Privacy Policy

Ginger Beer Weddings ("we," "us," or "our") is committed to protecting your personal data. This Privacy Policy explains what data we collect, how we use it, and your rights. It applies to all interactions with gingerbeerweddings.com and related services. By using our services or submitting an order, you confirm you have read and understood this Policy.

1. Data Controller

Ginger Beer Weddings · [email protected] · gingerbeerweddings.com

For all privacy inquiries or to exercise your rights, contact [email protected]. We respond within 30 days. The competent supervisory authority is the Commission for Personal Data Protection (CPDP, cpdp.bg).

2. Data We Collect

Data you provide directly:

• Identification – name, email, phone number
• Project data – wedding date, footage details, brief content, style preferences
• Payment data – processed by third-party payment processors; we do not store card or bank details
• Communications – emails and messages between you and us

Data collected automatically when you visit our website may include IP address, browser type, visited pages, and technical request logs. This information is used only for security monitoring, abuse prevention, and basic website operations.

We also use limited browser storage and third-party embedded services. We do not intentionally use analytics or advertising cookies.

3. Legal Basis for Processing

• Art. 6(1)(b) GDPR – Performance of contract: to fulfil your order and deliver services
• Art. 6(1)(f) GDPR – Legitimate interests: website security, fraud prevention, service improvement
• Art. 6(1)(c) GDPR – Legal obligation: VAT record-keeping and applicable Bulgarian law
• Art. 6(1)(a) GDPR – Consent: portfolio and marketing use of your footage

You may withdraw consent at any time by contacting [email protected]. Withdrawal does not affect prior processing.

4. How We Use Your Data

• To process and deliver your order
• To communicate about your project – status updates, revisions, delivery
• To issue VAT-compliant invoices
• To respond to inquiries and provide support
• To improve our services and website
• To comply with legal obligations
• For portfolio and marketing use, where consent has been given (see Section 8)

5. Data Sharing

We do not sell your data. We share it only with trusted service providers acting on our documented instructions, including:

• Dropbox, WeTransfer, Frame.io – secure footage and deliverable transfer
• Stripe, Wise – payment processing
• Google Workspace – email and document management
• Supabase (EU region, Frankfurt eu-central-1) – CRM and invoice data storage
• Cloudflare Pages – website hosting and edge delivery

All processors are bound by Data Processing Agreements under Art. 28 GDPR. Data may also be disclosed where required by applicable law or court order.

6. Data Retention

• Client identification and contact data: 5 years from project conclusion
• Invoices and payment records: 10 years (Bulgarian Accountancy Act)
• Source footage: deleted after 12 months from final delivery, or earlier if storage requires
• Edited masters and final deliverables: retained indefinitely unless otherwise agreed in writing
• Marketing footage (consent-based): until consent is withdrawn
• Website technical logs: 12 months

Upon expiry, data is securely deleted or anonymised. You may request early deletion subject to applicable legal retention obligations.

7. Security

We implement appropriate technical and organisational measures under Art. 32 GDPR, including encrypted file transfer (TLS/SSL), access controls, and regular security reviews. In the event of a data breach posing risk to your rights, we will notify the CPDP within 72 hours and you directly without undue delay where required.

8. Portfolio & Marketing Use

Ginger Beer Weddings does not use any client materials, including raw footage, edited films, still frames, photographs, or any other visual content, for portfolio, marketing, or promotional purposes unless a separate written permission has been received from the contracting videographer or studio ("the Client").

By granting such permission, the Client confirms that they:

• have obtained all necessary rights, model releases, and consents from individuals appearing in the materials;
• are legally entitled to grant Ginger Beer Weddings a licence for promotional use of these materials;
• have ensured that providing such a licence does not conflict with any agreement between the Client and their end-customers (e.g. wedding couples or event guests).

Any promotional use is conditional solely on this separate written permission and is not implied by the Client's engagement with our services.

If permission is granted, the materials may be featured on our website, portfolio pages, or social media channels. If permission is denied or subsequently withdrawn, all related promotional content will be removed without undue delay.

9. Your Rights

Under GDPR Articles 15–22, you have the right to:

• Access – obtain a copy of your data and how it is processed
• Rectification – correct inaccurate or incomplete data
• Erasure – request deletion, subject to legal retention obligations
• Restriction – limit processing in certain circumstances
• Portability – receive your data in a machine-readable format
• Object – to processing based on legitimate interests
• Withdraw consent – at any time, without affecting prior processing
• Complain – to the CPDP (cpdp.bg) or the supervisory authority of your country of residence

Submit requests to [email protected]. We may verify your identity before processing. We respond within 30 days.

10. International Transfers

As a Bulgarian company (EU Member State), data transfers within the EEA are unrestricted. Where data is transferred to third countries (for example, US-based service providers), we ensure appropriate safeguards are in place under Chapter V GDPR, including Standard Contractual Clauses and adequacy decisions where applicable.

11. Children's Privacy

Our services are not directed at individuals under 18. If you believe a minor has submitted personal data without appropriate consent, contact [email protected] and we will delete it without undue delay.

12. Changes to This Policy

We may update this Policy from time to time. The current version is always available at gingerbeerweddings.com/privacy. Material changes will be communicated at least 14 days before taking effect. Continued use of our services constitutes acceptance.

13. Contact

Ginger Beer Weddings · Alatyr Systems LLC
[email protected] · gingerbeerweddings.com/privacy