TRANSPARENCY COMES FIRST

Privacy notice

Updated on 3 November 2026

This notice describes how we process data on Una Promessa, the portal connecting couples and wedding professionals. It applies to browsing, accounts, applications, portal conversations and participation in the blog.

Couple profiles and reviews received

Your profile can state whether you are the bride or groom, the couple’s names and wedding date. These details form the account name. Publication is a separate choice: if enabled, both names and the date will be readable by anyone, together with approved supplier reviews and your replies. Agree with the other person before publishing their details. You may make the profile private again in settings: the page and reviews will no longer be publicly accessible. Existing accounts remain private until this option is enabled.

Reviews may be submitted by a supplier linked to one of your enquiries, after the wedding date and with a confirmed portal booking. The team checks reviews and replies before publication. You may report a review: the reason and outcome are private to those concerned and the team. We retain versions and moderation outcomes to manage the service and disputes. Email, phone, conversations, budget and guests are not included in the public profile. The bride/groom choice remains in account settings.

When a review is published, we notify the couple’s verified account email. When their reply is approved, we notify the account of the supplier who wrote the review. Notifications contain a profile link, without the text of the review, reply or reports. We retain a delivery-outcome log to avoid duplicates and handle errors.

Who manages the data

The data controller is VAGUE SRL, with registered office at Via Santa Caterina da Siena 38/G, 22066 Mariano Comense (CO), Italy. VAT number, tax code and Business Register number: 14167470963; REA CO – 433784. For data-related requests: vaguesrl@pecdotcom.it (certified email / PEC).

What data we collect and why

• Account and profile: email, name, user type and, if chosen, region and wedding date. Wix manages passwords, email verification and sessions. We use these details to create and maintain your personal space, on the basis of performing the requested service (Article 6(1)(b) GDPR).
• Enquiries and conversations: selected supplier, name, account email, optional phone number, wedding date, guest numbers, event location and region, optional indicative budget, times, duration, requested service, preferences and messages. These allow us to forward the enquiry and enable replies, on the basis of pre-contractual steps and the requested service. Do not enter health data, identity documents or unnecessary confidential information.
• Quotes and results: detailed quotes, pricing items, VAT, extras, terms and previous versions are available to the recipient couple and supplier involved. Couples may compare received offers; suppliers cannot access other businesses’ offers. For portal enquiries, suppliers may privately record sales status, confirmation date, agreed value and notes, and identify tests to exclude from statistics. These details support contact management and results for the requested service; they do not represent payments verified by the portal. Private notes are not shown to the other party in the interface, subject to the handling of data-subject rights described in this notice.
• Professional listings: business, category, region, city, description, indicative prices, photos, website and management contact details. Listings are assessed and, if approved, made public. Contact details entered in the professional form remain in the private area and are not automatically shown in the directory. The legal basis is performance of the service.
• Professional subscriptions: business details and VAT number, regions and category, consent, deadlines, order identifiers and payment status. These are used to manage subscriptions and cancellations on the basis of the requested contract, and for administrative obligations required by law. Checkout, payment methods and recurring charges are managed by Wix and its payment providers; the portal does not store full card numbers or security codes.
• Security and operation: IP address, technical browsing data, session data, anti-spam checks and activity records. These protect accounts, prevent abuse and resolve errors, based on the legitimate interest in portal security (Article 6(1)(f) GDPR).
• Compliance and protection of rights: we retain information needed for legal obligations (Article 6(1)(c) GDPR) or to handle disputes and defend rights (Article 6(1)(f) GDPR).

Required data is marked on forms: without it, we cannot complete registration, publish a listing or forward the relevant enquiry. We do not use messages for personalised advertising. Promotional communications to suppliers require the separate choice described below; portal registration does not activate a newsletter.

Supplier invitation requests and optional communications

The Founding suppliers form collects the business name and email needed to respond to the request for an invitation and information; category and region are optional. VAGUE SRL uses these details to manage the request and related pre-contractual steps (Article 6(1)(b) GDPR). Requesting an invitation does not create an account, reserve a promotion or activate a subscription.

Only if you separately opt for news and offers by email do we also process your address for Una Promessa’s promotional communications to suppliers, on the basis of consent (Article 6(1)(a) GDPR and Article 130 of the Italian Privacy Code). This choice is optional, not preselected and does not affect the invitation request. We do not share contact details with other suppliers for their marketing.

We send one confirmation email for the request, with a personal link valid for 72 hours. Opening the link is not enough: the confirmation button must be pressed. Until then, the promotional choice remains unconfirmed and is not used for campaigns. After confirmation, we display the invitation on the site. Keep the link private: it also allows the request to be cancelled and promotional communications revoked without signing in. You may always contact info@unapromessa.com or the controller’s privacy contact.

We retain the request, date, originating page, text and version of accepted information, optional choice, confirmation date and any revocations to manage the invitation and demonstrate the choices made. We do not infer consent from silence. Unconfirmed links expire after 72 hours and do not enable promotions. Request data is kept for as long as needed to manage it; marketing data until consent is revoked or the purpose ends. After revocation, we may retain evidence of choices and the minimum information needed to respect objections and protect rights for the necessary period. You may request access, correction and deletion through the controller’s contacts.

Requests and consent evidence are visible only to authorised administrators in the Wix records. The confirmation email uses Brevo, already used for portal service notifications, with info@unapromessa.com as sender. We record technical sending status without treating service acceptance as proof of reading or delivery. Brevo may add a technical pixel to emails. We have enabled anonymisation of opens and clicks: these events contribute to aggregate service statistics and are not associated with individual contacts in the relevant reports. We do not use them to profile recipients, infer consent or confirm a request: confirmation requires the explicit button on the site. Any subsequent promotional email must offer a simple way to revoke consent.

Couples’ budgets, checklists and invitations

The “Our wedding” space stores names and wedding date, budget, expense estimates, agreed amounts, recorded payments, deadlines and notes. These details stay in the account that enters them and are not shared with suppliers or guests. The user requests this service to plan the wedding. Recorded payments are user statements, not transactions executed or verified by the portal.

If you enable email reminders, we use your verified account address and task titles and dates to send the requested summary through the portal’s email service. Emails do not include private notes, the budget or guest list. We record the preference and technical delivery status to avoid duplicates and manage the service. Disable reminders from the checklist at any time; this preference does not activate promotional communications.

The digital invitation remains private until the couple explicitly publishes it. After publication, anyone with the link can read names, date, schedule, venues, addresses and information the couple chooses to share, and can forward the link. We ask search engines not to index these pages: this does not restrict them to identified recipients. Couples can unpublish the invitation or replace all links.

Personal invitations contain the name entered by the couple and maximum number of people. Without registering, the recipient can indicate attendance or absence and attendee count; we record the response date and acknowledgement of this notice. The personal link allows only that response to be viewed and edited, and it is visible to the couple’s account. We do not publicly show the guest list or other people’s replies. These forms do not collect guest emails, health information or dietary preferences. Couples must share only relevant data they are authorised to use and send links to the correct recipients.

Changes are recorded to maintain data consistency and manage simultaneous updates. Archiving an expense, task or personal invitation excludes it from active views; it does not delete its history. The contacts and rights below apply to deletion. Map links open an external service only when selected.

Journal comments and reactions

When you participate in the blog, Wix links comments and reactions to your account. Comment text, replies, profile name and any public image may be visible to anyone and indexed by search engines. Like counts are public; the interface does not display a list of people who reacted. Processing provides the participation feature you request. Do not include email, phone or confidential information in comments.

You may remove your comments and likes. The editorial team may moderate offensive contributions, advertising and abuse. For support, data access or deletion, use the privacy contact on this page: exports from the portal’s personal area do not necessarily include contributions stored in the Wix blog. Sharing features open external services only when selected; those services apply their own privacy notices.

Refer a supplier programme

If you participate, we retain the personal code, associated businesses, confirmation of terms, payment checks and reward references to manage the requested programme. The invited supplier confirms the association before starting the subscription. Referrers see the business name and reward status; they do not receive the new supplier’s contact details, card data or documents. The link code may be kept in the browser session for use on activation. No messages are sent to your address book. For access, correction or deletion of programme data, use the contacts in this notice. Programme terms.

Who can see the data

Approved listings, photos and any website link are public and may be indexed by search engines. Favourites and personal profiles remain in your account. An enquiry and subsequent replies are visible to the sending couple and the owner of the recipient listing. VAGUE SRL may access data through administration tools only for support, moderation, security and legal obligations.

Suppliers receiving an enquiry process contact details to respond and manage any contractual relationship under their own responsibility; ask for their applicable privacy notice before providing further data. Data may also be accessible to authorised staff, advisers and authorities where provided by law.

Supplier reviews and seating plans

If you review a supplier, we retain the linked enquiry, rating, chosen public name, text, confirmations provided and moderation outcomes. After approval, the chosen name, score, text and wedding month become public; the full date and identifiers of your account and enquiry are not shown in the public review. The supplier may reply, subject to separate moderation. You may edit the contribution, returning it for review, or withdraw it from the listing. Withdrawal does not delete earlier versions retained to manage the service and disputes: use the privacy contact for deletion. Do not include third-party personal data or sensitive information.

The seating planner stores table names, capacities, assignments linked to invited groups and any individual seat names in your private space. It uses replies already collected to distinguish confirmed and provisional attendance. This data does not appear in the public invitation and is not automatically shared with suppliers or guests. If you print or export the plan, keep it secure and share it only with those organising the reception.

Wedding-day timeline and private documents

The overview brings together data already in the couple’s space. The timeline stores times, places, instructions and contact details entered by the user. The document folder stores uploaded PDFs, titles, category, supplier and notes. This information is accessible in the account that entered it and is not published in the invitation or automatically shared with suppliers and guests. PDFs are stored as private files on Wix and downloaded through temporary links. Enter only documents and contact details needed for planning that you are authorised to keep; avoid health data and identity documents. Archiving hides an item from the main view without deleting it: use the contacts in this notice for deletion. Printed or downloaded copies must be kept secure and shared only with chosen recipients.

Technical services and transfers

For notifications of new enquiries, replies, quotes, published reviews and related replies, and requested checklist reminders, the portal may use Brevo, providing the verified email address and content necessary for the notification. Conversation notifications do not include private message text; reminders include only task titles and dates. We do not automatically enrol users in promotional campaigns. Information in the Brevo privacy policy.

If you choose “Continue with Google”, Google manages access to its account and Wix receives necessary identity data, such as email and name, according to the permissions shown. Social sign-in does not replace completing your profile and accepting the portal terms.

The portal uses Wix for hosting, data storage, account management, image uploads and technical authentication messages. Wix processes data under the agreements applicable to the service and may operate in countries outside the European Economic Area, with adequacy decisions or other GDPR safeguards, including standard contractual clauses. Information on Wix privacy policy and data processing agreement.

In registration forms and, where requested, sign-in forms, reCAPTCHA Enterprise verification uses Google services to prevent abuse. See the Google privacy policy e i Google terms. Links to professionals’ websites lead to services with their own privacy notices.

How long we keep data

Account data, favourites, listings and conversations are kept for as long as needed to manage the user relationship and open enquiries. You may request deletion at any time. Following a request, we remove or anonymise data no longer needed; we retain only what legal obligations or actual disputes require, for the period necessary for those purposes. Backups and security logs follow the provider’s technical cycles and are protected against ordinary access. Hiding a listing or closing a conversation does not delete its data.

Your rights

You may request access, correction, deletion, restriction and, where applicable, portability and objection to processing. Edit information and download a copy of portal data from your profile. For support or deletion, contact vaguesrl@pecdotcom.it, stating your account email without sending your password. We may ask for the minimum information necessary to verify identity.

We respond within GDPR deadlines, normally within one month. You may lodge a complaint with the Italian Data Protection Authority. We do not make decisions with legal effects based solely on automated processing.

For cookies and similar tools, see theinformativa cookie.

Sicurezza, segnalazioni e cancellazione

Nell’app puoi segnalare schede, foto, messaggi e preventivi. Conserviamo motivo, contenuto segnalato e stato della revisione in un archivio riservato alla gestione. L’autore segnalato non riceve l’identità del segnalante. Conserviamo i blocchi scelti per impedire nuovi contatti fra gli account. Puoi revocarli dalla pagina Sicurezza. Gli elementi necessari alla gestione di abusi o contestazioni sono conservati solo finché necessari a queste finalità.

Richiedi eliminazione account e dati · Gestisci blocchi e segnalazioni