Privacy Policy

Weddings Greece ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal information when you visit our website weddingsgreece.com and use our services.

We are an Australian company and comply with the Australian Privacy Act 1988 (Privacy Act). As we serve users in the European Union, we also comply with the General Data Protection Regulation (GDPR).

1. Information We Collect

1.1 Personal Information You Provide

We collect information you voluntarily provide when you:

• Contact us: Name, email address, phone number, message content
• Claim a business listing: Business name, contact name, email, phone, location, category, website, Instagram handle, optional message
• Submit an inquiry: Wedding details, preferred locations, budget information, contact details

1.2 Information Automatically Collected

When you visit our website, we automatically collect:

• Analytics data: Page views, time spent, navigation paths (via Vercel Analytics)
• Device information: Browser type, operating system, device type
• Technical data: IP address, referrer URL, user agent string

1.3 Cookies and Similar Technologies

We use essential cookies for website functionality and analytics cookies to understand how visitors use our site. See our Cookie Policy for details.

2. How We Use Your Information

We use your personal information for the following purposes:

• Service delivery: To respond to your inquiries, process business claims, and provide our directory services
• Communication: To send confirmation emails, updates about your listing, and respond to your requests
• Analytics: To understand how users interact with our website and improve our services
• Legal compliance: To comply with applicable laws and regulations
• Business operations: To maintain and improve our platform, prevent fraud, and ensure security

3. Legal Basis for Processing (GDPR)

For users in the European Union, we process your data based on:

• Consent: When you opt-in to marketing communications or accept cookies
• Contract: To provide services you've requested (e.g., claiming a listing)
• Legitimate interests: To analyze website usage and improve our services
• Legal obligation: To comply with applicable laws

4. How We Share Your Information

We do not sell your personal information. We may share your information with:

4.1 Service Providers

• Supabase: Database hosting (data stored in secure cloud infrastructure)
• Resend: Email delivery service for transactional emails
• Vercel: Website hosting and analytics
• Cloudinary: Image hosting and content delivery

4.2 Business Transfers

If we merge with or are acquired by another company, your information may be transferred to the new owner.

4.3 Legal Requirements

We may disclose information if required by law, court order, or to protect our rights or the safety of others.

5. Data Security

We implement appropriate technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/SSL)
• Secure database access controls
• Regular security assessments
• Limited access to personal data (need-to-know basis)

However, no internet transmission is 100% secure. While we strive to protect your data, we cannot guarantee absolute security.

6. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (typically 7 years for business records under Australian law)
• Resolve disputes and enforce our agreements

After this period, we will securely delete or anonymize your information.

7. Your Rights

7.1 Australian Privacy Act Rights

Under Australian law, you have the right to:

• Access your personal information
• Correct inaccurate or outdated information
• Request deletion of your information (subject to legal requirements)
• Make a complaint to the Office of the Australian Information Commissioner (OAIC)

7.2 GDPR Rights (EU Users)

If you're in the EU, you also have the right to:

• Data portability: Receive your data in a structured, machine-readable format
• Restrict processing: Ask us to limit how we use your data
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent at any time (doesn't affect prior processing)
• Lodge a complaint: Contact your local supervisory authority

8. International Data Transfers

Your information may be transferred to and stored in countries outside Australia and the EU, including the United States (where some of our service providers are based).

We ensure appropriate safeguards are in place, including:

• Standard contractual clauses approved by the European Commission
• Service providers certified under privacy frameworks
• Adequate protection equivalent to GDPR and Australian Privacy Act requirements

9. Children's Privacy

Our services are not directed to individuals under 18. We do not knowingly collect personal information from children. If you believe we have collected information from a child, please contact us immediately.

10. Third-Party Links

Our website may contain links to third-party websites (e.g., vendor websites, social media). We are not responsible for their privacy practices. Please review their privacy policies before providing any information.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes by posting the new policy on this page with an updated "Last Updated" date. For material changes, we may also send you an email notification.