1. Introduction
NikkahNest ("we", "us", or "our") is committed to protecting your privacy and ensuring the security of your personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
We comply with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018. By using our Platform, you consent to the collection and use of your information as described in this policy.
2. Data Controller
NikkahNest is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or our data practices, please contact us at privacy@nikkahnest.co.uk.
3. Information We Collect
We collect the following types of personal information:
3.1 Information You Provide
- Account Information: When you create an account, we collect your name, email address, and password.
- Contact Information: Phone numbers and email addresses provided when making booking enquiries.
- Vendor/Venue Information: Business details, service descriptions, pricing, images, and contact information submitted by listing partners.
- Communication Data: Messages and enquiries sent through our platform.
3.2 Information Collected Automatically
- Usage Data: Pages visited, features used, and interactions with the Platform.
- Device Information: Browser type, operating system, and device identifiers.
- Location Data: General location based on IP address to provide relevant search results.
4. How We Use Your Data
We use your personal information for the following purposes:
- Connecting Couples with Vendors: To facilitate communication between users searching for wedding services and venues or vendors offering those services.
- Account Management: To create and manage your user account, authenticate your identity, and provide customer support.
- Service Improvement: To analyse usage patterns and improve our Platform's functionality and user experience.
- Communications: To send you important updates about your account, enquiries, and relevant service announcements.
- Legal Compliance: To comply with applicable laws, regulations, and legal processes.
5. Legal Basis for Processing
Under the UK GDPR, we process your personal data on the following legal bases:
- Consent: Where you have given clear consent for us to process your personal data for specific purposes.
- Contract: Where processing is necessary for the performance of a contract with you (e.g., providing our services).
- Legitimate Interests: Where processing is necessary for our legitimate business interests, such as improving our services and preventing fraud.
- Legal Obligation: Where processing is necessary to comply with a legal obligation.
6. Third-Party Services
We use the following third-party services to operate our Platform:
- Supabase: We use Supabase for database storage, authentication, and file storage. Your data is stored securely on Supabase's infrastructure, which complies with industry-standard security practices. Supabase processes data in accordance with their privacy policy and applicable data protection regulations.
- Vercel: Our website is hosted on Vercel, which may process certain technical data for performance and security purposes.
- Analytics Services: We may use analytics tools to understand how users interact with our Platform.
We ensure that all third-party processors provide adequate safeguards for your personal data and comply with applicable data protection laws.
7. Data Sharing
We may share your personal information in the following circumstances:
- With Venues and Vendors: When you submit an enquiry, your contact details are shared with the relevant service provider to facilitate communication.
- Service Providers: With trusted third-party service providers who assist us in operating our Platform.
- Legal Requirements: When required by law, court order, or other legal processes.
- Business Transfers: In connection with a merger, acquisition, or sale of assets, where your data may be transferred as part of that transaction.
We do not sell your personal information to third parties for marketing purposes.
8. Data Retention
We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting, or reporting requirements. Account data is retained for the duration of your account and for a reasonable period thereafter to comply with legal obligations. You may request deletion of your data at any time by contacting us.
9. Your Rights
Under the UK GDPR, you have the following rights regarding your personal data:
- Right of Access: You can request a copy of the personal data we hold about you.
- Right to Rectification: You can request correction of inaccurate or incomplete data.
- Right to Erasure: You can request deletion of your personal data in certain circumstances.
- Right to Restrict Processing: You can request that we limit how we use your data.
- Right to Data Portability: You can request a copy of your data in a structured, machine-readable format.
- Right to Object: You can object to processing based on legitimate interests or for direct marketing.
- Right to Withdraw Consent: Where processing is based on consent, you can withdraw it at any time.
To exercise any of these rights, please contact us at privacy@nikkahnest.co.uk. We will respond to your request within one month.
10. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes encryption of data in transit, secure authentication mechanisms, and regular security assessments. However, no method of transmission over the internet is 100% secure, and we cannot guarantee absolute security.
11. Cookies
We use essential cookies to ensure the proper functioning of our Platform, including authentication and security features. We may also use analytics cookies to understand how users interact with our Platform. You can control cookie preferences through your browser settings.
12. Changes to This Policy
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. We will notify you of any material changes by posting the updated policy on our Platform and updating the "Last updated" date. We encourage you to review this policy periodically.
13. Complaints
If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK supervisory authority for data protection. You can contact the ICO at ico.org.uk or by calling their helpline.
14. Contact Us
If you have any questions about this Privacy Policy or wish to exercise your data protection rights, please contact us at: