank details.
Our lawful bases are performing our contract with your business, our legitimate interests in running and securing the service and keeping evidence of our agreements, and our legal obligations (for example, keeping tax records).
When anyone uses our website or the service, our servers keep technical logs — internet address, the page requested, the date and time and browser type — for security and to diagnose problems. Our lawful basis is our legitimate interest in keeping the service secure and working.
4. Cookies
We use only cookies that are strictly necessary for the service to work: to keep a business, or our own staff, signed in (wedaura_session, wedaura_acting_branch and wedaura_studio), and, while a business is signing up, to recognise the browser it signed up in when it returns from payment (wedaura_signup, which expires after a day). Your browser may also store small settings on your device, such as unsaved wording or a remembered choice, which never leave it unless you save them. We do not use analytics, advertising or tracking cookies, so we do not ask for cookie consent.
5. Who we share it with
We do not sell personal information. We share it only with:
- Hostinger, which hosts our servers, in its data centre in Manchester, United Kingdom, and our email;
- Stripe, which processes subscription payments. Stripe also acts as a controller for some information, for example to prevent fraud and meet its legal obligations — see stripe.com/privacy;
- our professional advisers, such as accountants and lawyers, where needed;
- the police, regulators or courts, where the law requires it.
6. International transfers
Our servers, and everything stored on them, are in the United Kingdom. Where a provider processes information outside the United Kingdom, we make sure it is protected — by UK adequacy regulations, or by the UK's International Data Transfer Agreement or Addendum. Stripe may process payment information in the United States: Stripe, LLC is certified under the UK Extension to the EU-US Data Privacy Framework (the "UK-US data bridge"), which the UK recognises as providing adequate protection.
7. How long we keep it
- Sign-ups not completed: one day, after which they are deleted automatically.
- Your business's account and details: for as long as your business subscribes, and then as our terms set out — read-only for 30 days, then deleted 90 days after the subscription ends.
- A wedding's details, guest list, website and stationery: for as long as the planner or venue keeps them, and deleted with the wedding or with the business's account.
- Records of who accepted our terms: for six years after our agreement with your business ends, in case they are needed to establish or defend a legal claim.
- Invoices and payment records: for six years, as tax law requires.
- Server logs: 30 days.
8. Your rights
You have the right to ask for a copy of the information we hold about you, to have it corrected, to have it deleted, to restrict or object to our use of it, and to receive it in a portable form. Some of these rights apply only in certain circumstances, but you can always object to our using your information to tell you about our service, and we will stop. To use them, contact us at the address in section 1. We will respond within one month.
If you are unhappy with how we have handled your information, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. We would appreciate the chance to put things right first.
9. Changes to this policy
We will update this policy if what we do with personal information changes, and show the date it was last updated at the top of this page.