Start for free

Privacy policy

Last updated: 31 October 2026

This policy explains what personal data MoonRay Weddings collects, why, how long it is kept and what your rights are, in accordance with the General Data Protection Regulation (GDPR) and the French Data Protection Act.

1. Data controller

MoonRay Weddings — [company name, address and email — TO BE COMPLETED]. See our legal notice.

2. Data we collect

  • Account: name, email, password (encrypted) or Google or Apple sign-in identifier.
  • Event: type and date of the event, number of guests, venue or address, floor plan, uploaded venue plan.
  • Guests (entered by you or your family members): name, email, phone, RSVP, side and type, adult or child, meal choice, notes (possibly including allergies), table and seat.
  • Newsletter: your email, only if you ticked the corresponding box.
  • Usage: sign-in dates and actions in the Tool (for example clicks on “Book a consultation”), and technical data needed for the Tool to work and stay secure.

3. Purposes and legal bases

  • Providing the Tool and managing your account — performance of a contract (terms of use).
  • Sending service emails (invitations, reminders before deletion, menu survey) — performance of a contract.
  • Sending the newsletter and information emails — your consent, which you can withdraw at any time.
  • Allowing Astrid to view and comment on your plan, and to offer you her services — legitimate interest [legal basis to be confirmed with a GDPR advisor].
  • Keeping the Tool secure and improving it — legitimate interest.

4. MoonRay Weddings’ access to your plan

Astrid (MoonRay Weddings) automatically has view access to every plan created with the Tool, including your guests’ data, and may leave comments on it. This access cannot be removed. She can only edit your plan if you invite her to.

5. Your guests’ data

When you enter your guests’ data, you agree to inform them of this use. This data is used only to organise your event (seating plan, menu survey, exports). Allergies and dietary requirements may count as health data: they are collected only in a free-text field and, in the menu survey, with the guest’s explicit consent.

6. Recipients and processors

Your data is never sold. It can be accessed by MoonRay Weddings, by the people you invite to collaborate on your plan, and by our technical providers, who act on our instructions:

  • Website hosting: [TO BE COMPLETED]
  • Database, sign-in and storage: [TO BE COMPLETED — EU region]
  • Email delivery: [TO BE COMPLETED]

If a provider transfers data outside the European Union, the transfer is covered by appropriate safeguards (for example the European Commission’s standard contractual clauses).

7. Retention periods

  • Event data (plan, guests): deleted 6 months after the event date, with email reminders 60, 30 and 7 days before.
  • Account: until you delete it, or after a long period of inactivity.
  • Newsletter: until you unsubscribe.

8. Security

We take reasonable technical and organisational measures to protect your data (encrypted connection, restricted access). As no system is infallible, we recommend that you download your data regularly.

9. Your rights

You have the right to access, rectify, erase, restrict, object to and port your data, to withdraw your consent at any time, and to give instructions on what happens to your data after your death. You can delete your account and data directly from the Tool, or write to us at [email — TO BE COMPLETED].

You can also lodge a complaint with the CNIL, the French data protection authority (www.cnil.fr).

10. Cookies

The website only uses cookies that are strictly necessary for it to work (for example to keep you signed in). These do not require your consent. If we ever add audience measurement or advertising cookies, we will ask for your consent first.

11. Changes

We may update this policy. The date of the last update is shown at the top of this page; if there is a significant change, you will be informed.