1. What this policy covers
This Privacy Policy applies to weddingwala.pk and any related apps or services operated by Wedding Wala. It covers customers, vendors, and visitors. By using Wedding Wala you agree to the practices described here. If you do not agree, please do not use the platform.
2. Information we collect
From customers
- Account data — name, email, phone number, password (hashed).
- Booking data — event date, vendor selections, guest count, message threads with vendors.
- Payment records — the amount, the date, the method you tell us you used, the transaction reference you enter and any payment screenshot you upload for the vendor to check. We do not process card payments and never see or store card numbers, CVV or expiry dates — you pay the vendor directly, into their own bank account or mobile wallet, and we record what they confirm receiving.
- Reviews and photos — content you publish about vendors after a completed booking.
- Device and usage data — IP address, browser type, pages visited, timestamps. Used for fraud prevention, analytics, and service improvement.
From vendors
- Business data — business name, registered name, address, NTN, bank details, portfolio photos, services and pricing.
- Identity verification — CNIC and supporting documents required by Pakistani regulations and our Know-Your-Vendor (KYV) policy.
3. How we use your information
- To create and operate your account.
- To process bookings, payments, refunds, and disputes.
- To send transactional messages — booking confirmations, reminders, payment receipts. You cannot opt out of essential transactional messages while you have an active booking.
- To send marketing communications you have opted into. You can unsubscribe at any time via the link in every marketing email.
- To detect fraud, abuse, and breaches of our Terms of Service or Acceptable Use Policy.
- To meet our obligations under Pakistani law (SBP, FBR, FMU AML/CFT reporting where required).
4. Who we share your information with
Wedding Wala does not sell your data. We share data only with:
- Vendors you book — we share the minimum needed to fulfil the booking (name, contact, event date).
- Payment processors — none. Money moves directly between you and the vendor through your own banks or wallet providers; we are not in that path and take no custody of your funds.
- Infrastructure providers — Railway (database & hosting), Vercel / Cloudflare (hosting), AWS (file storage), email delivery (e.g. Postmark or AWS SES), SMS providers (e.g. JazzCash SMS gateway).
- Analytics providers — Google Analytics, Microsoft Clarity. We use anonymized / pseudonymized data where possible.
- Law enforcement and regulators — when required by valid Pakistani legal process.
Each processor is bound by a data-processing agreement. We do not transfer data to processors outside the categories above.
5. Cookies and tracking
We use cookies for authentication, preferences, fraud prevention, and analytics. Read our Cookie Policy for the full list and your opt-out controls.
6. Data retention
- Account data — retained while your account is active, plus 7 years (Pakistani tax / accounting law).
- Booking data — retained for 7 years after the event date.
- Marketing preferences — retained until you unsubscribe.
- Reviews — retained indefinitely (they are public-facing content).
- Logs / device data — typically 13 months, longer for unresolved fraud cases.
7. Your rights
You can:
- Access — request a copy of the personal data we hold about you.
- Correct — update inaccurate data via your account settings or by emailing us.
- Delete — request deletion of your account and personal data, subject to retention obligations under Pakistani law (e.g. tax records).
- Object — opt out of marketing at any time.
- Complain — to Wedding Wala or to the relevant Pakistani data-protection authority once Pakistan's data protection law is in force.
To exercise these rights email info@weddingwala.pk. We respond within 30 days.
8. Security
We use HTTPS everywhere, hashed passwords (bcrypt), encrypted database at rest, role-based access control, and audit logging on sensitive actions. No system is perfectly secure. Report security issues to info@weddingwala.pk.
9. Children
Wedding Wala is not intended for users under 18. We do not knowingly collect data from children. If you believe a child has created an account, contact us and we will delete it.
10. Changes to this policy
We may update this policy. Material changes will be announced via email and a banner on the site at least 14 days before they take effect. The "Last updated" date above always reflects the current version.
11. Contact
Privacy questions: info@weddingwala.pk. Postal address — see Contact.