Privacy Policy

Last updated: April 16, 2026

Always & Forever ("I", "me", "my") operates the website alwaysandforever.ca and all associated subdomains. This policy explains how I collect, use, and protect your personal information in accordance with Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).

Information I Collect

From couples (my clients)

  • Names and contact information (email address)
  • Wedding details (date, venue, story, timeline)
  • Photos and media you provide for your wedding website
  • Payment information (processed securely through a third-party payment provider)

From wedding guests

  • Name and email address (when submitting an RSVP)
  • RSVP responses (attendance, meal choices, dietary restrictions, plus-ones)
  • Guestbook messages
  • Photos uploaded to the gallery

From website visitors

  • Information you provide when contacting me by email (name, email, wedding date, message)
  • Basic analytics data (pages visited, referral source) collected through privacy-respecting analytics

Collected automatically

  • Account authentication data when you sign in
  • Security verification data processed by CAPTCHA services to prevent abuse
  • Standard server logs (IP address, browser type, pages visited)

How I Use Your Information

  • To build and maintain your custom wedding website
  • To send email invitations and reminders on your behalf (with your consent)
  • To process RSVPs and manage your guest list
  • To respond to your inquiries
  • To improve the service

I will never sell, rent, or share your personal information with third parties for their marketing purposes.

Consent

I collect personal information only with your knowledge and consent. By creating an account, you consent to the collection and use of your information as described in this policy. By using the RSVP and guestbook features on a wedding website, guests consent to their information being shared with the couple who owns that site.

Email Communications (CASL Compliance)

In compliance with Canada's Anti-Spam Legislation (CASL), I will only send commercial electronic messages with your express consent. This includes email invitations, reminders, and any marketing communications. Every message includes sender identification, contact information, and a clear way to unsubscribe. You can withdraw your consent at any time, and I will process opt-out requests within 10 business days.

Transactional emails (such as account verification, password resets, and RSVP confirmations) are sent as needed to operate the service and do not require separate consent under CASL.

Data Storage and Security

Your data is stored securely using industry-standard cloud infrastructure. While I use Canadian services where possible, some data may be processed or stored on servers located in the United States or other jurisdictions through the third-party service providers listed below. I use SSL/TLS encryption for all data transmission and take reasonable measures to protect your information from unauthorized access, disclosure, or destruction. However, no method of transmission over the internet is 100% secure.

In the event of a data breach that poses a real risk of significant harm, I will notify affected individuals and the Office of the Privacy Commissioner of Canada as required by PIPEDA.

Data Retention

Wedding website data (including guest lists, RSVPs, photos, and guestbook messages) is retained for up to 6 months after the wedding date. After that, personal data is deleted unless you request otherwise.

Email inquiries are retained only as long as needed to respond to your question.

When you delete a photo from your photo library, the underlying file is kept for up to 30 days before being permanently removed from our servers. This short window lets us recover photos from accidental deletions and avoid re-uploading the same file twice.

Third-Party Service Providers

I use third-party service providers for hosting, database storage, authentication, email delivery, payment processing, and security verification. Each provider has its own privacy policy. I only share the minimum information necessary for each service to function. I do not store your credit card information. I do not sell your data to any third party.

Cookies and Tracking

This site uses cookies that are strictly necessary for the service to function, including authentication session cookies and security tokens. I do not use advertising cookies or third-party tracking pixels. Some third-party services used for security verification may set their own cookies.

Children's Privacy

This service is not directed at children under 13. I do not knowingly collect personal information from children. If you believe a child has provided me with personal information, please contact me at hello@alwaysandforever.ca and I will delete it promptly.

Client Wedding Site Privacy

Wedding websites built on subdomains of alwaysandforever.ca are private by default. They are not indexed by search engines and can be further protected with password or access code protection. RSVP responses, guest lists, and personal information are never publicly accessible.

Your Rights

Under PIPEDA, you have the right to:

  • Know what personal information I hold about you
  • Request corrections to your personal information
  • Withdraw your consent for the collection or use of your information
  • Request deletion of your personal information

International Users

If you are located outside of Canada, please be aware that your information will be processed and stored in Canada. By using this service, you consent to the transfer of your information to Canada. I respect privacy rights under applicable laws in your jurisdiction.

Changes to This Policy

I may update this policy from time to time. Changes will be posted on this page with an updated date. Continued use of the service after changes constitutes acceptance of the revised policy.

Contact

If you have questions about this policy or want to exercise your privacy rights, contact me at hello@alwaysandforever.ca.

Get Started