Privacy Policy

1. Who is responsible for your data

The controller of your personal data is [legal name of the company], trading as Blue Venado Weddings, [tax ID / RFC], with its address at GRC4+38, Carretera federal KM 269, 77735 Paa Mul, Q.R., México [address to confirm].

You can reach us about anything in this policy at info@bluevenadoweddings.com or on +52 1 984 185 0104 (telephone and WhatsApp).

Because we offer our services to couples living in the European Union, this policy follows the EU General Data Protection Regulation (GDPR) as well as Mexico's Federal Law on the Protection of Personal Data Held by Private Parties, and serves as our privacy notice (aviso de privacidad) under Mexican law. [EU representative under Article 27 GDPR, if required: name and address.]

2. What we collect

Only what you choose to send us, and what any web server records when a page is requested:

• Enquiry forms: your name (or your names as a couple), your email address, your wedding date or that you have not chosen one yet, an approximate number of guests, how you heard about us and, on the contact page, anything else you decide to write.
• Messages you send us directly by email, WhatsApp or telephone, and what you tell us in them.
• Technical data from your visit: your IP address, the date and time, the page requested and your browser type, recorded in the server's logs.

We do not ask for sensitive data, and we ask you not to include any in a message. We do not buy data about you from anyone else.

3. Why we use it, and on what legal basis

• To answer your enquiry, check dates and prepare a quote: this is a step you ask us to take before a possible contract (Article 6(1)(b) GDPR).
• To plan and deliver your wedding if you book with us: performance of our contract with you (Article 6(1)(b) GDPR).
• To keep the website secure and working, using the server logs: our legitimate interest in protecting the site (Article 6(1)(f) GDPR).
• To show you where a venue is, with a map on its page: our legitimate interest in presenting the venues we offer (Article 6(1)(f) GDPR).
• To keep accounting and tax records once there is a contract: our legal obligations (Article 6(1)(c) GDPR).

We do not use your data for advertising, we do not profile you and we do not make automated decisions about you. We will not send you newsletters or promotions unless you ask for them.

4. Who we share it with

We never sell your data. We share it only where it is needed for the purposes above:

• With the venue you are asking about, when you ask us to check a date or plan your wedding there, including our partner venues in Italy and Monaco [to confirm].
• With the suppliers needed for your wedding once you book (for example photographers, florists or caterers), and only what each one needs.
• With the providers that run this website and our email: [hosting provider], [email provider], and Twilio SendGrid (Twilio Inc., United States), which forwards each enquiry sent through the website's forms to our inbox. They process data only on our instructions.
• With OpenFreeMap (Hyperknot Software Kft., Hungary), when you open a venue page: its map is drawn from OpenFreeMap's map tiles, built on OpenStreetMap data, which your browser loads straight from tiles.openfreemap.org, delivered through Cloudflare's network. Like any web server, they receive your IP address and your browser's details in order to send them; OpenFreeMap says it does not keep IP addresses in its regular logs. The map sets no cookies.
• With public authorities, when the law requires it.

5. International transfers

Blue Venado is based in Mexico, so if you write to us from the European Union your data is transferred to Mexico, which does not have an EU adequacy decision. We make this transfer because it is necessary to take the steps you ask for before a contract, or to perform that contract (Article 49(1)(b) GDPR). Where one of our providers is located elsewhere, we rely on the safeguards it offers, such as the European Commission's Standard Contractual Clauses [to confirm per provider].

6. How long we keep it

• Enquiries that do not become a booking: [24 months] after our last contact, then deleted.
• Data about a wedding you booked with us: for as long as accounting and tax law requires [period to confirm].
• Server logs: [period to confirm by the hosting provider].

7. Your rights

You can ask us at any time to access the data we hold about you, correct it, delete it, restrict or object to its use, or receive it in a portable format. Under Mexican law these are your ARCO rights: access, rectification, cancellation and opposition. Where we rely on your consent, you can withdraw it at any time.

Write to info@bluevenadoweddings.com and tell us what you would like us to do. We will answer within one month, or within the period Mexican law sets, whichever is shorter.

If you live in the European Union you can also complain to the data protection authority of your country, for example the Garante per la protezione dei dati personali in Italy, the CNIL in France or the AEPD in Spain.

8. Security

The site is served over an encrypted connection (HTTPS), and access to the enquiries we receive is limited to the people who need it to answer you. No system is perfectly secure, and if a breach ever put your data at risk we would tell you and the authorities as the law requires.

9. Cookies

This website uses technical cookies to remember your language and your cookie choice, and no analytics or advertising cookies. The details are in our Cookie Policy.

10. Minors

This website is meant for adults planning a wedding. We do not knowingly collect data from anyone under 18.

11. Changes to this policy

If what the site does with personal data changes — for example if we connect a new form provider or add analytics — we will update this page first and change the date at the top.