Privacy Policy
Asian Wedding Halls | Last updated: 4 October 2026
This Privacy Policy explains how Asian Wedding Halls ("we", "us", "our") collects, uses, and protects your personal data when you use our website at asianweddinghalls.co.uk and our Asian Wedding Halls mobile app (Android). We are committed to protecting your privacy in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Asian Wedding Halls is a UK-based marketplace connecting couples planning South Asian weddings with trusted wedding suppliers. For data protection enquiries, contact us at:
support@asianweddinghalls.co.uk
2. Data We Collect
2.1 Account Information
When you register, we collect your name, email address, and username. This is required to create and maintain your account.
2.2 Wedding Planning Data
If you use our planning tools, we store the data you choose to enter:
- Wedding checklist tasks and completion status
- Wedding date and ceremony details
- Budget categories and expenses
- Shortlisted (wishlisted) suppliers
- Supplier manager entries you create
2.3 Quote Requests
When you submit a quote request to a supplier, we collect the information you provide in the form (event details, date, guest count, message) along with your contact details, and share these with the relevant supplier.
2.4 Push Notification Token
If you grant notification permission in the mobile app, we collect your device's push notification token via Expo's push notification service. This token is used solely to send you notifications about quote responses and wedding reminders. You can revoke this permission at any time in your device settings.
2.5 Biometric Authentication (Mobile App)
The mobile app offers Face ID / fingerprint login as a convenience option. No biometric data is ever transmitted to our servers. Biometric verification is performed entirely on your device by iOS or Android. We only receive a confirmation of success or failure.
2.6 Usage Data
We collect standard technical data including your IP address, browser or app version, device type, and pages visited. This helps us improve the service and diagnose issues.
2.7 Payment Data
Payments (for supplier subscriptions) are processed by Stripe. We do not store your card details. Stripe's privacy policy applies to payment processing: stripe.com/gb/privacy.
3. How We Use Your Data
- To create and manage your account
- To provide the wedding planning, checklist, and budget tools
- To forward your quote requests to the relevant suppliers
- To send push notifications about quote responses and reminders (if permitted)
- To process payments for supplier subscriptions
- To improve and maintain the platform
- To comply with legal obligations
Legal basis: Contract performance (account and planning features), Legitimate interests (platform improvement), Legal obligation (financial records), and Consent (push notifications).
4. Data Sharing
We do not sell your personal data. We share data only in the following circumstances:
- Suppliers: When you submit a quote request, your contact details and event information are shared with that specific supplier.
- Stripe: Payment processing. Stripe is PCI-DSS compliant.
- Expo (push notifications): Your device push token is relayed via Expo's push notification infrastructure to deliver notifications.
- Legal requirements: If required by law, court order, or to protect our legal rights.
5. Data Retention
- Account and planning data: Retained for as long as your account is active. Deleted immediately upon account deletion.
- Transaction records: Retained for 7 years for legal and accounting compliance, even after account deletion. These records contain only transaction metadata, not your login credentials or planning data.
- Push notification tokens: Deleted when your account is deleted or when you revoke notification permission.
6. Your Rights (UK GDPR)
You have the right to:
- Access — request a copy of the data we hold about you
- Rectification — correct inaccurate data via your profile settings
- Erasure — delete your account and all associated data (see Section 7)
- Restriction — ask us to limit processing in certain circumstances
- Portability — receive your data in a machine-readable format
- Object — object to processing based on legitimate interests
- Withdraw consent — revoke push notification permission at any time in device settings
To exercise any right, email support@asianweddinghalls.co.uk. We will respond within 30 days. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO).
7. Deleting Your Account and Data
You can permanently delete your account and all associated data at any time:
- In the app: More → Account → Delete Account
- On the website: Account settings → Delete Account (login required)
- By request: Email support@asianweddinghalls.co.uk — we will action within 30 days
For full details of what is deleted and retained, see our Data Deletion page.
8. Security
All data is transmitted over encrypted HTTPS connections. Passwords are hashed using bcrypt and never stored in plain text. API tokens are stored using Laravel Sanctum and revoked on logout or account deletion. Our servers are hosted on Laravel Cloud with automated security updates.
9. Cookies
Our website uses essential cookies for session management and CSRF protection. No third-party advertising cookies are used. The mobile app does not use cookies.
10. Children
Our service is not directed at children under 13. We do not knowingly collect data from anyone under 13. If you believe we have collected data from a child, please contact us immediately.
11. Changes to This Policy
We may update this policy from time to time. The "Last updated" date at the top of this page will reflect any changes. Continued use of the app or website after changes constitutes acceptance of the updated policy.
12. Venue listings and photos from Google Maps
12.1 How we build venue listings
Some venue pages on our site were created by us, not by the venue. We found these venues in public Google Maps business listings, which a third-party data service (Apify) collected for us on our instructions. For each venue we keep its business name, address and postcode, map location and Google place ID. Where the business lists them publicly, we also keep its phone number and website. On the venue page we show only the venue's name, area, postcode and a link to its location on a map. We do not show the phone number or website on these pages. We keep them so our team can pass on enquiries from couples and contact the venue about its listing. We do not copy or publish Google ratings, reviews, review text, descriptions or photos from Google Maps listings.
We build some supplier listings in every category (for example caterers, photographers, mehndi artists, hair and makeup artists, bridal wear, decor, DJs, cakes, cars and invitations) in the same way and keep the same information about them. A supplier listing shows only the business name, its area and postcode district, its category and a photo as described in 12.5; it is marked "Unverified listing" until the business claims it. We also keep the number of reviews the business has on Google Maps. We use it only to decide which businesses to list (at least 5 reviews) and in which order to show them; we never show it.
These pages are labelled "Listed · details not checked yet" until one of our editors checks them or the venue claims the page. Most of this information is about businesses. Where a venue is run by an individual, for example a sole trader, its business name and contact details may be personal data.
Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). Our interest is helping couples find wedding venues in one place and letting venues receive enquiries. We limit the effect on individuals: we use only business information that is already public, we do not display phone numbers, and we correct or remove a listing on request. You have the right to object (see "Your Rights").
12.2 Photos from Google Maps
If a venue has not yet given us its own photos, its page may show up to five photos that members of the public have shared on Google Maps. They appear in a separate box headed "Photos from Google Maps". Each photo is credited to the person who shared it, exactly as Google Maps shows their name, with a link to their Google Maps profile where Google provides one. Neither the venue nor we supplied or checked these photos. Once the venue sends us its own photos, we show those instead.
We get these photos through Google's official Places API, under Google's terms. We do not copy, store or cache the photos, the photographers' names or Google's photo links. They are fetched fresh each time the page is viewed, and your browser loads each image directly from Google's servers. This means Google receives your IP address and browser details when you view these photos, and Google handles them under its own privacy policy (https://policies.google.com/privacy). The only Google detail we keep is the venue's Google place ID, which identifies the business, not a person.
Some photos may show people, for example guests at an event, and the photographer's name is also personal data. We use this information only to show couples what a venue looks like, with the credit Google requires. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). The photos are already public on Google Maps, we store none of them, we show at most five per venue and only on that venue's own page, and we remove them on request. You have the right to object.
12.3 Correcting or removing a listing or a photo
If you represent a venue, use "Is this your venue? Claim it" on its page to check and correct the details. Anyone can ask us to correct or remove a listing, or to remove the Google Maps photos from a venue page. To do so, email support@asianweddinghalls.co.uk or use our contact page, including the link to the venue page. We usually act within 5 working days and will confirm when it is done. We remove all the Google Maps photos on that venue page, not just one. Because a photo itself is hosted by Google, you can also ask Google to remove it from Google Maps using "Report a problem" on the photo, which removes it everywhere.
12.4 How long we keep this information
We keep listing details while the venue is listed or under review. If a listing is removed, we take it off the site and keep a record of the removal, together with the details we used to identify the venue, so that it is not listed again. We hold no copies of Google Maps photos. If you write to us, we keep your request for up to 12 months as a record of what we did, then delete it. Your other rights, and how to complain to the Information Commissioner's Office, are set out in "Your Rights".
12.5 Photos on supplier listing cards
Each supplier listing card shows the supplier's own uploaded photo when it has one. If it has not uploaded one, the card may show, in this order: an image taken from the business's own official website; a photo shared on Google Maps (credited as described in 12.2); or an illustrative stock photo.
Images from a business's own website. Our crawler, which identifies itself as AsianWeddingHallsBot/1.0, visits only the business's homepage and only takes the image the website itself publishes for link previews (its "og:image" or "twitter:image"). It obeys the website's robots.txt. We keep one resized copy with all hidden data (such as camera and location details) removed. The card credits the website ("Photo: website name") and links to it. Website owners can block our crawler by adding User-agent: AsianWeddingHallsBot and Disallow: / to their robots.txt.
Illustrative photos. Stock photos come from Unsplash under the Unsplash licence. They are labelled "Illustrative", credit the photographer, and do not show the business itself.
Removal. To have a website image removed from a listing, email support@asianweddinghalls.co.uk or use our contact page, with the link to the listing or your website. We usually act within 5 working days. We delete our copy and record the listing or website so that we do not take an image from it again.
12.6 Google ratings and reviews
Some supplier listings show the business's Google rating, the number of Google reviews, Google's short description of the business and a few recent Google reviews, including each reviewer's name as shown on Google. These are provided live by Google Maps through Google's official Places API each time the page is viewed. We do not copy, store or cache them; the only Google details we keep are the business's Google place ID and, for some listings, the one-time rating snapshot and business photo described in 12.7. Reviewers' names link to their public Google Maps profile. Google handles this information under its own privacy policy (https://policies.google.com/privacy). To change or remove a review, use Google Maps; if you represent the business and want us to stop showing Google ratings and reviews on its listing, contact us as described in 12.3 and we will unlink the listing from Google Maps.
12.7 Stored Google rating and business photo
For some supplier listings we have recorded, once, the business's Google star rating and number of Google reviews (shown with the month we recorded them and a link to the business on Google Maps), and one photo that the business itself uploaded to its Google Maps listing (credited "Photo: business name via Google Maps"). We do not store review text, reviewers' names or photos taken by customers or other Google users. The stored photo is a resized copy with hidden data (such as camera and location details) removed. If you represent the business and want the rating or photo removed, contact us as described in 12.3 and we will unlink the listing from Google Maps, which removes both.
12.8 Claiming a listing, and emails we send to listed businesses
Claiming or removing a listing. If you use "Claim this listing" or "Ask us to remove this listing", we collect your name, your role at the business, your email address and, if you give it, your phone number. We use them only to check that you act for the business and to tell you the result. We email you a confirmation link first; nothing on the listing changes until you use it. If your email address is on the business's own website domain we approve the request automatically; otherwise a member of our team checks it. When a claim is approved, your email address becomes the login and enquiry address of the business's supplier account. Our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)): making sure listings are controlled by the businesses themselves. We keep claim and removal records for up to 24 months after the decision.
Emails to listed businesses. For businesses we list from public Google Maps information that have not yet claimed their listing, we may look at the business's own website (its homepage and, if needed, one contact page) for a business contact email address published there, such as info@ or bookings@ on the business's own domain. Our crawler identifies itself as AsianWeddingHallsBot/1.0 and obeys robots.txt. We never show this address on the site. We may send that address one email explaining the listing and how to claim or remove it, and at most one reminder at least 7 days later, only if the listing has not been claimed and the business has not opted out. These are business-to-business emails to a business address (Privacy and Electronic Communications Regulations, corporate subscribers) and our lawful basis is legitimate interests (UK GDPR Article 6(1)(f)). Every email has a one-click unsubscribe link; using it, or asking us by email, puts the address and the business's web domain on our suppression list so that nobody at that business is emailed again. We keep the suppression list for as long as we send such emails, so that we can honour it. You have the right to object at any time.
13. Contact
For any privacy-related questions or requests:
Asian Wedding Halls
Email: support@asianweddinghalls.co.uk
Website: asianweddinghalls.co.uk