Privacy Policy
Asian Wedding Halls | Last updated: 7 May 2026
This Privacy Policy explains how Asian Wedding Halls ("we", "us", "our") collects, uses, and protects your personal data when you use our website at asianweddinghalls.co.uk and our Asian Wedding Halls mobile app (Android). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Asian Wedding Halls is a UK-based marketplace connecting couples planning South Asian weddings with trusted wedding suppliers. For data protection enquiries, contact us at:
support@asianweddinghalls.co.uk
2. Data We Collect
2.1 Account Information
When you register, we collect your name, email address, and username. This is required to create and maintain your account.
2.2 Wedding Planning Data
If you use our planning tools, we store the data you choose to enter:
- Wedding checklist tasks and completion status
- Wedding date and ceremony details
- Budget categories and expenses
- Shortlisted (wishlisted) suppliers
- Supplier manager entries you create
2.3 Quote Requests
When you submit a quote request to a supplier, we collect the information you provide in the form (event details, date, guest count, message) along with your contact details, and share these with the relevant supplier.
2.4 Push Notification Token
If you grant notification permission in the mobile app, we collect your device's push notification token via Expo's push notification service. This token is used solely to send you notifications about quote responses and wedding reminders. You can revoke this permission at any time in your device settings.
2.5 Biometric Authentication (Mobile App)
The mobile app offers Face ID / fingerprint login as a convenience option. No biometric data is ever transmitted to our servers. Biometric verification is performed entirely on your device by iOS or Android. We only receive a confirmation of success or failure.
2.6 Usage Data
We collect standard technical data including your IP address, browser or app version, device type, and pages visited. This helps us improve the service and diagnose issues.
2.7 Payment Data
Payments (for supplier subscriptions) are processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing: stripe.com/gb/privacy.
3. How We Use Your Data
- To create and manage your account
- To provide the wedding planning, checklist, and budget tools
- To forward your quote requests to the relevant suppliers
- To send push notifications about quote responses and reminders (if permitted)
- To process payments for supplier subscriptions
- To improve and maintain the platform
- To comply with legal obligations
Legal basis: Contract performance (account and planning features), Legitimate interests (platform improvement), Legal obligation (financial records), and Consent (push notifications).
4. Data Sharing
We do not sell your personal data. We share data only in the following circumstances:
- Suppliers: When you submit a quote request, your contact details and event information are shared with that specific supplier.
- Stripe: Payment processing. Stripe is PCI-DSS compliant.
- Expo (push notifications): Your device push token is relayed via Expo's push notification infrastructure to deliver notifications.
- Legal requirements: If required by law, court order, or to protect our legal rights.
5. Data Retention
- Account and planning data: Retained for as long as your account is active. Deleted immediately upon account deletion.
- Transaction records: Retained for 7 years for legal and accounting compliance, even after account deletion. These records contain only transaction metadata, not your login credentials or planning data.
- Push notification tokens: Deleted when your account is deleted or when you revoke notification permission.
6. Your Rights (UK GDPR)
You have the right to:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate data via your profile settings
- Erasure — delete your account and all associated data (see Section 7)
- Restriction — ask us to limit processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — revoke push notification permission at any time in device settings
To exercise any right, email support@asianweddinghalls.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Deleting Your Account and Data
You can permanently delete your account and all associated data at any time:
- In the app: More → Account → Delete Account
- On the website: Account settings → Delete Account (login required)
- By request: Email support@asianweddinghalls.co.uk — we will action within 30 days
For full details of what is deleted and retained, see our Data Deletion page.
8. Security
All data is transmitted over encrypted HTTPS connections. Passwords are hashed using bcrypt and never stored in plain text. API tokens are stored using Laravel Sanctum and revoked on logout or account deletion. Our servers are hosted on Laravel Cloud with automated security updates.
9. Cookies
Our website uses essential cookies for session management and CSRF protection. No third-party advertising cookies are used. The mobile app does not use cookies.
10. Children
Our service is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the app or website after changes constitutes acceptance of the updated policy.
12. Contact
For any privacy-related questions or requests:
Asian Wedding Halls
Email: support@asianweddinghalls.co.uk
Website: asianweddinghalls.co.uk