Privacy notice
How Tying The Knot handles personal information on this website and, once ordering opens, for couples and their guests: what we collect, why, and your rights.
Draft: this notice is awaiting review by a solicitor, and anything in square brackets is not decided yet. Ordering is not open, so the parts about couples' accounts and guests' replies describe what we plan to do once it opens, including who is responsible for guests' replies, and we will update them before then.
The Tying The Knot website collects very little. If you use the early-access form, we receive your email address and, if you choose to give it, your wedding month. The site sets one cookie, only when you sign in, and has no analytics or advertising. Once ordering opens, we will also hold couples' accounts and their guests' replies, and this notice explains how.
Who is responsible for your information?
Tying The Knot is the name of our service. The business behind it, which data protection law calls the controller, is:
- Legal name: [legal name]
- Trading as: Tying The Knot
- Address: [registered address]
- Registration number: [CRO number]
- Email: hello@tyingtheknot.ie
If you have a question about this notice or about your information, write to that address or use the contact page. This notice follows Irish law, including the Data Protection Act 2018, and the General Data Protection Regulation (GDPR).
What does this website collect today?
The early-access form
The form on the get started page asks for your email address and, if you want to give it, your wedding month. You tick a box to say you agree to hear from us. We also keep the time we received your request and the wording of the consent you agreed to, so that we can show that you agreed.
We do not ask for your name, phone number, postal address, exact wedding date or payment details.
We use your email address, and your wedding month if you gave it, for one purpose: to email you when ordering opens. Our legal basis is your consent. You can withdraw it at any time, as easily as you gave it, by emailing us. Withdrawing does not affect anything we did before.
The website does not store your details itself, and there is no database. The form passes them to Resend, an email service, which sends one email to our inbox. That email is the only copy we make ourselves. Resend and our email provider also keep records of it, as described below.
To stop automated abuse, the form has a hidden field that only software fills in, and a limit on how often one internet connection can send it. The limit counts requests by IP address in the server's temporary memory. The address is not saved to a database or added to the email.
Emails you send us
If you email us, we receive your email address, your message and anything you attach. We use them to reply and to keep a record of what we said. Our legal basis is our legitimate interest in running the business and answering people who write to us.
Technical details your device sends
When your device asks for a page, our host, Vercel, receives the technical details of that request: your IP address, the page you asked for, the time, and your browser and device type. It cannot send you the page without them. Vercel keeps request logs for a short time. Its documentation gives between one hour and 30 days, depending on the plan (checked October 2026).
We use these details to keep the site working and secure. Our legal basis is our legitimate interest in doing that. You can object to this (see the section on your rights below).
Google Search Console and Bing Webmaster Tools
We use Google Search Console and Bing Webmaster Tools. They are free tools for people who run websites. They show us how our pages appear in Google and Bing results: which searches led to a page, how often it was shown and how often it was clicked. The figures are totals, not a list of people, and they come from Google's and Microsoft's own search services.
Search Console can also show how fast our pages load, using anonymised timings that Google gathers from real visitors' browsers. That happens in the browser, not through anything on our site, and we cannot see who the visitors were.
To prove to Google and Microsoft that the site is ours, we add a short verification code, either to our domain's settings or as a hidden tag in a page's code. Neither one runs a script or sets a cookie on your device. What Google and Microsoft collect through their own search services is covered by their own privacy notices.
Cookies and similar technologies
This site sets one cookie, only when you sign in, has no analytics and shows no advertising. The cookie policy has the detail.
The example invitations
The examples open on their own addresses, as separate websites. Their RSVP forms are demonstrations: nothing you type into them is sent anywhere. When an example loads a typeface, a map or a video from another company, that company receives your device's address, as the cookie policy explains. Other websites that we link to have their own privacy practices.
What will we collect once ordering opens?
Ordering is not open yet. This part describes what we plan to do.
Couples
When a couple orders, we will hold:
- your names, email address and sign-in details;
- the details of your day: the date, venue, schedule, dress code, accommodation and the words you want on your invitation;
- your answers to our guided questions, typed or as voice notes, which we turn into text so that we can use them;
- the photos you upload (we tell you how each one is used);
- your order, what you paid, and the messages between us.
We use these to make, host and look after your invitation, your dashboard and your table plan. That is the contract between us, and it is our legal basis.
We also use some of the details to keep accounts secure and to answer your questions, which is our legitimate interest, and to keep the order and payment records that tax law requires, which is a legal obligation.
A payment provider takes your payment. We will name it here before ordering opens.
Guests
Guests do not need an account. They open the couple's link and reply for their household. For each person, the reply form collects:
- their name;
- whether they are coming;
- their meal;
- any dietary needs or allergies;
- a song request for the dance floor.
Replies for children are given by an adult in the household.
For guests' replies, Tying The Knot decides what the form asks and how the answers are stored, so Tying The Knot is the controller of that information. The couple sees the replies through their dashboard and uses them to plan their wedding.
For names, whether someone is coming, meal choices and song requests, our legal basis is legitimate interests. The couple and Tying The Knot both have a reasonable interest in planning the day, and a guest who replies expects these details to be used for that.
Dietary and allergy answers can reveal information about a person's health. The law gives health information extra protection and treats it as special category data (GDPR, Article 9). We only collect it with the guest's explicit consent, so the form asks for that consent before it takes these answers. A guest can reply without giving any of them, and can ask us to remove them later.
Who sees a guest's reply:
- the couple, through their private dashboard: every reply as it is sent, the guest list by household, the dietary and allergy list with each guest's table, and the song list for their DJ or band;
- the venue or hotel, only if the couple downloads their table plan and sends it. The spreadsheet has each guest's name, table, and dietary and allergy needs. What the couple does with a copy they download is up to them;
- the services that help us run Tying The Knot, listed below.
We use guests' replies only for the couple's wedding. We do not sell them or use them to market to guests.
Who else handles your information?
Today, three services help us run this website:
- Vercel hosts the site and runs the code behind the form.
- Resend sends the email from the form to us.
- Our email provider hosts the inbox for hello@tyingtheknot.ie.
Couples' accounts and everything under them are stored by Neon, our database provider, in its Frankfurt data centre, and the site runs on Vercel. We will name the services for payments, photos, voice notes and the AI tools here as each is added.
We do not sell your information. We share it only with these services, with the couple (for guests' replies) and where the law requires it. Vercel and Resend use other companies to provide their services, and you can read their data processing terms on their websites: Vercel and Resend.
Is your information sent outside the European Economic Area?
Some of it can be. Vercel and Resend both say their main processing is in the United States. Both use the European Commission's standard contractual clauses (standard contract terms for transfers of this kind), and both say they take part in the EU-US Data Privacy Framework. The Commission adopted its decision that this framework gives adequate protection on 10 July 2023.
Resend offers a sending region in Ireland, but says it stores its account data, including details of the emails it sends and its logs, in the United States whichever region is used. Email us if you would like to know more about these safeguards.
How long do we keep it?
- Early-access details: only for as long as we need them to tell you when ordering opens and to show that you agreed. If you ask us to delete them sooner, we will.
- Emails you send us: for as long as we need them to deal with your message and keep a record of it.
- Technical logs: Vercel keeps them for between one hour and 30 days, depending on its plan. Resend's pricing page lists 30 days of data retention on its plans.
- Order and payment records: six years, because Revenue says business and VAT records must be kept for that long.
- Couples' accounts, photos and voice notes: while the site is online, which is 12 months from the day it goes live, or longer if you buy extended hosting. After that we delete them [retention period to be decided].
- Guests' replies, including dietary and allergy answers: we delete them [retention period to be decided] after the wedding.
- Guests' photos (only if the couple chooses the guest photos extra): a guest decides what to add, and the photos are shown only in the couple's private dashboard. They are kept while the site is online, 12 months from the day it goes live, so the couple can download them, and then deleted [retention period to be decided].
How do we keep it safe?
We collect as little as we can. If a breach of the information we hold has to be reported, we will tell the Data Protection Commission within 72 hours of becoming aware of it and, where the risk to people is high, tell them without undue delay.
What are your rights?
Under the GDPR and the Data Protection Act 2018, you have the right to:
- ask for a copy of the information we hold about you;
- have anything inaccurate corrected;
- have your information deleted;
- ask us to restrict how we use it;
- object to us using it, where our legal basis is legitimate interests;
- receive the information you gave us in a format you can reuse, where we use it because you agreed or because of a contract;
- withdraw your consent at any time. Withdrawing does not affect what we did before.
Some of these rights apply only in certain situations. To use any of them, or to stop hearing from us, email hello@tyingtheknot.ie. We may need to check that the request comes from you. We will reply without undue delay and within one month. That can be extended by up to two further months if your request is complex or we have many requests at once.
If you are a guest, you can ask us to show, correct or remove your reply, or only its dietary and allergy part.
How do you complain?
If you are unhappy with how we have handled your information, please tell us first so that we can try to put it right. You can also complain to the Data Protection Commission, Ireland's data protection regulator. It usually asks that you have raised the matter with the organisation first. You can complain online through the form on its contact page. It does not take complaints by phone.
Children
This website is for couples planning a wedding and is not aimed at children. The digital age of consent in Ireland is 16 (Data Protection Act 2018, section 31), so please do not use the early-access form if you are under 16.
Changes to this notice
We will update this notice when what we do changes. Before ordering opens we will update the parts about couples and guests and name each service that handles their information. This notice was last updated on 12 October 2026.
Sources
Each source was last checked on 12 October 2026.
- Data Protection Commission: contact us, for how to make a complaint
- Data Protection Commission: complaints handling for individuals
- Data Protection Commission: personal data breach notification, for the 72 hours
- Data Protection Commission: special category data, for health data
- General Data Protection Regulation, Articles 7, 9 and 12
- Data Protection Act 2018, section 31, on the digital age of consent
- European Commission: adequacy decisions, for the EU-US Data Privacy Framework decision of 10 July 2023
- Vercel: data processing addendum, last updated 17 March 2026, and Vercel privacy notice, 1 June 2026
- Vercel: runtime log retention
- Resend: data processing addendum, sending regions and pricing
- Google Search Console, how site ownership is verified and the Core Web Vitals report
- Bing Webmaster Tools: add and verify a site and search performance
- Revenue, on keeping records for six years: VAT records and business records