Unna
Structural draft

This document is a template with the suggested structure. The substantive content must be drafted and validated by the customer's legal team before publication. The [PLACEHOLDER] markers indicate information that must be completed.

Legal document

Privacy Notice

Last updated: [DATE] · In compliance with the Mexican LFPDPPP and its Regulation.

1. Identity and address of the data controller

[STUDIO LEGAL NAME], with address at [FULL ADDRESS, INCLUDING NEIGHBORHOOD, CITY, STATE AND POSTAL CODE], is responsible for the processing of personal data collected through this site.

2. Personal data collected

For the operation of the service, the following data is collected:

  • From the couple: full name, email address, photograph, and voluntary biographical text.
  • From guests: name, email address, optional message, contribution amount.
  • Payment data: processed directly by Stripe; this site does not store card or bank account information.
  • Technical data: IP address, browser and device type for security and analytics purposes.

3. Purposes of processing

Data is used for the following primary purposes, necessary for the provision of the service:

  • Create, manage and publish the personalized wedding site.
  • Process and record guest contributions.
  • Send receipts and notifications related to each contribution.
  • Handle support requests and operational communication.

Secondary purposes, which require express consent:

  • [DEFINE: USE FOR MARKETING, TESTIMONIALS, CASE STUDIES, ETC.]

4. Data transfers

To operate the service, data may be processed by providers acting as data processors: [LIST: STRIPE FOR PAYMENTS, SUPABASE FOR STORAGE, RESEND FOR EMAIL, VERCEL FOR HOSTING]. These providers act under contractual clauses guaranteeing data protection. No additional transfers are made without prior consent.

5. ARCO rights

Every data subject has the right to know (Access), modify (Rectification), delete (Cancellation) or object to the processing (Opposition) of their personal data. To exercise any of these rights, send a request via email to:

[PRIVACY DEPARTMENT EMAIL]

The request must include full name, copy of official ID, clear description of the right to be exercised, and contact information for response. The controller will respond within 20 business days.

6. Cookies and similar technologies

This site uses strictly necessary cookies for the operation of the service and, optionally, analytics cookies. The detail and consent mechanism are shown on first entry. [DEFINE ANALYTICS PROVIDER AND CONSENT PROCESS].

7. Changes to the privacy notice

Any modification to this notice will be published on this same page, indicating the date of the last update. Periodic review is recommended.

8. Acceptance

Use of this site implies knowledge and acceptance of this privacy notice. If you do not agree with its terms, you must refrain from providing personal data.