Privacy Policy
Last updated: 26 October 2026
I started I Do In Greece after planning my own wedding in Chania, and I wanted a site that treats couples’ information with the same care I’d want for mine. This page explains, in plain English, what the site collects, why, where it’s kept, how long for, and what you can ask me to do about it.
The short version
- No adverts, no tracking cookies, and we never sell your data.
- Enquiries you send to vendors are emailed to them. We don't keep a copy on the site.
- You can delete your couple account from your dashboard at any time.
Who we are
I Do In Greece Ltd runs idoingreece.com. We’re a limited company registered in Scotland (company number SC878269), and we’re the “data controller” for the information described here. If you have any question about your data, email me at hello@idoingreece.com.
What we collect and why
If you create a couple account
- Your name, and your partner's name if you add it
- Your email address and password. Your password is stored scrambled by our database provider, and nobody at I Do In Greece can see it.
- Where you're based, in general terms (for example UK, USA, Australia, Europe)
- Your planning stage, and your wedding date if you choose to add it
- Whether you'd like marketing emails from us
- The date you agreed to this policy
If you use the planning tools
- Shortlist: the vendors you save, with any private notes and status you add
- Planner: your checklist tasks
- Budget: your categories, quotes, chosen vendors, costs, and any payment notes you add, such as deposit amounts and dates
This is your private planning space. Only you can see it, and we use it for nothing except running the tools for you. Payment notes are just notes: we never take payments and never ask for card or bank details.
If you send an enquiry to a vendor
Your name, email, wedding date (if you add it) and message are emailed straight to the vendor, and we email you a copy. We don’t store any of it on the site. All we record is that an enquiry was sent, which vendor it went to, and when, so we can count enquiries. Once the vendor has your details, they’re an independent business and responsible for how they use them.
If you tap a vendor’s WhatsApp or website button
We count the tap: which vendor, which button, and when. Nothing that identifies you.
If you use our contact form
What you type is emailed to hello@idoingreece.com so I can reply. It isn’t stored on the site. I keep those emails for as long as I need them to deal with your message, and delete them after two years.
If you ask to list your business
When you send the “List your business” form, we save what you enter (your business name, your name, your email, your category, region, website or Instagram, the listing you’re interested in, and your message) so I can reply and keep track of your enquiry. We also record when you confirmed you’d read our vendor Terms & Conditions, and which version they were. A copy is emailed to hello@idoingreece.com. If your business doesn’t go on to be listed, your enquiry is deleted automatically after 12 months. If it does, we keep it for as long as you’re listed with us. The emailed copy in my inbox follows the two-year rule for emails below.
If you’re listed with us
If your business is listed on I Do In Greece, we keep the details you give us to publish on your public listing: your business name, contact details (email, website, Instagram and WhatsApp), category, the areas you cover, descriptions, prices and photos. Your listing is shown publicly so couples can find you and get in touch. Your website, Instagram and WhatsApp appear on your listing; your email address is used to send you couples’ enquiries but isn’t shown. We keep your listing for as long as you’re listed. If it’s removed, it moves to our admin Trash for 30 days, then it’s deleted for good along with its photos. Where a vendor or couple gives us a photographer’s name or link, we may show it as a credit on the photo.
Spam protection
When you sign up, log in, reset a password, send a form, or tap a vendor’s WhatsApp or website button, we briefly keep your internet (IP) address to stop abuse. These records are deleted automatically after one day. Our “Verify you are human” check is provided by Cloudflare Turnstile. It looks at technical signals such as your IP address and browser to tell people from bots, and Cloudflare handles that under its own privacy terms.
Technical logs
Like any website, our hosting providers keep short-lived technical logs, such as which page was requested and when, to keep the site running and secure.
Cookies
If you’re just browsing, the site doesn’t set any cookies at all.
- When you log in, our database provider Supabase sets a login cookie (its name starts with “sb-” and ends in “auth-token”, and it can be split into parts ending .0, .1 and so on). It keeps you signed in, and it’s removed when you log out.
- When you reset your password or confirm your email, a short-lived cookie ending in “code-verifier” is used to finish the process securely.
- The “Verify you are human” check may use Cloudflare’s own security cookies, which only work inside that check.
These are all strictly necessary for the site to work, which is why there’s no cookie banner. We don’t use analytics, advertising or tracking cookies.
Our lawful basis
- Contract: to provide the account and tools you’ve asked for, to send your enquiries to vendors, to respond to businesses who ask to be listed, and to publish and manage listings for vendors who are listed with us
- Consent: for marketing emails, which you can withdraw at any time
- Legitimate interests: to keep the site secure and free of spam, to count enquiries and button taps so vendors know their listing works, and to reply to messages you send us
Marketing emails
I’ll only email you about new vendors and planning tips if you ticked the box when you signed up. Every marketing email has an unsubscribe link, or you can just email me.
Who helps us run the site, and where your data is
| Provider | What they do for us | Where the data is |
|---|---|---|
| Supabase | Database, logins and uploaded photos | Ireland (EU) |
| Vercel | Hosts the website and runs its code | Ireland (EU) |
| Brevo | Sends the site's emails | EU (France, Germany and Belgium) |
| Cloudflare | “Verify you are human” check and network security | Worldwide network, run by a US company |
Each provider only uses your data to provide their service to us. Where a provider is based outside the UK or EU, your data is protected by the legal safeguards they offer for international transfers, such as the UK International Data Transfer Addendum and EU Standard Contractual Clauses.
We also share your details with a vendor when you send them an enquiry, and with authorities if the law requires it. We never sell your data.
How long we keep things
| Information | How long |
|---|---|
| Your couple account and planning tools | While your account is open |
| After you delete your account | 14 days, in case you change your mind (logging back in cancels the deletion). Then it's deleted for good automatically. |
| Database backups | Our provider keeps daily backups for 7 days, so deleted information can stay in a backup for up to 7 days before it's gone completely. Backups are only used to recover from a fault. Uploaded photos aren't in these backups. |
| Enquiry and button-tap counts | As long as the vendor is listed. These contain nothing about you. |
| “List your business” enquiries | 12 months, then deleted automatically, unless your business is listed with us. Then we keep it for as long as you're listed. |
| Spam-protection IP records | 1 day |
| Emails to hello@idoingreece.com | As long as needed to deal with them, then deleted after two years |
| Your vendor listing, if you're listed with us | For as long as you're listed. If your listing is removed, it's kept in our admin Trash for 30 days, then deleted for good with its photos. |
Your rights
Under UK and EU data protection law, you can ask me to:
- Show you the personal data we hold about you
- Correct anything that's wrong
- Delete your data (you can also delete your account yourself: Dashboard, then “Delete account”)
- Limit or stop how we use your data
- Send you a copy of your data in a format you can take elsewhere
- Stop marketing emails at any time
Email hello@idoingreece.com and I’ll reply within one month. If you’re unhappy with how I’ve handled your data, you can complain to the UK Information Commissioner’s Office at ico.org.uk.
Children
I Do In Greece is for adults planning a wedding. We don’t knowingly collect information from anyone under 18.
Changes to this policy
If I change this policy, I’ll update the date at the top. If a change affects how we use your data in a meaningful way, I’ll email couples with accounts first.