Privacy Policy
Effective date: 6 June 2026 Last updated: 21 June 2026
This policy explains how Be My Best Man collects and uses personal data when you use our website and create a reveal page. We are the data controller under the UK GDPR and the Data Protection Act 2018.
1. Who we are
Be My Best Man is operated by Jamie Meredith, a sole trader trading as "Be My Best Man".
- Data controller: Jamie Meredith trading as Be My Best Man
- Trading address: TBC — to be added before launch
- Contact for privacy questions: hello@bemybestman.com or via our contact form
2. The data we collect
When you create and buy a page (you, the creator):
- Names you enter — the recipient's name, your name, and who is getting married.
- Photos you upload.
- Optional personal message and wedding date.
- Your email address (for the link backup and any response notification).
- Payment information — processed by Stripe. We receive confirmation of payment and limited details (such as the last four digits of your card and billing country); we do not receive or store your full card number.
When the recipient opens the page (the recipient):
- The recipient's response (for example, "Yes") and the time it was recorded.
- We do not require the recipient to create an account or provide personal details.
Automatically, when anyone uses the site:
- Technical and usage data — IP address, device and browser type. On our main site we record product analytics events (such as page created and payment success) only if you accept analytics cookies. On the reveal page we record — without cookies and without identifying you — that a reveal was opened and responded to, so we know the product works. See our Cookie Notice.
We do not intentionally collect special category data. Please don't upload sensitive personal information in photos or messages.
3. How and why we use your data, and our lawful bases
| Purpose | Data used | Lawful basis (UK GDPR) |
|---|---|---|
| Create and deliver your reveal page | Names, photos, message, date | Performance of a contract |
| Take payment | Payment confirmation data (via Stripe) | Performance of a contract |
| Email you the link and any response notification | Your email address | Performance of a contract |
| Record the recipient's response | Response, timestamp | Legitimate interests (delivering the experience you bought) |
| Keep the site secure and working | Technical data | Legitimate interests (security, fraud prevention) |
| Know that reveals are opened and responded to | Anonymous, cookieless event counts | Legitimate interests (confirming the product works) |
| Measure and improve the main site with analytics | Usage data, analytics cookies | Consent |
| Meet legal and accounting duties | Transaction records | Legal obligation |
Where we rely on consent (analytics cookies), you can withdraw it at any time via our cookie settings. Where we rely on legitimate interests, you can object — see your rights below.
4. Photos and the people in them
Photos usually show other people, often the recipient. As the creator, you confirm you have the right to upload and share them (see our Terms & Conditions). We host the photos only to display your page and do not use them for any other purpose.
5. Who we share data with
We use trusted providers ("processors") who handle data on our instructions:
- Stripe — payment processing.
- Supabase — database and photo/file storage, served via a content delivery network.
- Lovable Cloud — application hosting and email delivery.
We do not sell your personal data. We may disclose data if required by law or to protect our legal rights.
6. International transfers
Some providers may process data outside the UK. Where they do, we rely on appropriate safeguards such as UK adequacy regulations or the International Data Transfer Agreement / Addendum to the EU Standard Contractual Clauses.
7. How long we keep data
- Page content (names, photos, message, response): automatically deleted 90 days after the page is created.
- Email and transaction records: kept for up to 6 years to meet accounting and tax obligations.
- Contact form messages: kept while we deal with your query and for up to 2 years afterwards.
When data is no longer needed, we delete or anonymise it.
8. Your rights
Under UK data protection law you have the right to: access your data; correct it; erase it; restrict or object to processing; data portability; and to withdraw consent at any time. To exercise any of these, email hello@bemybestman.com or use our contact form. We will respond within one month.
If the page is about you and someone else created it, contact us and we will help you reach the creator or, where appropriate, act on your request (including a takedown).
You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk, though we'd appreciate the chance to resolve your concern first.
9. Children
The Service is intended for adults (18+). We do not knowingly collect data from children. If you believe a child has provided us data, contact us and we will delete it.
10. Changes to this policy
We may update this policy. The current version, with its date, will always be on this page.
11. Contact
Privacy questions or requests: hello@bemybestman.com or our contact form.