1. Who We Are (Data Controller)
B² Wedding ("we", "us", "our") is a wedding management platform operated in Ghana. We act as the Data Controller for all personal information collected through this website (b2wedding.com) and our mobile application.
As a Data Controller, we are responsible for registering with the Data Protection Commission (DPC) of Ghana as required by Section 72 of Act 843, and for ensuring that all data processing activities comply with the Act's data protection principles.
Contact
Email: [email protected]
Website: b2wedding.com
Country of Operation: Republic of Ghana
2. Personal Data We Collect
We collect only the personal data necessary to provide our wedding management services. The table below details what we collect, from whom, and why.
| Category | Data Collected | Who It Relates To | Purpose |
|---|---|---|---|
| Account data | Full name, email address, password (stored as a secure hash) | Couple / Wedding admin | Account creation, authentication, and platform access |
| Wedding details | Couple names, wedding date, ceremony and reception venues, address, dress code, playlist URLs | Couple / Wedding admin | Personalising the invitation and guest experience |
| Profile photo | Avatar image uploaded by admin users | Couple / Wedding admin | Display within the admin dashboard |
| Guest data | Full name, email address, phone number, dietary requirements, RSVP response, personal message, unique access code (B2-XXXX-XXXX), plus-one details | Wedding guests | Managing guest lists, sending invitations, and tracking RSVPs |
| Wedding photos | Images uploaded by guests; EXIF metadata embedded in photos (camera model, GPS coordinates if present, timestamp) | Wedding guests | Building the shared wedding photo album |
| Location data | Ceremony and reception venue name, physical address, GPS coordinates (latitude and longitude) — entered manually by the couple | Couple / Wedding admin | Displaying venue information and map links on the guest invitation |
| Financial data | Mobile Money number and account name, vendor payment amounts and descriptions, budget entries | Couple / Wedding admin | Budget tracking and gift collection via MoMo |
| Payment data | Transaction reference, amount, payment status. Card and MoMo payment credentials are handled directly by Paystack and are never stored on our servers. | Couple / Wedding admin | Processing Premium plan upgrade payments |
| Visit & usage data | IP address, pages visited, visit timestamps, browser type | Wedding guests | Guest visit analytics for the couple (e.g. "John opened the invitation on 3 March at 10:04am") |
| Invite message template | Custom WhatsApp / iMessage invite text written by the couple | Couple / Wedding admin | Generating personalised guest invitation messages |
3. Legal Basis for Processing
Under the Data Protection Act, 2012 (Act 843), we process your personal data on the following lawful bases:
- Contractual necessity (Section 17(b)): Processing is necessary to provide the wedding management services you have registered for — including managing guests, photos, budget, and vendors.
- Legitimate interests (Section 17(f)): We process visit data to provide guest analytics to the couple, and to maintain platform security and integrity.
- Consent: Where guests upload photos or submit personal messages, they do so voluntarily with the understanding that this data will be visible to the couple and, where approved, to other guests on the shared album.
- Legal obligation: We may process data where required to comply with applicable Ghanaian law.
4. How We Use Your Data
- Creating and managing your wedding space on the platform
- Sending guest invitation emails containing access codes and QR codes
- Displaying the guest invitation, photo album, and gift collection page
- Providing the couple with guest visit analytics and RSVP statistics
- Processing Premium plan upgrade payments through Paystack (the Premium price is subject to change at any time — the price applicable at the time of your payment is what you will be charged; see our Terms & Conditions for full details)
- Sending transactional emails (password reset, registration confirmation)
- Maintaining platform security, preventing fraud, and resolving disputes
- Improving our services based on aggregated, anonymised usage patterns
We do not use your personal data for advertising, profiling, or automated decision-making. We do not sell your data to any third party.
5. Data Sharing and Third Parties
We share personal data only where strictly necessary. The following third-party service providers may process data on our behalf:
| Third Party | Location | Purpose | Data Shared |
|---|---|---|---|
| Paystack | Ghana / Nigeria | Processing Premium plan upgrade payments | Email address, transaction reference, amount |
| Hetzner Cloud | Helsinki, Finland (European Union) | Secure server storage of wedding photos, uploaded files, and the platform database | All data stored on the platform, including photo files and associated metadata |
| Email service provider | EU / USA | Sending guest invitation emails, password resets, and system notifications | Guest name, email address, access code |
| Google Fonts | USA | Delivering web fonts (Cormorant Garamond, Jost) for the website | IP address (standard web request — no personal profile created) |
All third-party providers are selected on the basis of their security standards and data protection commitments. We do not share your personal data with any other parties without your explicit consent, unless required to do so by Ghanaian law or a lawful court order.
6. International Data Transfers
The B² Wedding platform and all associated data — including wedding photos, guest records, and account information — are hosted on Hetzner Cloud servers located in Helsinki, Finland. Finland is a member state of the European Union and is subject to the General Data Protection Regulation (GDPR), which provides a level of data protection equivalent to or stronger than the standards required by Ghana's Data Protection Act, 2012 (Act 843).
This means your personal data benefits from the protections of both Ghanaian law and European Union data protection law whilst stored on our servers. We have selected Hetzner Cloud specifically for its strong data protection commitments and European regulatory oversight.
Where other service providers (such as email delivery services) may process data outside Ghana and the EU, we ensure appropriate contractual safeguards are in place consistent with Act 843.
7. How Long We Keep Your Data
| Data Type | Retention Period |
|---|---|
| Account data (couple / admin) | For as long as your account is active. Deleted within 30 days of account deletion request. |
| Guest data (names, emails, access codes) | Retained for the duration of the wedding account. Deleted when the account is closed. |
| Wedding photos | Retained for a minimum of one (1) year from your wedding date (or from account creation if no wedding date is set). After this period, photos may be permanently deleted without notice to manage hosting costs. Rejected photos deleted after 7 days; soft-deleted photos purged after 30 days. We accept no liability for photo loss after the one-year retention period. See our Terms & Conditions (Section 8) for full details. |
| Guest visit logs (IP, timestamps) | Retained for 12 months, then automatically purged. |
| Payment transaction records | Retained for 7 years for legal and audit compliance purposes. |
| Password reset tokens | Expire after 60 minutes and are purged on use. |
8. Your Rights Under Act 843
The Data Protection Act, 2012 (Act 843) grants you the following rights in relation to your personal data:
To exercise any of these rights, email us at [email protected]. We will respond within 21 days as required by Act 843. In complex cases we may extend this by a further 21 days with prior notice.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, destruction, or disclosure, in accordance with Section 17(g) of Act 843. These include:
- Passwords stored as irreversible cryptographic hashes (bcrypt)
- All data transmitted over encrypted HTTPS connections (TLS)
- API authentication using time-limited Sanctum tokens
- Guest access restricted to unique, personal access codes (B2-XXXX-XXXX)
- Photo uploads validated for file type and size before storage
- Database access restricted to application servers only
- Cloud photo storage with private-by-default access controls
While we take reasonable precautions, no system is completely secure. In the event of a data breach that poses a risk to data subjects, we will notify affected users and the Data Protection Commission in accordance with our obligations under Act 843.
B² Wedding shall not be liable for the loss, corruption, or unavailability of personal data — including wedding photos — arising from events beyond our reasonable control, including but not limited to server outages, cyberattacks, natural disasters, infrastructure failures, or other force majeure events. Please refer to Section 9 (Force Majeure) of our Terms & Conditions for a full description of excluded circumstances.
10. Guest Data and Couple Responsibility
When couples add guests to their wedding on B² Wedding, they act as a secondary data controller for that guest's personal information. Couples are responsible for:
- Ensuring they have a legitimate basis for sharing guest contact details with this platform (e.g. the guest has RSVP'd or been personally invited)
- Informing guests that their personal data (name, email, phone) will be used by B² Wedding to send their invitation and manage their access
- Not adding personal data of individuals without their knowledge or consent
Guests who wish to have their data removed should contact the couple directly. Couples may delete any guest from their dashboard at any time.
11. Photos and EXIF Metadata
When guests upload photos, those images may contain embedded EXIF metadata — including the device model, the date and time the photo was taken, and in some cases, GPS location coordinates recorded by the camera.
B² Wedding extracts and stores this metadata alongside the photo record for the couple's reference (e.g. to show which moment a photo was captured). GPS coordinates, if present, are stored but are not displayed publicly — they are accessible only to the couple's admin account.
If you do not wish to share location data, you can disable location tagging in your device's camera settings before uploading photos.
12. Cookies and Session Data
B² Wedding uses minimal cookies solely to operate and secure the platform. Below is a full account of the cookies we use and why. For a comprehensive overview, including your rights under international law, see our Cookie Policy.
12.1 Cookies We Use
| Cookie | Purpose | Type | Expiry |
|---|---|---|---|
| Session cookie | Maintains your logged-in state | Strictly necessary | On browser close or logout |
| CSRF token | Protects form submissions against cross-site request forgery | Strictly necessary (security) | On browser close |
| Guest access session | Stores your guest access code to avoid re-entering it on each page visit | Strictly necessary (functionality) | On browser close |
We do not use advertising cookies, tracking pixels, or third-party analytics cookies.
12.2 Google Fonts
This platform uses Google Fonts to display text. When your browser loads a page, it may make a request to Google's servers to retrieve font files. As part of this standard browser process, your IP address may be transmitted to Google. This is a routine technical interaction — Google does not use this data to track your activity on our platform, and we do not receive or store any data from this interaction.
Google's handling of any data collected through this process is governed by Google's Privacy Policy, available at https://policies.google.com/privacy. By continuing to use this platform, you acknowledge this limited third-party data interaction.
12.3 No Cookie Consent Banner Required
Because all cookies used by B² Wedding are strictly necessary for the platform to function and for your security, no cookie consent banner is displayed. Strictly necessary cookies do not require your prior consent as they are essential to deliver the service you have requested.
12.4 Managing Cookies
You may disable or delete cookies through your browser settings at any time. Please note that disabling cookies may affect your ability to use certain features of the platform, including staying logged in and submitting forms securely. We recommend keeping cookies enabled for the best experience.
12.5 Changes to Our Cookie Use
If we introduce any new cookies in the future — particularly any that are not strictly necessary — we will update this section and, where required, seek your consent before placing them.
13. Children's Privacy
B² Wedding is not directed at children or minors under the age of 16. We do not knowingly collect personal data from individuals under 16. If you believe a child's/minor's data has been submitted to our platform without appropriate consent, please contact us at [email protected] and we will delete it promptly.
The insertion on the platform of personal data of children/minors and, in particular, of their image, implies the express and unreserved declaration of the user who inserts them:
- That he/she holds or has the consent of the holder of the rights necessary to use the data or image of the child/minor.
- That the insertion of the aforementioned data in no way harms the minor or violates any of his or her rights.
- That the user expressly exonerates b2wedding.com from any possible claim derived from this fact, assuming full responsibility for any such claim.
14. Data Protection Commission of Ghana
If you believe your data protection rights have been violated and we have not adequately addressed your concern, you have the right to lodge a complaint with Ghana's data protection supervisory authority:
Data Protection Commission
Ghana
Website: www.dataprotection.org.gh
Email: [email protected]
15. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our services, technology, or legal obligations. When we make material changes, we will update the effective date at the top of this page and, where appropriate, notify registered users by email.
Continued use of B² Wedding after any changes constitutes acceptance of the updated policy. We encourage you to review this page periodically.
16. Contact Us
For any privacy-related queries, data access requests, or concerns, please contact our privacy team:
B² Wedding — Privacy
Email: [email protected]
Website: b2wedding.com
This policy is governed by and construed in accordance with the laws of the Republic of Ghana. Any disputes arising from this policy shall be subject to the jurisdiction of the courts of Ghana.