# Privacy Policy
## 1. Introduction
Vanna Wedding Planning Platform ("we," "our," or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our wedding planning platform and services.
## 2. Information We Collect
### 2.1 Personal Information
We may collect personal information that you provide directly to us, including:
- **Account Information**: Name, email address, phone number, business information
- **Profile Information**: Photos, wedding details, preferences, and personal stories
- **Payment Information**: Billing address, payment method details (processed securely)
- **Communication Data**: Messages, reviews, feedback, and support requests
### 2.2 Automatically Collected Information
We automatically collect certain information when you use our platform:
- **Usage Data**: Pages visited, time spent, features used, and interactions
- **Device Information**: IP address, browser type, operating system, device identifiers
- **Location Data**: General location information based on IP address
- **Cookies and Tracking**: Cookies, web beacons, and similar tracking technologies
### 2.3 Third-Party Information
We may receive information from third parties:
- **Social Media**: Information from social media platforms when you connect accounts
- **Payment Processors**: Transaction information from payment service providers
- **Vendors**: Business information and service details from vendor partners
## 3. How We Use Your Information
### 3.1 Service Provision
We use your information to:
- Provide and maintain our wedding planning services
- Process transactions and manage payments
- Facilitate communication between couples and vendors
- Deliver personalized content and recommendations
- Support customer service and technical assistance
### 3.2 Communication
We use your information to:
- Send important updates about your account and services
- Provide customer support and respond to inquiries
- Send marketing communications (with your consent)
- Notify you about new features and improvements
### 3.3 Platform Improvement
We use your information to:
- Analyze usage patterns and improve our services
- Conduct research and development
- Enhance security and prevent fraud
- Comply with legal obligations
## 4. Information Sharing and Disclosure
### 4.1 With Your Consent
We may share your information:
- When you explicitly consent to sharing
- With vendors you choose to work with
- With other users as part of platform features
- With third-party service providers (under strict agreements)
### 4.2 Legal Requirements
We may disclose information when required by law:
- To comply with legal processes or government requests
- To protect our rights, property, or safety
- To investigate fraud or security issues
- In connection with business transfers or acquisitions
### 4.3 Service Providers
We may share information with trusted third parties:
- **Payment Processors**: For transaction processing
- **Cloud Services**: For data storage and hosting
- **Analytics Providers**: For usage analysis and improvements
- **Marketing Partners**: For promotional activities (with consent)
## 5. Data Security
### 5.1 Security Measures
We implement appropriate security measures to protect your information:
- **Encryption**: Data is encrypted in transit and at rest
- **Access Controls**: Limited access to personal information
- **Regular Audits**: Security assessments and monitoring
- **Employee Training**: Staff training on data protection
### 5.2 Data Breach Response
In the event of a data breach, we will:
- Notify affected users promptly
- Report to relevant authorities as required
- Take immediate steps to contain and remediate
- Provide guidance on protective measures
## 6. Data Retention
### 6.1 Retention Periods
We retain your information for different periods based on purpose:
- **Account Information**: Until account deletion or 7 years after last activity
- **Transaction Data**: 7 years for financial and legal compliance
- **Communication Data**: 3 years after last interaction
- **Usage Analytics**: 2 years in aggregated, anonymized form
### 6.2 Data Deletion
You can request deletion of your information:
- Account deletion removes most personal data
- Some data may be retained for legal compliance
- Deleted data is securely purged from our systems
## 7. Your Rights and Choices
### 7.1 Access and Control
You have the right to:
- **Access**: Request copies of your personal information
- **Correction**: Update or correct inaccurate information
- **Deletion**: Request deletion of your personal information
- **Portability**: Receive your data in a structured format
### 7.2 Communication Preferences
You can control:
- **Marketing Emails**: Opt out of promotional communications
- **Notifications**: Manage push and email notification settings
- **Data Processing**: Object to certain types of data processing
- **Cookies**: Manage cookie preferences in your browser
### 7.3 Account Settings
You can manage your privacy through:
- Account settings and privacy controls
- Profile visibility settings
- Data sharing preferences
- Third-party app permissions
## 8. Cookies and Tracking Technologies
### 8.1 Types of Cookies
We use various types of cookies:
- **Essential Cookies**: Required for platform functionality
- **Performance Cookies**: Help us understand usage patterns
- **Functionality Cookies**: Remember your preferences
- **Marketing Cookies**: Used for targeted advertising (with consent)
### 8.2 Cookie Management
You can manage cookies through:
- Browser settings and privacy controls
- Our cookie preference center
- Third-party opt-out tools
- Ad blocking software
## 9. International Data Transfers
### 9.1 Cross-Border Transfers
Your information may be transferred to and processed in countries other than your own. We ensure appropriate safeguards:
- **Adequacy Decisions**: Transfers to countries with adequate protection
- **Standard Contractual Clauses**: EU-approved data transfer agreements
- **Certification Programs**: Industry-standard privacy certifications
- **Consent**: Explicit consent for transfers to other countries
### 9.2 Data Processing Locations
Our primary data processing occurs in:
- Uganda (primary location)
- Secure cloud infrastructure
- Partner data centers with appropriate safeguards
## 10. Children's Privacy
### 10.1 Age Requirements
Our platform is not intended for children under 18:
- We do not knowingly collect information from children under 18
- Users must be at least 18 to create accounts
- Parents should monitor their children's online activities
### 10.2 Parental Rights
If we discover we have collected information from a child under 18:
- We will delete the information immediately
- We will notify parents if contact information is available
- We will take steps to prevent future collection
## 11. Third-Party Services
### 11.1 External Links
Our platform may contain links to third-party websites:
- We are not responsible for their privacy practices
- Review their privacy policies before providing information
- We do not endorse or control third-party content
### 11.2 Integrated Services
We integrate with third-party services:
- **Social Media**: Facebook, Instagram, Twitter integration
- **Payment Services**: Secure payment processing
- **Analytics**: Usage tracking and improvement tools
- **Communication**: Email and SMS service providers
## 12. Updates to This Policy
### 12.1 Policy Changes
We may update this Privacy Policy from time to time:
- Changes will be posted on this page
- We will notify users of significant changes
- Continued use constitutes acceptance of updates
- We will maintain previous versions for reference
### 12.2 Notification Methods
We will notify you of changes through:
- Email notifications to registered users
- Platform announcements and banners
- Updated "Last Modified" date at the top of this policy
- Direct communication for material changes
## 13. Contact Information
### 13.1 Privacy Inquiries
For questions about this Privacy Policy or our data practices:
- **Email**: privacy@vanna.com
- **Phone**: +256 XXX XXX XXX
- **Address**: Kampala, Uganda
- **Data Protection Officer**: dpo@vanna.com
### 13.2 Complaints
If you have concerns about our privacy practices:
- Contact us directly for resolution
- File a complaint with relevant data protection authorities
- Seek legal advice if necessary
- We are committed to resolving privacy concerns promptly
## 14. Legal Basis for Processing
### 14.1 Processing Grounds
We process your information based on:
- **Consent**: When you provide explicit consent
- **Contract Performance**: To provide requested services
- **Legitimate Interests**: For platform improvement and security
- **Legal Obligations**: To comply with applicable laws
### 14.2 Withdrawal of Consent
You can withdraw consent at any time:
- Contact us to update your preferences
- Use account settings to modify permissions
- Unsubscribe from marketing communications
- Request deletion of your account and data
## 15. Data Protection Compliance
### 15.1 Regulatory Compliance
We comply with applicable data protection laws:
- **Uganda Data Protection Act**
- **General Data Protection Regulation (GDPR)**
- **California Consumer Privacy Act (CCPA)**
- **Other applicable regional privacy laws**
### 15.2 Privacy by Design
We implement privacy by design principles:
- Data minimization and purpose limitation
- Transparency and user control
- Security and confidentiality
- Regular privacy impact assessments
---
*Last updated: September 27, 2025*