Privacy Policy

Humana Ltd (trading as "BridalSnap") is committed to protecting your privacy. This policy explains how we collect, use, store, and protect personal data when you use the BridalSnap platform.

This policy applies to all users: bridal boutique clients, brides and end users, and website visitors.

For Boutique Clients: business name, contact name, email address, phone number, payment information (processed by Stripe), login credentials (hashed), uploaded dress catalogue images.

For Brides: name (as entered during consent), uploaded photograph, AI-generated images. We do not collect additional personal data from brides beyond what is provided during the consultation session.

For Website Visitors: standard web analytics data including IP address, browser type, pages visited, and referral source. We use essential cookies only.

Bride photographs are processed solely to generate virtual try-on images. Photos are transmitted to specialist AI infrastructure partners via encrypted connections. These providers process images transiently and do not retain them after processing.

Client data is used to operate the platform, manage subscriptions, send service communications, and provide customer support.

We do not sell, rent, or share personal data with third parties for marketing purposes.

Data is stored in secure cloud infrastructure located in UK and EU regions. All data is encrypted at rest and in transit.

Access to personal data is restricted to authorised personnel and to the Client's workspace users. We implement industry-standard security measures including HTTPS, hashed passwords, and role-based access controls.

Bride photographs and generated images are retained for the duration of the Client's subscription plus 90 days. Brides may request earlier deletion at any time.

Deleted workspaces enter a 120-day soft-delete period before permanent deletion.

Payment records are retained for 7 years in compliance with UK tax regulations.

Under UK GDPR and EU GDPR, you have the right to: access your personal data; rectify inaccurate data; request deletion (right to be forgotten); restrict processing; data portability; and object to processing.

Under the California Consumer Privacy Act (CCPA), California residents have additional rights including the right to know what data is collected and the right to opt out of data sales (we do not sell data).

To exercise any of these rights, contact privacy@bridalsnap.com. We will respond within 30 days.

We use third-party processors including: cloud hosting and storage providers (UK/EU regions), specialist AI infrastructure partners (EU/US), payment processing providers (with EU data localisation), and email service providers for transactional communications.

All third-party processors are bound by data processing agreements and process data only on our instructions.

Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses (SCCs) approved by the European Commission, or adequacy decisions where available. AI image processing providers process data transiently and do not retain images after processing is complete.

If you are a California resident, the California Consumer Privacy Act (CCPA) as amended by the California Privacy Rights Act (CPRA) provides you with additional rights regarding your personal information.

Categories of personal information collected in the preceding 12 months: identifiers (name, email), internet activity (IP address, browser type), biometric information (facial photographs for AI processing), and commercial information (subscription and payment data).

We collect this information for the business purposes described in this policy: providing our service, processing payments, and communicating with users. We do not sell or share personal information for cross-context behavioural advertising.

Your rights: You have the right to know what personal information we collect, delete your personal information, correct inaccurate information, opt out of the sale of personal information (we do not sell data), and not be discriminated against for exercising your rights.

To exercise your rights, contact privacy@bridalsnap.com. We will respond within 45 days. You may designate an authorised agent to make requests on your behalf.

We use essential cookies required for the platform to function (authentication, session management). We do not use advertising or tracking cookies.

You can control cookie settings through your browser preferences.

The Platform is not intended for use by individuals under the age of 18. We do not knowingly collect personal data from children. If a bride is under 18, parental or guardian consent is required.

Data Protection Officer: privacy@bridalsnap.com

General enquiries: support@bridalsnap.com

Humana Ltd, First Floor, 8 Priory Place, Doncaster, DN1 1BL, United Kingdom. CRN: 13178063. VAT: GB331956788.

If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the UK, or your local data protection authority.