Privacy notice

Kismet is a wedding planning website for couples in the UK. This notice explains what we collect about couples and the guests they invite, why, who helps us run the site, how long we keep it, and what you can ask us to do.

Who we are

Kismet is run by Ankita Thakerar and Dharika Hindocha, trading as Kismet (a partnership), of 12 Thornton Grove, Pinner, London, HA5 4HG. We decide how the personal data on Kismet is used, which makes us the controller under UK data protection law.

Questions or requests about your data: hello@kismetplans.com.

Who this notice covers

  • Couples who sign in to plan an engagement party or a wedding.
  • Guests whose details a couple adds, or who reply to an invitation, fill in their details, or open a link a couple has sent them.

What we collect

About couples

  • Your email address, to sign you in with a link. We never ask for a password or card details.
  • Your first names and your wedding and party dates.
  • What you add to plan the day: events, venues and times, your guest list, seating, running orders, your wedding website text and your notes.
  • For wedding money: your budget, savings, suppliers, payment dates and amounts, and family contributions. We do not connect to your bank.

About guests

  • What the couple adds about you: your name, your household, whether you are an adult or a child (and a child's age), your email, mobile number and postal address, and the couple's private notes.
  • What you tell us when you reply: whether you are coming, who is coming with you, meal choices, a message to the couple, and your email and address if asked.
  • Dietary and access needs, if you give them. These are special category data under UK GDPR, because they can reveal health information, and dietary needs can reveal religion. See below.

About everyone

  • Short-lived technical logs kept by our hosting and database providers (such as IP address and the page requested), to keep the site running and secure.

Why we use it, and our lawful basis

  • Couples' accounts and planning: to provide the service you signed up for (contract).
  • Guests' details added by a couple: so the couple can invite you, track replies and plan the day (legitimate interests: theirs in planning their celebration, and yours in being invited and looked after).
  • Guests' replies: to pass your answer to the couple who invited you (legitimate interests).
  • Dietary and access needs: so the couple, and their caterer or venue, can look after you (your explicit consent, which you give by typing them in, and can withdraw at any time).
  • Invitation emails: to send the invitations and reminders the couple asked us to send (legitimate interests).
  • Technical logs: to keep the site secure (legitimate interests).

We do not sell your data, show adverts, track you across other sites, or pass guests' details to suppliers.

Dietary and access needs

  • Only the couple who invited you sees them. For a wedding, the couple can include them, by name, on the final numbers they give their caterer or venue.
  • They never appear on the wedding website, place cards, the table list, or the page sent to people with a role on the day.
  • You can leave them blank, or change or clear them from your invitation link until replies close. After that, ask the couple, or email us.
  • If a couple types them in for you, they should only do so with your agreement.

Who helps us run Kismet

These providers process data on our behalf, under contracts that only let them use it to provide their service to us.

  • Supabase (database and sign-in). Stored in Ireland (EU). Some support and monitoring may happen in the US, covered by standard contractual clauses with the UK addendum.
  • Vercel (website hosting). Our server code runs in Ireland (EU); pages are delivered from the location nearest you. Vercel Inc. is a US company certified under the UK Extension to the EU-US Data Privacy Framework, and also uses standard contractual clauses with the UK addendum.
  • Resend (sending sign-in links and invitation emails). Sent from the US, under the UK Extension to the EU-US Data Privacy Framework.
  • Namecheap (our own mailbox, for emails you send us). Hosted in the US, under the standard contractual clauses in Namecheap's data processing addendum.
  • Stripe (payments for Kismet Plus, once it launches). Card details go straight to Stripe and never reach us. Stripe, LLC is certified under the UK Extension to the EU-US Data Privacy Framework, backed by the UK International Data Transfer Addendum.

The UK Extension to the EU-US Data Privacy Framework is covered by UK adequacy regulations, and the EU by UK adequacy regulations for the EEA. When you click a map or WhatsApp link, you leave Kismet for Google Maps or WhatsApp, and their own privacy policies apply.

How long we keep it

  • Wedding planning data, including the guest list and replies: deleted 12 months after your last wedding event. We email you a month before, so you can save anything you want to keep.
  • Engagement party invitations and replies: deleted with the wedding, or 12 months after the party if there is no wedding, with the same email first.
  • Your sign-in account: deleted with your planning data, or sooner if you ask.
  • Records of invitation emails sent: 12 months.
  • Backups: encrypted, and deleted after 30 days.
  • Technical logs: a few days, as set by our providers.

Your rights

You can ask to see, correct, delete or move your data, object to how we use it, or withdraw your consent. Email hello@kismetplans.com and we will reply within one month. If you are a guest, you can also ask the couple who invited you, since they manage their guest list.

If you are unhappy with how we have handled your data, you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.

Children

Couples can add children to their guest list, with their age on the day, to plan seats and meals. Children do not use Kismet themselves, and you must be 18 or over to create an account.

Cookies

We only use the cookies needed to keep you signed in. We do not use analytics or advertising cookies, and every font and icon on the site is served from our own domain. Your browser also remembers a couple of display choices, such as having seen a tip, on your own device.

Changes to this notice

If we change how we use your data, we will update this page and the date at the top. If a change affects you significantly, we will email couples before it applies.