Your privacy
How we use your information, who receives it and how to contact us.
Last updated:
Who to contact
Joy Petal is responsible for the personal information used to run this service. For privacy questions or requests, email admin@joypetal.com or write to Joy Petal, 56 Church Rd, Ashford TW15 2TS.
Suppliers are responsible for how they use information they receive for your enquiry and booking.
Information you give us
- Your account: your email address and sign-in records.
- Your wedding: names, event names, dates, areas, guest numbers, budget, supplier choices, messages and any phone number you add.
- Your business: listing details, your name and email, ownership claim information, acceptance of supplier terms, quotes and booking replies.
- Help and changes: messages you send us and records of listing edits, claim decisions and enquiry activity.
Only include information needed for your enquiry. Avoid adding sensitive personal details about yourself or other people to messages.
You need an email address to sign in. Event details and supplier choices are needed to send an enquiry. A phone number and message are optional.
Public supplier listings
Listings can include information from a business’s own website, public business social pages and Google business listings, as well as information a supplier gives us. This can include business names, contact details, locations, services, photos and attributed Google ratings and review counts.
We keep source information to help check accuracy and deal with corrections. Email us with the listing address if something is wrong, a photo should come down or you want a listing removed.
Why we use information
- To provide the service you request: create and secure your account, save your plan, send enquiries, show quotes, record booking decisions and provide related support. Our lawful basis for the ordinary account and enquiry information needed for this is contract, including steps you ask us to take before a contract.
- To keep the directory useful and the service safe: maintain accurate business listings, check ownership, prevent misuse and keep records of important changes. Our lawful basis is legitimate interests in running an accurate directory and protecting users and businesses.
- To meet legal duties: use or keep information where a legal obligation requires it.
When suppliers receive your information
Saving a plan does not send it to suppliers. When you press Send enquiries, each supplier you selected receives your names and the details of the events listed beside their name. They can also read the message you submit with the enquiry.
Your phone and email are shown only after that supplier takes the enquiry and you have agreed to share them. Opening or declining an enquiry does not reveal those contact details.
Our team can access information to support the service. If we have no supplier email address for an enquiry, it goes to our team so we can help contact the business.
If an enquiry is declined or closed, contact details stop appearing in its Joy Petal view. A supplier may already have kept a copy. Ask them directly about their own use and retention of it, or contact us for help.
Service providers and overseas processing
- Contabo hosts the application and database. Serving the site involves connection information such as your IP address and browser requests. Contabo privacy information.
- Postmark sends sign-in and service emails. It processes recipient addresses, email content and delivery information in the United States. Postmark privacy and processing information.
- Google Drive stores encrypted backup archives. The recovery key is held separately from those archives. Google privacy information.
- Google Fonts supplies the website’s fonts. Your browser connects to fonts.googleapis.com and fonts.gstatic.com, sending Google your IP address and request information such as your browser details. This is separate from our encrypted backups. Google Fonts privacy information.
Some provider processing takes place outside the UK. Google operates internationally as described in its data transfer information. Contact us if you need more information about how your information is handled.
How long information is kept
How long information is needed depends on whether your account or wedding plan is still in use, whether enquiries or bookings are outstanding, and whether records are needed for support, a dispute, security or a legal duty. Listing and source information also help us keep business details accurate and honour removal requests.
Contact us to ask for information to be removed. We consider what can be deleted and what still needs to be kept for these purposes. Encrypted backup copies may remain after information is removed from the live service.
Essential cookies
These cookies support sign-in and remember a supplier you asked to add:
- jp_at: keeps you signed in until your current access token expires. Its lifetime follows that token’s expiry.
- jp_rt: lets us refresh your sign-in. It lasts up to 30 days and is renewed when your session refreshes.
- jp_add: remembers your selected supplier through sign-in for up to one hour. Opening the sign-in email can replace it with a one-minute handoff cookie. It clears when you return to add that supplier.
- jp_operator: proves a recent operator authenticator check for up to 15 minutes. It is tied to that verification and clears on sign-out or failed verification.
You can block or clear cookies in your browser, but sign-in and remembering a supplier may then stop working.
Cookie choices and optional measurement
jp_cookie_preferences remembers your optional measurement choices on this website. It contains only those choices, the policy version and the time you saved them. It is a first-party cookie stored for up to one year from that save. Permission for an optional category expires after 180 days. Visiting a page does not renew it.
Optional measurement starts off. Cookie settings in the footer shows the choices available on this site. Change them there, or press Turn optional off to withdraw permission. If your browser cannot save or share a change between tabs, optional measurement stays off for that visit. Essential sign-in and wedding information are kept.
If you choose Google Analytics, it measures visits and planning, supplier sign-in and email button clicks on our contact, privacy and supplier terms pages. A button click records interest, not a submitted enquiry or a booking. Our homepage, directory listings, supplier profiles, signed-in visits and private journeys are excluded. We do not send names, contact details, wedding records or enquiry messages through this measurement.
Google Analytics uses optional cookies for up to 180 days. Page views do not renew that period. Google receives a cookie identifier and technical request information, such as your IP address and browser details. Read Google’s privacy information for how it handles this information.
Meta advertising measurement is currently off. We do not ask for advertising permission while it is unavailable.
Your rights and complaints
Depending on the circumstances, you can ask to see or correct your personal information, have it deleted, restrict its use or receive a portable copy. You can object to use based on legitimate interests. Where we rely on consent, you can withdraw it without affecting earlier lawful use.
Email admin@joypetal.com or write to the address above. Tell us what you need and enough information to find the relevant account or listing. We may need to confirm your identity before sharing information.
You can complain to us about how your information is handled. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.