1. What this policy covers
This Privacy Policy applies to weddingwala.pk and any related apps or services operated by Wedding Wala. It covers customers, vendors, and visitors. By using Wedding Wala you agree to the practices described here. If you do not agree, please do not use the platform.
2. Information we collect
From customers
- Account data — name, email, phone number, password (hashed).
- Booking data — event date, vendor selections, guest count, message threads with vendors.
- Payment metadata — payment status, amount, last-4 of card, payment processor reference. We never store your full card number, CVV, or expiry date. All card data is handled by our PCI-DSS-compliant payment processor (PayFast / Stripe).
- Reviews and photos — content you publish about vendors after a completed booking.
- Device and usage data — IP address, browser type, pages visited, timestamps. Used for fraud prevention, analytics, and service improvement.
From vendors
- Business data — business name, registered name, address, NTN, bank details, portfolio photos, services and pricing.
- Identity verification — CNIC and supporting documents required by Pakistani regulations and our Know-Your-Vendor (KYV) policy.
3. How we use your information
- To create and operate your account.
- To process bookings, payments, refunds, and disputes.
- To send transactional messages — booking confirmations, reminders, payment receipts. You cannot opt out of essential transactional messages while you have an active booking.
- To send marketing communications you have opted into. You can unsubscribe at any time via the link in every marketing email.
- To detect fraud, abuse, and breaches of our Terms of Service or Acceptable Use Policy.
- To meet our obligations under Pakistani law (SBP, FBR, FMU AML/CFT reporting where required).
4. Who we share your information with
Wedding Wala does not sell your data. We share data only with:
- Vendors you book — we share the minimum needed to fulfil the booking (name, contact, event date).
- Payment processors — PayFast Pakistan, Stripe (legacy USD bookings) — to take payments and issue refunds.
- Infrastructure providers — Neon (database), Vercel / Cloudflare (hosting), AWS (file storage), email delivery (e.g. Postmark or AWS SES), SMS providers (e.g. JazzCash SMS gateway).
- Analytics providers — Google Analytics, Microsoft Clarity. We use anonymized / pseudonymized data where possible.
- Law enforcement and regulators — when required by valid Pakistani legal process.
Each processor is bound by a data-processing agreement. We do not transfer data to processors outside the categories above. [LEGAL REVIEW]
5. Cookies and tracking
We use cookies for authentication, preferences, fraud prevention, and analytics. Read our Cookie Policy for the full list and your opt-out controls.
6. Data retention
- Account data — retained while your account is active, plus 7 years (Pakistani tax / accounting law).
- Booking data — retained for 7 years after the event date.
- Marketing preferences — retained until you unsubscribe.
- Reviews — retained indefinitely (they are public-facing content).
- Logs / device data — typically 13 months, longer for unresolved fraud cases.
7. Your rights
You can:
- Access — request a copy of the personal data we hold about you.
- Correct — update inaccurate data via your account settings or by emailing us.
- Delete — request deletion of your account and personal data, subject to retention obligations under Pakistani law (e.g. tax records).
- Object — opt out of marketing at any time.
- Complain — to Wedding Wala or to the relevant Pakistani data-protection authority once Pakistan's data protection law is in force.
To exercise these rights email info@weddingwala.pk. We respond within 30 days.
8. Security
We use HTTPS everywhere, hashed passwords (bcrypt), encrypted database at rest, role-based access control, and audit logging on sensitive actions. No system is perfectly secure. Report security issues to info@weddingwala.pk.
9. Children
Wedding Wala is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
We may update this policy. Material changes will be announced via email and a banner on the site at least 14 days before they take effect. The "Last updated" date above always reflects the current version.
11. Contact
Privacy questions: info@weddingwala.pk. Postal address — see Contact.