Legal
Privacy Notice
Last updated 23 September 2026
Bridalist. is operated by Nini Nguyen, who is the data controller for the personal data described here. This notice explains what we collect, why, who we share it with, and the choices you have.
What we collect and why
- Account data — email address, login credentials, and sign-in provider. Used to create and secure your account and provide the Service. Legal basis: performance of our contract with you.
- Profile and preferences — preferred locations, favourite designers, style preferences. Used to tailor search results and recommendations. Legal basis: contract performance.
- Your shopping content — saved boutiques, appointments, dress records, fitting-room photos, ratings, and notes. Stored privately to your account so you can use the workspace. Legal basis: contract performance.
- Location input — a ZIP code, city, or an approximate device location you choose to share, used only to run the search you asked for. We do not store your precise device location.
- Support messages — what you send us, used to answer you. Legal basis: contract performance and our legitimate interests.
- Usage and device data — pages viewed, approximate IP-based region, device and browser identifiers, and error telemetry. Used for security, fraud prevention, diagnosing faults, and improving the product. Legal basis: legitimate interests.
- Membership status — whether you hold an active membership and the order reference behind it. Used to grant access. Legal basis: contract performance and legal obligation.
Marketing emails, where offered, are sent only with your consent, which you can withdraw at any time.
Who we share data with
- Service providers — hosting, database and file storage, authentication, email delivery, mapping and geocoding, and error monitoring, acting on our instructions as processors.
- Paddle, our Merchant of Record, for the sale of membership, payments, invoicing, and tax compliance.
- Professional advisers — legal and accounting, where necessary.
- Authorities — where required by law or to protect our legal rights.
We do not sell your personal data.
How long we keep it
We keep account, profile, and shopping content for as long as your account is open. If you delete your account we delete or anonymise your personal data, except records we must keep for legal, tax, or fraud-prevention reasons. Usage and error logs are kept for a limited period and then deleted.
Your rights
Depending on where you live, you may ask us to give you access to your data, correct it, delete it, restrict or object to how we use it, or provide it in a portable form. You may also withdraw consent where we relied on it, and complain to your data protection or consumer authority. We respond within one month. To exercise any right, contact us through your account.
International transfers
Our providers may process data in the United States and other countries. Where data leaves the UK or EEA, we rely on appropriate safeguards such as standard contractual clauses or an adequacy decision.
Security
We use appropriate technical and organisational measures, including encryption in transit, access controls, and row-level database rules that keep your private content readable only by your own account.
Cookies and similar technologies
We use essential cookies and local storage to keep you signed in and remember display preferences such as your Discover layout. Where we use analytics or marketing cookies, they are optional and you can manage them through your browser settings.
Contact
Nini Nguyen, data controller for Bridalist. See also our Terms & Conditions and Refund Policy.