Privacy Policy

Effective October 9, 2026

About this policy

wedclub ("wedclub", "we", "us") is a wedding planning service at wedclub.ph. We respect your privacy and are committed to protecting your personal data in accordance with the Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations, and the issuances of the National Privacy Commission (NPC).

This policy explains what personal data we collect, why we collect it, who we share it with, how long we keep it, and the rights you have over it. It should be read together with our Terms of Service.

For the account information you give us, wedclub acts as the personal information controller. For information you enter about other people, such as guests, suppliers and collaborators, wedclub processes it on your behalf and according to your instructions.

Personal data we collect

Information you give us

Account details: first and last name, email address, password (stored only as a one-way hash), and optionally a phone number, address and profile photo.
Your role in the event, such as bride, groom or coordinator.
Event details: event name, wedding date, venues, schedules, theme and notes.
Planning records: budgets, checklists, supplier and venue bookings, packages, contracts and other files you upload, payment terms, and payments you record (amounts, dates, payment method, reference numbers and who paid).
Messages you send us when you contact support or exercise your privacy rights.

Information collected automatically

Technical data: IP address, browser type, device information, and the pages you request, recorded in server logs to keep the service secure and working.
Cookies that keep you signed in and protect your forms. See "Cookies" below.
Notifications we generate for your account, such as upcoming and overdue payment reminders, and whether you have read them.

We do not ask for sensitive personal information such as your government-issued identification numbers, health records, religious or political affiliations. Please do not upload documents containing such information unless it is necessary for your planning.

wedclub does not process payments. Payment records you enter are notes for your own tracking; we never collect credit card or bank account credentials.

Information about other people

Planning a wedding involves other people. You may add guest names, their age group (adult or child), which side they are invited by and their RSVP status; supplier and venue contact persons with their phone numbers, email addresses and social media handles; and the email addresses of collaborators you invite.

When you add this information you confirm that you are entitled to share it with us for planning your event, and that you will inform these people where appropriate. We use it only to provide the service to you and your collaborators. We never contact your guests or market to them. We email a collaborator only to deliver the invitation you asked us to send.

Anyone whose information was added to wedclub may contact us at privacy@wedclub.ph to exercise their rights, and we will coordinate with the account owner.

How we use your personal data

To create and manage your account, verify your email address and sign you in.
To provide the planning features: budget, guest list, checklists, venues, suppliers, payments and reports.
To let you share an event with the collaborators you invite.
To send service emails such as account confirmation, password resets, collaborator invitations and payment due reminders.
To keep the service secure, prevent abuse and fraud, and troubleshoot problems.
To understand how features are used in aggregate so we can improve them.
To comply with legal obligations and respond to lawful requests from authorities.

We do not sell your personal data, we do not use it for advertising, and we do not make decisions about you based solely on automated processing or profiling.

Lawful basis for processing

Under Section 12 of the Data Privacy Act, we process your personal data on these grounds:

Contract: Processing that is necessary to provide the service you signed up for under our Terms of Service.
Consent: Your consent, given when you create your account. You may withdraw it at any time, but we may then be unable to continue providing the service.
Legal obligation: Processing that is required to comply with Philippine law or a lawful order.
Legitimate interests: Keeping the service secure, preventing misuse and improving the product, where these interests are not overridden by your fundamental rights and freedoms.

Data stored outside the Philippines

Our service providers store and process data in data centres outside the Philippines, including in Singapore and the United States. As required by Section 21 of the Data Privacy Act, we remain responsible for personal data transferred to them and use contractual and other reasonable means to ensure it receives a comparable level of protection.

How long we keep your data

Account and event data is kept for as long as your account is active, so you can return to your planning records after the wedding.
When you delete your account from Settings › Profile, your personal data is deleted immediately. If you ask us by email instead, we do it within thirty (30) days. Copies in encrypted backups are overwritten in the normal backup cycle, within ninety (90) days.
Server logs are kept for a short period, normally no longer than thirty (30) days, unless needed to investigate a security incident.
We may keep limited records for longer where the law requires it or to establish, exercise or defend legal claims.

Deleting your account also deletes the accounts you own and their events. If other people are members of an account you own, you must first make one of them the owner, so their planning records are not lost. Planning records you added to someone else's account stay with that account.

How we protect your data

We implement reasonable and appropriate organisational, physical and technical security measures, including:

Encryption of data in transit with HTTPS, and encrypted connections to our database.
Passwords stored only as salted one-way hashes; we can never see your password.
Access to production systems limited to authorised personnel who need it for their work and are bound by confidentiality.
Data separated per account, so only members of an account can see its events.
Regular updates and security checks of the software we depend on.

No system is completely secure. If a personal data breach occurs that is likely to give rise to a real risk of serious harm, we will notify the National Privacy Commission and affected data subjects within seventy-two (72) hours of becoming aware of it, as required by NPC regulations.

Cookies

wedclub uses only cookies that are strictly necessary for the service to work:

A session cookie that keeps you signed in while you use wedclub.
A "remember me" cookie, only if you choose that option when signing in.
Security tokens that protect your forms from cross-site request forgery.

We do not use advertising or third-party tracking cookies. You can block cookies in your browser, but you will not be able to sign in.

Your rights as a data subject

Under the Data Privacy Act you have the right:

To be informed: whether, how and why your personal data is being processed, as explained in this policy.
To access: a copy of the personal data we hold about you and information about how it is processed.
To object: to processing, including processing based on consent or legitimate interests, and to withdraw your consent.
To erasure or blocking: to have your personal data suspended, withdrawn, removed or destroyed when it is incomplete, outdated, false, unlawfully obtained, no longer necessary, or when you withdraw consent.
To rectification: to have inaccurate or incomplete personal data corrected. You can update most of your details yourself from your profile.
To data portability: to obtain your personal data in an electronic and commonly used format.
To damages: to be indemnified for damages sustained because of inaccurate, incomplete, outdated, false, unlawfully obtained or unauthorised use of your personal data.
To file a complaint: with the National Privacy Commission if you believe your rights have been violated.

Your lawful heirs and assigns may exercise these rights on your behalf if you are deceased or incapacitated.

How to exercise your rights

Email our Data Protection Officer at privacy@wedclub.ph from the email address on your account and tell us which right you want to exercise. We may ask you to confirm your identity before acting on the request. We will respond within fifteen (15) working days and act on valid requests free of charge.

You can correct your details from Settings › Profile and delete your account yourself from the same page at any time.

If you are not satisfied with our response, you may lodge a complaint with the National Privacy Commission at privacy.gov.ph.

Children

wedclub accounts are for people who are at least eighteen (18) years old. We do not knowingly collect personal data directly from minors. Couples may list children among their guests; this is limited to their name, age group and RSVP and is processed only for planning the event. If you believe a minor has created an account, contact us and we will delete it.

Changes to this policy

We may update this policy as the service or the law changes. The effective date at the top shows when it was last revised. If we make material changes, we will notify you by email or in the app before they take effect.

Contact us

For questions about this policy or your personal data, contact our Data Protection Officer at privacy@wedclub.ph. For anything else, email support@wedclub.ph.