Aisleful Privacy Policy
Last updated: 6 September 2026
Aisleful is a trading name of Matthew McDyer, a sole trader ("Aisleful", "we", "us"). This policy explains how we collect and use personal data when you visit our website or use our service.
We are the data controller for the personal data described in this policy, except for guest photos and gallery content, where the account holder (the couple) is the controller and we act as their processor under our Data Processing Agreement.
Contact: [email protected] / 82A James Carter Road, Mildenhall, IP28 7DE
Aisleful is registered with the Information Commissioner's Office (ICO registration reference: ZC240272).
1. What data we collect
If you create an Aisleful account (the account holder):
- Name, email address, and any contact details you give us
- Payment information (handled directly by Stripe; we don't store full card details)
- Records of your orders, plan, and gallery settings
- Support communications
If you visit our website:
- Basic technical data (IP address, browser type, device type, pages visited)
- Cookie data (see Section 7)
If you upload to a gallery as a guest:
- The photos and videos you upload
- Any name, nickname, or caption you choose to add
- Upload timestamp and basic technical data (device/browser type, IP address)
We do not knowingly collect any special category data (such as health or religious information) beyond what may incidentally appear in ordinary wedding photos.
2. How we use it and our lawful basis
| What we use it for | Lawful basis |
|---|---|
| Creating and running your account and gallery | Performance of a contract |
| Processing payment | Performance of a contract |
| Sending service emails (confirmations, expiry reminders, anniversary emails) | Performance of a contract |
| Customer support | Performance of a contract / legitimate interests |
| Improving and securing the platform | Legitimate interests |
| Marketing emails (if you opt in) | Consent |
| Keeping records for tax and accounting | Legal obligation |
For guest-uploaded photos, the account holder (couple) determines the purpose of collection; we process this data strictly on their instructions, as set out in our Data Processing Agreement.
3. Who we share data with
- AWS (Amazon Web Services): our hosting and storage provider, UK region (London)
- Stripe: for payment processing
- Google Workspace: for sending account and service emails
- We do not sell personal data to third parties, and we do not use guest photos for advertising or marketing without explicit permission from the account holder.
We may also share data where required by law, or to protect the rights, safety, or property of Aisleful, our users, or others.
4. Where your data is stored
All data is stored on AWS infrastructure in the UK (London). We do not transfer personal data outside the UK as part of our standard operation. If this changes, we'll update this policy and put appropriate safeguards in place, such as the UK International Data Transfer Agreement.
5. How long we keep data
- Gallery content is kept for the storage period you chose (6, 12, 18 months, or Forever), then deleted, as described in our Terms and Conditions.
- Account and order records are kept for as long as needed for tax and accounting purposes (typically 6 years), even after a gallery is deleted.
- Marketing consent records are kept until you withdraw consent.
6. Your rights
Under UK GDPR, you have the right to:
- access the personal data we hold about you
- ask us to correct inaccurate data
- ask us to delete your data (subject to legal retention requirements)
- object to or restrict certain processing
- ask for your data in a portable format
- withdraw consent at any time, where processing is based on consent
If you're a wedding guest and want a photo removed from someone else's gallery, please contact the couple directly, as they control the gallery. If you're unable to reach them, contact us and we'll assist where we can.
To exercise your rights, contact us at [email protected]. You also have the right to complain to the Information Commissioner's Office (ico.org.uk) if you're unhappy with how we've handled your data.
7. Cookies
We use essential cookies to run the website and keep you logged in. We do not currently run analytics or marketing cookies; if we add them (for example Google Analytics), we will ask for your consent first via our cookie banner and they will remain off until you agree.
You can control cookies through your browser settings. We ask for your consent to any non-essential cookies via a cookie banner when you first visit the site, and you can change your choice at any time via the “Cookie settings” link in the footer.
8. Children's data
Aisleful is not intended for use by children, and account holders must be 18 or over. Wedding guests may include children in the photos they upload; if you're a parent or guardian with concerns about a photo of your child, please contact the account holder or us directly.
9. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit and at rest, access controls, and AWS's security infrastructure. No system is 100% secure, but we take this seriously and will notify affected users promptly in the event of a breach affecting their data.
10. Changes to this policy
We may update this policy from time to time. We'll notify account holders of material changes by email.