PrivacyPolicy

Who we are

Coco Bocca is a creative wedding studio based in Brighton, England, United Kingdom.

For the purposes of data protection law we are the controller of the personal data described here.

You can reach us at hello@cocobocca.com.

The law this policy follows

We follow the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. Many of our couples live in the European Union; when we offer our services to you there, the EU General Data Protection Regulation (EU GDPR) applies as well, and the rights described below are yours under both.

What we collect, and when

• When you send an enquiry through our contact form: your names, your e-mail address, where you are at with planning, what you tell us about yourselves and your vision, and any file you choose to attach.
• When you book a call or session online: your names, e-mail address, phone number if you give it, anything you add in the notes, the service you were interested in, the date and time you chose and, for client-only sessions, the access code we gave you.
• When you become a client: the details needed to plan your wedding with you, such as your budget, timeline, venue, suppliers, guest numbers and the names of the people involved in your day.
• When you e-mail, call or meet us: whatever you choose to share, and our notes from our conversations.
• Technical data when you visit the site: our server records your IP address and basic request details in short-lived logs, and uses the IP address for a few minutes to limit how often forms can be submitted, which keeps spam out. We do not use analytics or advertising trackers; see our Cookie Policy.

We do not ask for special category data such as information about health, religion or ethnicity. If it matters to your day (for example dietary or access needs) and you share it, we use it only for that purpose and with your consent.

Why we use your data, and our lawful basis

• To answer your enquiry and hold your Good-Fit Call: a step towards a contract with you, and our legitimate interest in running the studio.
• To deliver the service you have booked, including strategy sessions, on-the-day coordination and full production: to perform our contract with you.
• To put bookings in our calendar, confirm them and let you cancel: to perform our contract, or the steps leading to it.
• To keep accounting and tax records: to comply with our legal obligations.
• To keep the website secure and free of spam: our legitimate interest in protecting the site.
• To send you news or offers: only if you ask us to, and you can withdraw that consent at any time. We do not currently send a newsletter.

We do not sell your personal data, and we do not use automated decision-making or profiling.

Who we share it with

We share your data only with the services we need to run the studio:

• Google (Google Calendar) and Apple (iCloud Calendar), which hold our studio calendars. When you book online, the booking, your names, e-mail address, phone number and notes are written into those calendars.
• Our e-mail provider, which delivers enquiries, booking confirmations and our correspondence with you.
• Our website hosting provider, which stores the website and its short-lived server logs.
• Suppliers and venues working on your wedding, where you have asked us to coordinate with them, and only the details they need.
• Our accountants, insurers and professional advisers, and public authorities where the law requires it.

Where your data goes

We are based in the United Kingdom and keep your data in the UK or the European Economic Area wherever we can. Google and Apple may process calendar data in the United States. Where data leaves the UK or the EEA, we rely on the safeguards the law provides: the UK Extension to the EU-US Data Privacy Framework, the European Commission's adequacy decision for the United States, or standard contractual clauses with the UK International Data Transfer Addendum.

How long we keep it

• Enquiries that do not lead to a booking or a contract: 12 months after our last exchange, then deleted.
• Online bookings: as events in our calendar, for as long as we keep our calendar history. A cancelled booking is removed from the calendar at once.
• Client files: 6 years after your wedding or the end of our work together, which is how long UK tax law requires us to keep business records; then deleted.
• Attachments you send with an enquiry: deleted with the enquiry.
• IP addresses used to limit form submissions: discarded within minutes. Server logs: a few weeks.

Your rights

Under the UK GDPR and the EU GDPR you can:

• ask for a copy of the personal data we hold about you;
• ask us to correct anything that is wrong or incomplete;
• ask us to delete your data, where we no longer need it;
• ask us to limit how we use it while a question is sorted out;
• object to our using it on the basis of our legitimate interests;
• receive the data you gave us in a portable form;
• withdraw consent at any time, where consent is the basis we rely on.

To use any of these rights, e-mail hello@cocobocca.com. We answer within one month and do not charge. If you are unhappy with our answer you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113. If you live in the EU, you can also complain to the data protection authority in your own country.

Keeping your data safe

The website is served over HTTPS, forms are checked and rate-limited, and bookings carry signed links so only the person with the link can see or cancel them. Our calendars and inbox are protected with strong passwords and two-factor authentication. No system is perfectly secure; if we ever discover a breach affecting you, we will tell you and the ICO as the law requires.

Children

Our services and this website are for adults planning their own wedding. We do not knowingly collect data from anyone under 18.

Other websites

Our site links to other services, such as Google Calendar when you add a booking to your own calendar. Their privacy policies apply there, not this one.

Changes to this policy

We will post any changes here and update the date at the top. Changes that matter to current clients will also be sent by e-mail.