Last updated: 04.09.2026]

1. Data Controller

The Data Controller responsible for the processing of your personal data is:

Keira Prince Crafts-decorazioni per feste ed eventi]
Trading as: Keira Prince Weddings & Events
Registered address: [Via roma 51, loiano (BO), 40050
Country: Italy
Email: [info@keiraprincecrafts.com
Telephone: 39 3459114479
Website: [www.keiraprinceweddings.com+

For questions concerning the processing of your personal data or to exercise your rights, you may contact us using the details above.

Data Protection Officer (DPO): [Not appointed / insert details if applicable]

2. Personal Data We Collect

Depending on how you interact with us, we may collect the following categories of personal data.

2.1 Information you provide directly to us

This may include:

• first and last name;

• email address;

• telephone number;

• postal address;

• country of residence;

• wedding date;

• wedding or event venue;

• estimated guest numbers;

• wedding or event requirements;

• budget information;

• preferences and other information you choose to provide when contacting us;

• information contained in correspondence with us;

• information provided when requesting a proposal or quotation;

• information required to enter into or perform a contract with us;

• billing and invoicing information;

• payment-related information;

• information provided during the planning and coordination of your event.

We only request information that is reasonably necessary for the relevant purpose.

3. Information Relating to Wedding Guests and Other Individuals

In the course of providing wedding planning and event coordination services, our clients may provide us with personal information concerning their guests or other individuals involved in an event.

This may include:

• names;

• contact details;

• seating information;

• dietary requirements;

• allergies or food restrictions;

• accessibility requirements;

• accommodation or transportation information;

• event-related preferences;

• other information necessary for the organisation and coordination of the event.

Where you provide us with personal data relating to another person, you should ensure that you are authorised to provide that information and, where required, that the relevant person has been appropriately informed that their information may be shared with us.

Where we receive personal data from a client rather than directly from the individual concerned, we may process that information for the purposes of providing the contracted planning and coordination services.

Where information concerns health, allergies or other potentially sensitive information, we will only process it where there is an appropriate legal basis and where necessary for the relevant service.

4. How We Use Your Personal Data

We may process personal data for the following purposes:

A. Responding to enquiries

We may use your name, email address, telephone number and information contained in your enquiry to:

respond to your request;

provide information about our services;

discuss your wedding or event;

arrange consultations;

prepare a proposal or quotation.

Legal basis: taking steps at your request prior to entering into a contract and, where applicable, our legitimate interests in responding to business enquiries.

B. Providing wedding planning and event services

If you become a client, we may process your personal data to:

plan and coordinate your wedding or event;

communicate with you;

prepare and manage your event timeline;

coordinate venues and suppliers;

• communicate relevant information to vendors and service providers;

• organise transportation, accommodation and other event logistics;

• manage guest-related information provided to us;

• manage changes, requests and event requirements;

• perform our obligations under our agreement with you.

Legal basis: performance of our contract with you and taking steps at your request prior to entering into a contract.

C. Supplier and vendor coordination

As part of our planning services, we may share relevant information with venues, caterers, florists, photographers, entertainment providers, rental companies, transportation providers and other suppliers involved in your wedding or event.

We will only share information that is reasonably necessary for the relevant purpose.

Legal basis: performance of our contract with you and our legitimate interests in coordinating the services you have requested.

D. Payments, accounting and legal obligations

We may process personal data to:

• issue invoices;

• receive and record payments;

• maintain accounting records;

• comply with tax and other legal obligations;

• establish, exercise or defend legal claims;

• comply with requests from competent authorities where legally required.

Legal basis: compliance with legal obligations, performance of a contract and, where applicable, our legitimate interests in establishing, exercising or defending legal claims.

E. Website operation and security

We may process technical information necessary to operate, maintain and secure our website and protect it against fraud, abuse, unauthorised access and other security threats.

Legal basis: our legitimate interests in operating and securing our website and, where applicable, compliance with legal obligations.

F. Marketing and communications

Where permitted by applicable law, we may use your contact information to send information about our services, news or other marketing communications.

Where consent is required, we will only send marketing communications after obtaining your consent.

You may withdraw your consent or unsubscribe from marketing communications at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before withdrawal.

Legal basis: consent where consent is required.

5. Legal Bases for Processing

Depending on the circumstances, we rely on one or more of the following legal bases under Article 6 GDPR:

• Contract: where processing is necessary to enter into or perform a contract with you.

• Pre-contractual measures: where you ask us to take steps before entering into a contract.

• Legal obligation: where processing is necessary for compliance with a legal obligation.

• Legitimate interests: where processing is necessary for our legitimate business interests, provided those interests are not overridden by your rights and freedoms.

• Consent: where you have provided valid consent for a specific processing activity.

Where we rely on legitimate interests, those interests may include operating and protecting our business, responding to enquiries, managing client relationships, coordinating services and protecting our legal rights.

6. Special Categories of Personal Data

Certain information, such as information concerning health, may constitute “special categories of personal data” under Article 9 GDPR.

For example, information concerning a guest's allergy or medical condition may, depending on the circumstances, constitute health data.

We do not intentionally collect special-category data through our website unless there is a specific reason for doing so.

Where such information is provided to us in connection with an event, we will process it only where necessary and where an appropriate legal basis under Article 9 GDPR applies.

We ask clients and other individuals not to provide unnecessary sensitive personal information.

7. Who We May Share Your Information With

Depending on the services you request, we may share relevant personal data with categories of recipients including:

• wedding and event venues;

• caterers;

• florists and decorators;

• photographers and videographers;

• entertainment providers;

• rental and event-production companies;

• transportation providers;

• accommodation providers;

• stationery and printing suppliers;

• technical and production suppliers;

• event staff and contractors;

• professional advisers;

• accountants;

• payment providers;

• IT, website hosting and software providers;

• cloud storage and communication providers;

• government authorities or law-enforcement bodies where legally required.

We do not sell your personal information.

Where a third party processes personal data on our behalf, we will take appropriate steps to ensure that the processing is governed by appropriate contractual and data-protection arrangements where required by law.

8. International Data Transfers

Because we work with clients and suppliers internationally, certain service providers we use may process personal data outside the European Economic Area (“EEA”).

Where personal data is transferred outside the EEA, we will ensure that the transfer is carried out in accordance with applicable data-protection legislation and using an appropriate legal mechanism where required, such as:

• an adequacy decision of the European Commission;

• Standard Contractual Clauses;

• another legally recognised transfer mechanism.

The specific safeguards applicable will depend on the service provider and the processing involved.

9. Data Retention

We retain personal data only for as long as reasonably necessary for the purposes for which it was collected, including to satisfy legal, accounting, tax and reporting obligations and to establish, exercise or defend legal claims.

Retention periods may therefore vary depending on the type of information and the reason for which it is processed.

Enquiries

Information relating to enquiries that do not result in a booking will generally be retained only for as long as reasonably necessary to respond to the enquiry and manage the potential business relationship, after which it will be deleted or securely disposed of unless there is a legitimate reason or legal obligation to retain it for longer.

Clients

Information relating to clients and contracted services may be retained for the duration of the contractual relationship and for an appropriate period thereafter where necessary for legal, accounting, tax, insurance or dispute-resolution purposes.

Accounting and legal records

Certain information may need to be retained for longer periods where required by Italian tax, accounting or other applicable legislation.

Marketing

Where marketing data is processed on the basis of consent, it will generally be retained until you withdraw your consent or we otherwise determine that it is no longer necessary.

10. Cookies and Similar Technologies

Our website may use cookies and similar technologies.

Cookies may be used for purposes including:

• essential website functionality;

• security;

• remembering preferences;

• website analytics;

• improving website performance;

• marketing or advertising, where applicable.

Where applicable, non-essential cookies will only be placed or used in accordance with applicable cookie and privacy legislation and your consent.

For detailed information about the cookies and similar technologies used on our website, including their purposes, providers and retention periods, please see our Cookie Policy.

Where consent is required, you may manage or withdraw your cookie choices through the cookie consent mechanism provided on our website.

The Italian Garante states that websites using non-technical cookies/tracking technologies may have additional information and consent requirements; the cookie policy therefore needs to correspond to the technologies actually installed on your site.

11. Third-Party Websites

Our website may contain links to third-party websites, social-media platforms or other external services.

This Privacy Policy does not govern the privacy practices of those third parties.

We are not responsible for the content, security or privacy practices of third-party websites. We recommend reviewing the privacy policy of any third-party website before providing personal information.

12. Social Media

We may maintain profiles or pages on social-media platforms.

If you interact with us through a social-media platform, the platform may process your personal data independently of us in accordance with its own privacy policy and terms.

We may receive information that you choose to provide to us through those platforms.

13. Photographs, Videos and Event Content

Where photographs, videos or other event-related content are provided to us by clients, guests, photographers or other suppliers, we may process that content for purposes connected with providing our services.

Where we wish to use identifiable photographs, videos or other content for promotional purposes, such use will be handled in accordance with the applicable legal requirements and, where necessary, appropriate consent or another lawful basis will be obtained.

This section does not itself constitute consent to the publication of photographs or videos.

14. Data Security

We take reasonable technical and organisational measures designed to protect personal data against:

accidental or unlawful destruction;

loss;

alteration;

unauthorised disclosure;

unauthorised access;

other unlawful forms of processing.

The measures we use may include access controls, password protection, secure systems and appropriate limitations on access to personal information.

However, no method of transmission or electronic storage can be guaranteed to be completely secure.

The GDPR requires controllers and processors to implement security measures appropriate to the level of risk associated with the processing.

15. Your Rights Under the GDPR

Subject to the conditions and limitations established by applicable law, you may have the right to:

Right of access

Request confirmation as to whether we process your personal data and, where applicable, obtain a copy of that data.

Right to rectification

Request correction of inaccurate or incomplete personal data.

Right to erasure

Request deletion of your personal data where the legal requirements for erasure are satisfied.

Right to restriction

Request that we restrict the processing of your personal data in certain circumstances.

Right to object

Object to certain processing activities, including processing based on legitimate interests and, where applicable, direct marketing.

Right to data portability

Where the legal requirements are met, receive personal data you have provided to us in a structured, commonly used and machine-readable format and request its transmission to another controller.

Right to withdraw consent

Where processing is based on consent, you may withdraw your consent at any time.

Withdrawal of consent does not affect the lawfulness of processing carried out before the withdrawal.

These rights are not absolute and may be subject to legal conditions or exceptions. For example, we may be required to retain certain information to comply with legal obligations.

The GDPR expressly provides for rights including access, rectification, erasure, restriction, objection and, under specified circumstances, data portability.

16. How to Exercise Your Rights

To exercise any of your rights, please contact us using:

Email: info@keiraprincecrafts.com

Please provide sufficient information for us to identify you and understand your request.

We may need to verify your identity before completing certain requests in order to protect your personal information from unauthorised disclosure.

We will respond to requests within the period required by applicable data-protection law.

17. Right to Lodge a Complaint

If you believe that we have processed your personal data unlawfully or that your rights have otherwise been infringed, you have the right to lodge a complaint with the competent data-protection supervisory authority.

For Italy, the supervisory authority is the Garante per la protezione dei dati personali.

Garante per la protezione dei dati personali

This right is without prejudice to any other administrative or judicial remedy available to you.

18. Information We Receive From Third Parties

In the course of providing wedding planning and event coordination services, we may receive personal data from third parties, including clients, venues, suppliers and other individuals involved in an event.

Where required by Articles 13 or 14 GDPR, we will provide the relevant privacy information concerning such processing.

This is particularly relevant where a client provides us with information concerning wedding guests or other individuals who have not contacted us directly. GDPR Article 14 contains additional information requirements where personal data has not been obtained directly from the individual.

19. Automated Decision-Making and Profiling

We do not use your personal data to make decisions based solely on automated processing, including profiling, that produce legal effects or similarly significant effects concerning you.

If this changes, we will update this Privacy Policy and provide any information required by applicable law.

20. Children

Our website and services are directed primarily at adults.

We do not knowingly collect personal data directly from children through our website for purposes that require their information.

Where information concerning children is provided to us by a parent, guardian or client as part of an event, we process that information only to the extent reasonably necessary for the relevant event or service.

21. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes to our business, website, services, technology or legal requirements.

The date at the top of this Privacy Policy indicates when it was most recently updated.

Where appropriate, we will take reasonable steps to draw significant changes to your attention.

22. Contact Us

If you have questions about this Privacy Policy or how we process personal data, please contact:

Keira Prince Crafts-decorazioni per feste ed eventi]
Trading as: Keira Prince Weddings & Events
Registered address: [Via roma 51, loiano (BO), 40050
Country: Italy
Email: [info@keiraprincecrafts.com
Telephone: 39 3459114479
Website: www.keiraprinceweddings.com+