Privacy Policy

This policy applies to everyone who interacts with Kiss & Tell:

• Visitors to our websites, including kissandtell.com;
• Hosts — couples and event organizers who plan a wedding or group event with us, including through our host portal;
• Guests — people invited to an event we support, including anyone who visits an event website we host, responds to an invitation, books a room, or receives event updates;
• Partners — venues, hotels, and other vendors (and the people who work for them) who collaborate with us through our partner portal or by email, phone, text, or WhatsApp;
• Anyone who contacts us for support, sales, or anything else.

It covers all Kiss & Tell web experiences — including the event websites we host for couples on our domains — our host, guest, and partner portals, and our communications with you.

What we collect depends on how you use Kiss & Tell:

Kiss & Tell is a coordination platform, so some personal information reaches us from people other than you. This is a normal and necessary part of how group events work, and we want to be explicit about it:

When we first communicate with you, we rely on the person who provided your information having had the right to share it for event purposes. The host remains responsible for their guest list, and we act on their instructions for most guest data.

When you use our sites and portals, we automatically collect:

• Usage and device data — IP address, browser type, device and operating system, pages viewed, referring pages, and timestamps;
• Site analytics we run ourselves — on kissandtell.com we assign your browser a random visitor identifier (stored in your browser and in a first-party cookie) and record the pages you view, how long you view them, the buttons you click, searches you run, the campaign or search result that brought you to us (for example UTM parameters or an ad click identifier), your browser’s time zone, and a one-way hashed form of your IP address. This data is collected and stored by Kiss & Tell only, is not shared with advertising networks, and is used to understand and improve the site and to connect a later enquiry with the visit that led to it;
• Advertising measurement — with your consent where the law requires it, tags from Google (Google Ads and Google Analytics) and Meta measure whether our advertising led to a consultation request. You can decline or withdraw this through Cookie preferences in the footer on kissandtell.com (see Section 11);
• Sign-in records — when accounts sign in, which portal was used, and security events (for example, failed sign-in attempts), kept for account protection and auditing;
• Cookies and similar technologies, described in Section 11.

Access to our host, guest, and partner portals is by invitation only — there is no public self-registration. You can sign in with:

However you sign in, we keep a record linking your verified email address to your account, along with sign-in timestamps, to keep accounts secure and invitation-only.

We use personal information to:

• Run the event — build and manage guest lists, deliver event websites, collect RSVPs, manage room blocks and bookings, process booking changes, and coordinate schedules between hosts, guests, and vendors;
• Communicate — send invitations, RSVP confirmations, booking confirmations and changes, event reminders and logistics updates, and respond to your questions;
• Process payments and refunds, and maintain required financial records;
• Operate our partner relationships — negotiate and manage venue and vendor agreements, room blocks, and service milestones on behalf of hosts;
• Keep the platform safe — authenticate users, prevent fraud and abuse, debug, and maintain audit trails;
• Comply with law — meet legal, tax, and accounting obligations;
• Improve our services — understand usage in aggregate and make the product better.

Where laws such as the EU/UK GDPR apply, our legal bases are: performance of a contract (providing the services you or your host arranged); legitimate interests (running, securing, and improving a group-event platform, and coordinating guest logistics on hosts’ instructions); consent (where we ask for it — for example, certain communications); and legal obligation (records we must keep).

Group events are inherently shared experiences. Here is exactly who sees what:

Planning a destination wedding generates a lot of unstructured material: long email threads, WhatsApp conversations, contracts, proposals, invoices, and receipts. We use artificial intelligence, including large-language-model services from Anthropic, to help our team organize this material — for example, extracting a room block’s terms from a signed contract, matching a payment receipt to the right booking, or summarizing where a vendor negotiation stands.

To keep this responsible:

• AI output used for anything that matters — contract terms, payments, bookings — is reviewed by our team and traced back to the source document or message;
• Our AI providers process data under contracts that prohibit using it to train their models;
• We do not use AI to make decisions about you that have legal or similarly significant effects without human involvement. There is no automated profiling of guests, and no AI decides anything about your attendance, booking, or payment on its own.

We keep this minimal:

• Essential cookies keep you signed in and keep the sites secure. The portals do not work without them.
• First-party analytics on kissandtell.com use a visitor identifier (kt-anon-id / kt_aid) and a session identifier stored in your browser; they are set and read only by Kiss & Tell and are described in Section 04.
• Advertising cookies — set by Google (for example _ga, _gcl_*) and Meta (_fbp, _fbc) — measure whether our advertising works and may be used to show you Kiss & Tell advertising on those platforms. For visitors we can identify as being in the European Economic Area, the United Kingdom or Switzerland (we use your browser’s time-zone setting for this, as our site cannot see your location), these load only after you accept them in the cookie banner; elsewhere they load with a notice and you can opt out at any time. Use Cookie preferences in the footer to change your choice. Your choice is stored as kt_consent.
• We do not sell personal information and we do not allow advertising networks to build profiles of you from our sites for their own purposes.

You can control cookies through your browser settings; blocking essential cookies will prevent sign-in. We honor opt-out preference signals as described in Section 17.

We keep personal information for as long as it is needed for the purposes above: while an event is being planned and delivered, for a reasonable period afterward (weddings generate follow-ups — refunds, disputes, thank-yous, and next events), and as long as the law requires for particular records (payment and tax records typically must be kept for several years). When information is no longer needed, we delete it or de-identify it. You can also request deletion — see Section 16.

We protect personal information with encryption in transit, access controls that limit each portal and each user to their own event’s data, invitation-only account provisioning, audit logging of sensitive operations, and infrastructure hosted with providers that maintain industry-standard certifications. No system is perfectly secure, and we cannot guarantee absolute security — but if a breach affecting your personal information occurs, we will notify you and the relevant authorities as required by law.

We are a U.S. company and process data in the United States, while many of the weddings we serve — and their guests, venues, and vendors — are in other countries, including the European Economic Area and the United Kingdom. When we transfer personal information from those regions to the United States, we rely on appropriate safeguards such as the European Commission’s Standard Contractual Clauses (and their UK equivalent) with our service providers, alongside the contractual and technical protections described in this policy.

Our services are not directed at children, and children cannot create accounts. However, wedding guest lists naturally include children: a host or parent may tell us a child’s name, age group, or meal needs so the event and room bookings can be planned. We use that information solely for event logistics, on the instructions of the host or the child’s parent or guardian, and we do not knowingly collect information directly from children under 13 (or the higher age some laws set). If you believe a child has provided us information directly, contact us and we will delete it.

Wherever you live, you can ask us to:

• Access the personal information we hold about you, and receive a copy;
• Correct inaccurate information;
• Delete your information;
• Object to or restrict certain processing, or withdraw consent where processing is based on consent (this does not affect processing already carried out);
• Receive your data in a portable format.

One honest caveat for guests: some of your information belongs to the host’s records too — a guest list is the host’s data as much as it is about you. Where we manage data on a host’s behalf, we may refer your request to the host or process it on their instructions; where the law gives you rights directly against us, we honor them directly.

U.S. state privacy laws (including in California, Virginia, Colorado, Connecticut, Texas, Oregon, and Montana, among others) grant the rights above and the right to opt out of “sales,” “sharing,” and targeted advertising. We do not sell personal information. When you allow advertising cookies (Section 11), information about your visit to kissandtell.com is shared with Google and Meta to measure and, where enabled, target our advertising; some U.S. state laws treat this as “sharing” or “targeted advertising.” You can opt out at any time through the cookie banner or by sending a Global Privacy Control signal (Section 17). We do not sell or share information collected in the OurTrip or partner portals. We also do not use or disclose sensitive personal information for purposes requiring a “limit use” right under California law. California residents: the categories of information we collect and our purposes are described in Sections 02–04 and 07; recipients are described in Section 08.

Residents of the EEA and UK also have the right to lodge a complaint with their local supervisory authority — though we would appreciate the chance to resolve concerns directly first.

We honor the Global Privacy Control (GPC) signal and the legacy Do Not Track setting on kissandtell.com: a browser that sends either is treated as having declined advertising cookies, including when you previously accepted them. No Google or Meta advertising tag is loaded while that choice is declined. Our own first-party site analytics (Section 04) are not affected by these signals because they involve no third party. You can open Cookie preferences to see your current choice. If you subsequently choose Accept and separately confirm that you want to allow advertising despite the browser signal, that informed choice takes precedence for this site in that browser. You can decline again at any time.