EDIT YOUR WEDDING PRIVACY POLICY

Edit Your Wedding, Ltd. (“we,” “us,” or “our”) provides wedding video editing services via a digital storefront to sell a hybrid package: renting physical cameras, providing a secure private portal for file uploads, and delivering human post-production video editing, including all related information, video upload gateways, physical equipment distribution systems, and post-production creative features (collectively, the “Services”). The Services are primarily powered by Shopify, which provides the underlying e-commerce and technical infrastructure enabling us to deliver our Services to you.

If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.

This Privacy Policy describes how we collect, use, disclose, and process your personal information when you visit our website, purchase our packages, upload your raw footage, or otherwise communicate with us. It applies globally, with specific dedicated addendums governing residents of the United States, the United Kingdom, the European Economic Area (EEA), and Canada. Please read this Privacy Policy carefully. By accessing or utilizing any portion of our Services, you acknowledge that you understand the data practices detailed herein.

RELATIONSHIP WITH SHOPIFY

The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services for you. Information you submit to the Services will be transmitted to and shared with Shopify as well as third parties that may be in countries other than where you reside, to provide and improve the Services for you. In addition, to help protect, grow, and improve our business, we use certain Shopify enhanced features that incorporate data and information obtained from your interactions with our Store, along with other merchants and with Shopify. To provide these enhanced features, Shopify may make use of personal information collected about your interactions with our store, along with other merchants, and with Shopify. In these circumstances, Shopify is responsible for the processing of your personal information, including for responding to your requests to exercise your rights over use of your personal information for these purposes. To learn more about how Shopify uses your personal information and any rights you may have, you can visit the Shopify Consumer Privacy Policy. Depending on where you live, you may exercise certain rights with respect to your personal information here Shopify Privacy Portal Link.

 

1. CATEGORIES OF PERSONAL INFORMATION WE COLLECT

We collect information that identifies, relates to, describes, or can reasonably be linked to an identifiable individual (“personal information”). We do not process anonymized or aggregate data that cannot be linked to you.

Depending on how you interact with our Services, we collect data from three primary sources:

A. Data Provided Directly by You

●      Identity and Contact Details: Real name, billing address, shipping address, telephone number, and email address collected during account creation or order placement.

●      Account Credentials: Secure usernames, passwords, and security verification parameters used to access our video upload vaults and user portals.

●      Customer Communications: Any information, text inputs, or uploaded queries you include when interacting with our customer support teams via email, contact forms, or live chat integrations.

●      Uploaded Footage and Audio: We ingest the raw video files, digital media, audio records, and ambient sound recorded by you or your wedding guests using our distributed hardware or personal devices. This media naturally contains the physical image, likeness, voice, and personal traits of individuals attending your event.

B. Data Sourced Automatically

●      Device and Connection Metrics: IP address, unique machine identifiers, hardware profiles, operating system parameters, browser configurations, mobile network details, and general geographic location derived from network routing.

●      Website Usage Inferences: Timestamps of access, feature interactions, navigation pathways, scrolling tracking, cookie identifiers, and analytics metadata evaluating how you use the Services.

C. From our partners or other third parties.

●      From our service providers including when we engage them to enable certain technology and when they collect or process your personal information on our behalf;

●      Transactional Information: Details regarding the specific DIY packages or destination wedding services you view, place in your cart, or purchase, alongside your operational order history.

●      Financial Data: Payment confirmations, payment methods, and truncated billing summaries (such as the last four digits of your credit card). Note: All raw financial transactions are routed directly through our merchant payment processors; we do not store full payment card numbers on our infrastructure.

 

2. HOW WE USE YOUR PERSONAL INFORMATION

Depending on how you interact with us or which of the Services you use, we may use personal information we may use and process personal information for the following purposes:

●      Provide, Tailor, and Improve the Services. We use your personal information to provide you with the Services, including to perform our contract with you, to process your payments, to fulfill your orders, to remember your preferences and items you are interested in, to send notifications to you related to your account, to process purchases, returns, exchanges or other transactions, to create, maintain and otherwise manage your account, to arrange for shipping, to facilitate any returns and exchanges, to enable you to post reviews, and to create a customized shopping experience for you, such as recommending products related to your purchases. This may include using your personal information to better tailor and improve the Services.

●      Service Fulfillment: Processing transaction checkouts, distributing hardware kits, providing online upload vaults, executing post-production video editing, and arranging domestic or international shipping through local logistics networks.

●      Marketing. We use your personal information for marketing and promotional purposes, such as to send marketing, advertising and promotional communications by email, text message or postal mail.

●      Digital Advertising. We use your personal information to show you online advertisements for products or services on the Services or other, including based on items you previously have purchased or added to your cart and other activity on the Services by setting tracking pixels, running retargeting campaigns, and serving personalized targeted/behavioral ads across non-affiliated web networks based on your historical shopping interests.

●      Security and Fraud Prevention. We use your personal information to authenticate your account, to provide a secure payment and shopping experience, detect, investigate or act regarding possible fraudulent, illegal, unsafe, or malicious activity, protect public safety, and to secure our services. If you choose to use the Services and register an account, you are responsible for keeping your account credentials safe. We highly recommend that you do not share your username, password or other access details with anyone else.

●      Communicating with You. We use your personal information to provide you with customer support, to be responsive to you, to provide effective services to you and to maintain our business relationship with you.

Legal Reasons. We use your personal information to comply with applicable law or respond to valid legal process, including requests from law enforcement or government agencies, to investigate or participate in civil discovery, potential or actual litigation, or other adversarial legal proceedings, and to enforce or investigate potential violations of our terms or policies

 

3. HOW WE SHARE AND DISCLOSE PERSONAL INFORMATION

We do not sell, rent, or lease your personal information or your private media assets to third-party data brokers or marketing conglomerates. In certain circumstances, we may disclose your personal information to third parties for legitimate purposes to facilitate business operations, subject to this Privacy Policy. Such categories of third parties and purposes may include:

·       E-Commerce: Information you submit to our storefront is securely transmitted to and processed by Shopify to enable basic e-commerce functionality, transaction settlement, and checkout data processing. With Shopify, vendors and other third parties who perform services on our behalf (e.g. IT management, payment processing, data analytics, customer support, cloud storage, fulfillment and shipping).

·       Marketing: With business and marketing partners to provide marketing services and advertise to you. For example, we use Shopify to support personalized advertising with third-party services based on your online activity with different merchants and websites or through your use of social media widgets or login integrations. Our business and marketing partners will use your information in accordance with their own privacy notices. Depending on where you reside, you may have a right to direct us not to share information about you to show you targeted advertisements and marketing based on your online activity with different merchants and websites.

·       Operational Service Providers: When you direct, request us or otherwise consent to our disclosure of certain information to third parties, such as to ship products. We transfer limited contact data to third-party fulfillment contractors, including international commercial shipping networks (e.g., FedEx, UPS) and secure cloud-hosting servers, solely to facilitate shipping, hardware tracking, and portal file hosting.

·       Payment: Merchant gateways and fraud prevention systems that securely validate financial authorizations.

·       Corporate: With our affiliates or otherwise within our corporate group. In connection with a business transaction such as a merger or bankruptcy, to comply with any applicable legal obligations (including to respond to subpoenas, search warrants and similar requests), to enforce any applicable terms of service or policies, and to protect or defend the Services, our rights, and the rights of our users or others.

·       Safety: We retain the right to disclose media assets to public safety authorities without a subpoena or warrant if our human editing personnel review footage that reveals clear evidence of violence or child exploitation.

 

4. UNITED KINGDOM & EUROPEAN UNION

If you access our Services from the United Kingdom or the European Economic Area (EEA), your personal data is managed by Edit Your Wedding as the legal Data Controller under the UK Data Protection Act 2018 and the EU General Data Protection Regulation.

A. Lawful Basis Table

The processing streams we execute are tied to explicit authorized statutory baselines under Article 6 of the GDPR:

Processing Purposes	Categories of Personal Data Involved	GDPR Lawful Basis for Processing
Account Creation & Fulfillment	Identity, Contact details, Shipping parameters, Transaction entries.	Performance of a Contract: Mandatory to execute the transaction terms and deliver physical goods.
Post-Production Video Editing	Raw video uploads, Audio files, Guest likeness captures.	Performance of a Contract: Required to compile the highlight reel requested by the Client.
Marketing Customization	Device tracking telemetry, Browsing history, Cookie tags.	Explicit Opt-In Consent: Satisfied via your active selections on our cookie acceptance banner.
Diagnostic Logging & Optimization	Crash records, Network logs, IP routing details.	Legitimate Interests: Our balanced operational interest in maintaining a stable, virus-free website.
Regulatory & Financial Audits	Historical invoices, Payment confirmations, Tax identification codes.	Compliance with Legal Obligations: Maintaining financial records mandated by tax codes.

 

B. Cross-Border Data Transfer Safeguards

Our foundational database elements and Shopify instances are housed globally, including inside data facilities located within the United States. When we route personal data out of the UK or the EEA to alternative servers, we utilize approved cross-border transfer mechanisms, specifically the European Commission's Standard Contractual Clauses (SCCs) alongside the UK International Data Transfer Addendum, backed by end-to-end transport layer encryption, to ensure your data rights remain fully protected.

5. U.S. STATE CONSUMER PRIVACY RIGHTS

This section applies exclusively to residents of the United States whose home states have enacted comprehensive consumer privacy frameworks, including California (CCPA/CPRA), Virginia (VCDPA), Colorado (CPA), Connecticut (CTDPA), Texas (TDPSA), Indiana (INCDPA), and other US state jurisdictions with comprehensive privacy laws. For your ease of reference, see a list of US states privacy laws with links to the regulators for the ability to appeal appended at the end of this privacy policy.

A. Notice at Collection

The table below maps the categories of personal information we collect against statutory definitions, operational sources, business purposes, and third-party recipient groups:

CCPA / U.S. Statutory Category	Types of Personal Information Collected	Operational Sources	Business Purposes for Processing	Categories of Third-Party Recipients
A. Identifiers	Real name, email address, phone number, shipping address, account username, and IP address.	Directly from the user; automatically collected via browser tracking.	Account provisioning, package delivery, identity verification, customer care routing.	Shopify, local shipping contractors, cloud authentication providers.
B. Personal Records	Customer name, phone number, truncated credit card data (last 4 digits).	Provided directly by the customer at checkout.	Managing package billings, issuing transactional receipts.	Merchant gateway payment networks, internal accounting systems.
C. Commercial Information	Order numbers, packages purchased, items added to cart, rental history.	Generated dynamically via site transactions.	Inventory optimization, tracking customer milestones.	Internal database architectures, logistics tracking vendors.
D. Internet or Network Activity	Browser type, device profile, pages viewed, clickstream analytics, log files.	Automatically extracted via analytical cookies.	Maintaining website stability, bug remediation, analyzing performance.	Telemetry monitoring vendors, cloud security protocols.
E. Sensitive Personal Information	Account sign-in credentials (username and password keys).	Set up directly by the user during profile creation.	Ensuring security gating for video upload vaults.	Identity access management databases.

 

B. Data Selling, Sharing, and Targeted Advertising

●      Sale and Sharing Disclosures: We do not sell your personal information to third parties in exchange for monetary compensation. However, because our website is hosted by Shopify and incorporates ad tracking pixels to serve you customized offers on social media networks, this data transfer is legally classified as "Selling" or "Sharing" for cross-context behavioral advertising under the California Consumer Privacy Act (CCPA) and constitutes "Targeted Advertising" under other comprehensive state frameworks.

●      Opt-Out Right: You possess the right to direct us to stop processing your personal information for targeted advertising or cross context behavioral advertising. You may exercise this choice at any time through the Shopify Privacy Portal Link

●      Universal Browser Preferences: Our website is linked to Shopify to detect and process automated Universal Opt-Out Mechanisms (UOOMs), specifically the Global Privacy Control (GPC) signal. If your browser transmits a GPC script, our system through Shopify will automatically disable all non-essential marketing trackers for that active session without requiring you to log into an account.

●      Sensitive Personal Information Constraint: We process sensitive personal information (specifically, account credentials) strictly to deliver essential website access. Because we do not use sensitive parameters for secondary commercial profiling, we are NOT required to offer a "Limit the Use of My Sensitive Personal Information" link.

6. CANADIAN PRIVACY RIGHTS

If you interact with our website from Canada, your data is processed in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial structures, including Quebec’s Law 25.

●      Cross-Border Jurisdictional Notice: Your personal information, transaction history, and uploaded media files will be transferred out of Canada to our operational systems in the United Kingdom and the United States. While stored in those regions, your data is subject to local domestic laws and disclosure requests by federal judicial authorities.

●      Consent Withdrawal: You possess a statutory right to revoke your consent to our ongoing data processing of your personal information at any time (such as opting out of administrative communications) by connecting with us at privacy@edityourwedding.com. This does not impact transactions that have already been legally finalized.

●      Privacy Assessment Mandate: In compliance with Quebec Law 25 rules, we execute internal Privacy Impact Assessments (PIAs) for all technological system upgrades that utilize international data transfers or automated administrative processing loops.

7. YOUR DATA PRIVACY RIGHTS AND CHOICES

You have the following legal rights to control your personal information, subject to identity verification:

●      Right to Access and Portability: You can request a clear summary confirming if we process your data, alongside a readable, portable copy of the specific information files we maintain.

●      Right to Erasure (Deletion): You can request that we delete your profile, remove transactional records from active databases, and delete your uploaded media assets.

●      Right to Rectification (Correction): You can request that we correct inaccurate or incomplete data tied to your account records.

●      Right to Object or Restrict Processing: You can object to our processing of your data we process based on legitimate interests, or that we restrict processing of your data under ongoing contractual disputes.

●      Right to Lodge a Regulatory Complaint: You have the right to lodge a formal dispute regarding our processing activities with a competent privacy regulator, specifically (i) the United Kingdom Information Commissioner’s Office (ICO); or (ii) your local European Data Protection Authority (DPA); or (iii) the applicable regulatory authority in your place of residence in the USA or Canada.

Identity Verification

To protect your privacy and your wedding media from unauthorized access, we require identity verification before acting on access, deletion, or correction demands. When you submit a request, you must provide information that matches the verified registration parameters linked to your active user account, or sign directly into your secure workspace vault to authenticate your session keys. We reserve the right to decline a request if we cannot verify your identity. We do NOT require account verification for you to execute automated opt-outs of targeted advertising.

Authorized Representatives and Third-Party Agents.

You may designate a representative to submit a privacy rights request on your behalf, subject to regional verification standards:

·       For U.S. Residents: To process a request from an Authorized Agent, the agent must present a formal power of attorney or written authorization signed explicitly by the consumer, and the agent business entity must be actively registered with the Secretary of State in the consumer’s applicable state of residence.

·       For UK, EEA, and Canadian Residents: You may designate a legal proxy or representative to act on your behalf by providing them with an executed, written mandate or power of attorney confirming their authority to handle your data files.

For all international requests, we reserve the right to contact the underlying consumer directly to verify their identity and confirm the agent's credentials before releasing or deleting any personal information.

Managing Communications Preferences:

You may opt out of receiving promotional brand emails or marketing messages at any time by executing the "Unsubscribe" mechanism built into our electronic transmissions. If you opt out of promotional channels, we retain the right to distribute non-promotional messages regarding your active transactional status, account safety, or equipment shipment tracking.

8. DATA RETENTION AND MINIMIZATION

We retain your personal data strictly for the duration necessary to satisfy the specific business purposes outlined in this policy:

●      Account Profiles and Transaction Data: Standard transactional history, billing data, and contract metadata are retained on our secure e-commerce registry for the duration required to satisfy statutory corporate tax, accounting, and anti-fraud auditing requirements.

●      Uploaded Wedding Footage: All uploaded raw footage, video caches, unedited audio files, and temporary system logs will be systematically and permanently deleted from our active operational data servers exactly twelve (12) months following the formal digital delivery of your final highlight film. Files cannot be recovered or reconstituted once this 12-month optimization threshold has crossed. It is the sole responsibility of the Client to download and secure copies of all creative assets within this window.

9. SECURITY COMMITMENTS

We implement robust technical and organizational security measures designed to safeguard your personal data from unauthorized access, loss, or alteration. Please be aware, however, that no electronic network, cross-border data transmission, or cloud storage facility is completely invulnerable. While we and our infrastructure partners strive to protect your personal information, we cannot guarantee absolute security.

10. OUR AI POLICY

We maintain a strict operational boundary between our core creative services and our administrative workflows:

●      Human-Only Editing: We are committed to authentic, human-centric creative production. Your submitted wedding video footage, highlight reels, and final creative compositions are reviewed, cut, arranged, and finalized predominantly by human editors. We do not materially deploy generative artificial intelligence foundation models, automated algorithmic video synthesizers, or automated editing programs to alter or assemble your final video assets other than in an assistant capacity. We always use and rely on human judgement in the editing process.

●      AI Systems Use: We may, however, utilize standard artificial intelligence, machine learning software, or natural language models across our non-creative business infrastructure. This includes using algorithmic software to optimize internal data pipelines, categorize administrative help tickets, format database structures, or run support diagnostics.

11. BIOMETRIC, AUDIO, AND LIKENESS

To execute our human post-production video editing workflows, our production team must analyze, crop, color-correct, and format the physical likenesses, facial images, and vocal tracks contained within your raw media files.

·       Creative Scope Only: The processing of facial features, physical gestures, and vocal patterns is conducted strictly for post-production formatting (e.g., establishing clip sequencing, executing color grading, and mixing background audio volume layers).

·       Prohibitions: The Company does NOT utilize biometric data scanning, facial geometry mapping, or automated algorithmic voiceprint matching to track, profile, or uniquely identify individual wedding participants. Uploaded client media assets are not used to train generative artificial intelligence models, automated video synthesis systems, or machine-learning architectures.

 

12. GUEST FILMING NOTICES

Because Edit Your Wedding operates as a remote post-production editing service and hardware supplier, we do not deploy physical crews to your venue, do not direct event activities, and have no direct relationship with your individual wedding participants.

●      Consent and Notice Ownership: You have the sole and exclusive legal obligation to obtain all required rights, permissions, and privacy clearances from your guests, vendors, venue operators, and event participants.

●      Client Representation: By submitting any media files, raw video logs, or audio captures to our upload vaults, you explicitly warrant that you have provided conspicuous notice to all attendees (e.g., via wedding invitations or public venue signage) that their image, likeness, voice, and actions would be recorded, and that express or implied consent has been legally secured from every individual whose personal data is incorporated into the raw files.

13. MINORS.

Our Services are marketed, directed, and sold exclusively to adults aged eighteen (18) and older. We do not knowingly solicit, collect, or process personal information directly from children.  However, because our physical equipment is deployed to record public wedding celebrations, the raw media assets uploaded to our portals or captured via our recording modules may incidentally record the image, voice, gestures, and likeness of individuals under the age of eighteen ("Minors").

·       Roles: In compliance with the Children’s Online Privacy Protection Act (COPPA), the UK GDPR, and the Age Appropriate Design Code (AADC), Edit Your Wedding, Ltd. acts strictly as a remote Data Processor regarding the raw media files uploaded to our cloud systems. The Client acts as the primary Data Controller for their specific event venue and attendees.

·       Parental Verification: Pursuant to our Terms of Service, the Client maintains the sole legal obligation to obtain separate, valid, and legally binding parental or guardian consent before submitting any media assets capturing a Minor to our servers. If a parent or legal guardian discovers that their child's likeness has been submitted without consent, they may contact us directly to request immediate administrative deletion

14. COOKIES AND TRACKING TECHNOLOGIES

Our storefront utilizes cookies, web beacons, pixels, and similar tracking technologies powered primarily by Shopify to maintain core site operations, optimize your user experience, and analyze platform traffic patterns. We use:

·       Essential and Functional Cookies: These tracking files are strictly necessary to enable primary website functions, such as processing items in your e-commerce shopping cart, securing credit card checkout windows, maintaining active login sessions, and recording your technical user choices. Essential cookies cannot be deactivated within our management consoles.

·       Performance, Analytics, and Advertising Cookies: We utilize underlying analytics platforms (such as Google Analytics and Shopify Core Analytics) to evaluate site interaction rates, diagnostic load faults, and traffic channels. We also utilize tracking pixels to help deliver relevant promotional brand marketing to you across external third-party networks.

·       Granular User Choice and Consent: For visitors navigating from the United Kingdom, European Economic Area, or jurisdictions mandating clear opt-in frameworks, non-essential performance and marketing cookies will not deploy unless you explicitly click "Accept" on our dynamic cookie consent banner. You may update, modify, or revoke your automated tracking preferences at any time by accessing the tracking settings built directly into your web browser.

 

15. POLICY UPDATES 

We reserve the right to modify this Privacy Policy to match changing operational, legal, or regional rules. When material revisions are made, we will post the updated policy directly to this page and change the "Effective Date" posted at the top of this document. We encourage you to review this policy periodically to stay informed about how we safeguard your information.

16. CONTACT US

Should you have any questions regarding this policy, seek to appeal a rejected rights request, or wish to exercise your data choices, please contact us at the email address set out below:

The formal data controller responsible for your information is:

Edit Your Wedding Ltd.

Attention: Privacy Compliance Department

Email Address: mark@edityourwedding.com