Privacy Policy

1. Scope and who is responsible for your information

This Privacy Policy applies to My Celebration Plan at mycelebrationplan.com and related services (the “Platform”). My Celebration Plan is owned and operated by SARAD RETAIL LLC (“we,” “us,” or “our”). Where applicable privacy law uses terms such as controller, business, covered business, organization or data fiduciary, SARAD RETAIL LLC acts in that role when it determines why and how personal information is processed.

This Policy covers visitors, registered planners, vendors and vendor representatives, customers who purchase tools or printables, people who communicate with us, and information about guests or other people that a planner lawfully enters into planning features.

Privacy questions and requests may be sent to admin@mycelebrationplan.com.

2. Categories of personal information we may collect

Identifiers and account data: name, email address, username/account identifiers, account type, authentication and security information, preferences and communications.

Celebration and planner data: celebration type, event name/date, general location, guest count, estimated budget, budgets, expenses, checklists, timelines, schedules, seating information, gifts, notes, documents and other information a planner chooses to save.

Guest and RSVP data: names, contact details, attendance/RSVP status, household or party relationships, meal or seating information and other details entered by a planner.

Vendor and business data: business name, representative/contact details, category, descriptions, business/service location, service areas, website, services, celebration types, logos, photographs, plan level, listing information, leads, quotes and booking workflow information. Information intentionally placed in a public vendor profile is public information.

Marketplace and communication data: vendor inquiries, event dates/locations, guest counts, budgets, requested services, messages, quotes, prices, fees, deposits, payment schedules, expiration dates, quote status and booking status.

Commercial and transaction data: products viewed or purchased, tool/printable entitlements, orders, subscriptions, invoices, coupons, discounts, renewal and plan-change history, refunds and transaction metadata. Complete payment-card numbers are generally collected directly by our payment processor rather than stored by My Celebration Plan.

Account verification data: planner and vendor account-email verification status and timestamps, verification-token metadata, delivery/rate-limit records.

Vendor claim data: account-email verification status and timestamps, verification-token metadata, delivery/rate-limit records, business-claim requests, claim method, one-time claim challenges, claim status, and information used to connect an imported or existing listing to a vendor account. Email verification confirms control of the account email; we do not currently provide separate business verification or certification.

Internet, device and usage data: IP address, browser/device type, operating system, timestamps, referring/exit pages, pages and features used, advertising or cookie identifiers, approximate location derived from IP/network information, diagnostics and security logs.

Support and privacy-request data: information submitted through contact forms, support messages, account requests and privacy-rights requests, including information reasonably needed to verify a request.

We do not ask users to place government identification numbers, full payment-card information, medical records or other highly sensitive information into ordinary planning fields or public vendor profiles.

3. Sources of information

We may obtain information directly from you; from a planner who enters guest information; from a planner or vendor participating in an inquiry, quote or booking workflow; automatically from your browser/device; from payment, hosting, email, security, analytics, advertising and affiliate technology providers; from integrations you choose to use; and from lawful public or business sources used for vendor discovery.

4. Information planners provide about guests and other people

Celebration planning often involves information about people who do not have My Celebration Plan accounts. A planner who enters another person’s information is responsible for having an appropriate permission or other lawful basis to provide and use it. Planners should collect only information reasonably needed for planning and should not enter unnecessary sensitive information.

If you believe a planner has entered your personal information and you want to ask about access or deletion, contact us at the address above. Some requests may require coordination with the planner who supplied the information and may be subject to legal exceptions.

Vendor marketplace country limitation: the vendor directory currently accepts and displays vendor listings only for businesses in the United States, United Kingdom, Canada, Australia, and Switzerland. Other Countries Coming Soon. Planner accounts and planning features remain international. We may still process information about visitors, planners, customers and other individuals in additional countries as described in this Policy.

5. Why we process personal information

We use information to operate and secure accounts; save celebration workspaces; provide interactive tools; generate exports and downloads; deliver printables; administer purchases and entitlements; operate vendor listings and discovery; route inquiries and quotes; record booking workflow status; administer Basic, Advanced and Premium vendor plans; verify planner and vendor account emails; process and document business-listing ownership claims; process payments, subscriptions and refunds; send transactional emails; provide support; prevent fraud and abuse; troubleshoot and improve performance; maintain legal/accounting records; enforce our Terms; comply with law; and, subject to applicable choices, perform analytics, advertising, affiliate attribution and marketing.

6. GDPR, EEA and UK privacy rules

Where the EU General Data Protection Regulation (GDPR), UK GDPR or related European privacy rules apply, we process personal data only when an appropriate lawful basis applies. Depending on the purpose, this may include:

• Contract or steps requested before a contract: creating an account, providing purchased tools, delivering downloads, processing subscriptions, responding to marketplace requests and providing requested Platform services.
• Legitimate interests: securing the Platform, preventing fraud, maintaining and improving services, understanding performance, administering our business and communicating about requested services, after considering affected individuals’ rights and reasonable expectations.
• Legal obligation: tax, accounting, regulatory, court, law-enforcement and other obligations imposed by law.
• Consent: where required for optional cookies/local storage, certain analytics, personalized advertising, certain affiliate/marketing technologies or direct marketing.

European and UK individuals may, subject to the conditions and exceptions in applicable law, have rights of access, rectification, erasure, restriction, portability and objection; the right to withdraw consent; and protections concerning certain automated decisions. Where processing is based on consent, withdrawal does not affect processing that was lawful before withdrawal. Individuals also have the right to complain to the competent data-protection supervisory authority.

Right to object: where applicable, you may object to processing based on legitimate interests. You may object to direct marketing at any time.

7. Switzerland and other European jurisdictions

Where Swiss or other European privacy law applies, we provide the rights and disclosures required by that law. Google advertising consent requirements may also apply to visitors in Switzerland as described below. Privacy rights can be requested through the contact information in this Policy.

8. California privacy notice — CCPA/CPRA

If the California Consumer Privacy Act, as amended by the California Privacy Rights Act (“CCPA”), applies to SARAD RETAIL LLC or a particular processing activity, California residents may have rights to know/access personal information, request deletion, request correction, obtain information about categories of collection/use/disclosure, opt out of the sale or sharing of personal information, and limit certain uses/disclosures of sensitive personal information. Applicable rights are subject to statutory definitions, thresholds and exceptions.

For CCPA purposes, the categories described in Section 2 may include identifiers, customer-record information, commercial information, internet/electronic activity, approximate geolocation, professional/business information, and inferences if created. We use these categories for the purposes described in Section 5 and may disclose them to the recipient categories described in Section 12.

Sale, sharing and cross-context behavioral advertising. We do not sell personal information for money as an ordinary part of our planner/vendor marketplace. However, some advertising, analytics or affiliate technologies can be treated as a “sale” or “sharing” under California law even when no money is exchanged for the information. If our use of Google AdSense or another advertising/affiliate technology constitutes sale or sharing under applicable law, eligible users may opt out through our privacy/cookie controls or another legally required mechanism.

Global Privacy Control. Where the CCPA or another applicable law requires recognition of a valid browser-based opt-out preference signal such as Global Privacy Control (GPC), our privacy implementation should honor that signal for covered sale/sharing or targeted-advertising processing.

We do not knowingly sell or share personal information of consumers under 16 in circumstances requiring affirmative authorization. We do not unlawfully discriminate against a consumer for exercising CCPA rights.

9. Other U.S. state privacy laws

Comprehensive privacy laws now apply in multiple U.S. states. Depending on the state, applicability thresholds and processing involved, residents may have rights to access/confirm processing, correct, delete, obtain portable data, opt out of targeted advertising, sale or certain profiling, and appeal certain denied requests. We will honor rights that apply to us and to the requesting individual.

Our privacy controls are intended to support applicable opt-out choices. Where a state requires recognition of a qualifying universal opt-out mechanism, we will handle supported signals as required. Because U.S. state privacy laws continue to evolve, the exact rights available depend on the law in effect where you reside and whether that law applies to SARAD RETAIL LLC.

10. Canada, Brazil, Australia and other jurisdictions

Users in other jurisdictions may have privacy rights under local laws, including rights concerning notice/transparency, access, correction, deletion or withdrawal of consent where applicable. Examples include Canada’s private-sector privacy framework, Brazil’s Lei Geral de Proteção de Dados (LGPD), and Australian privacy requirements where those laws apply to the organization or processing. We will respond to valid requests according to the law that applies rather than assuming one country’s privacy regime governs every visitor.

11. Google AdSense and advertising

We may use Google AdSense or other Google advertising products to display advertising. Google and participating advertising technology providers may use cookies, local storage, IP/device information and other data to serve, measure, limit frequency of and report on ads. Depending on consent, settings and jurisdiction, ads may be personalized based on interests/activity or non-personalized/contextual. Even non-personalized ads can use cookies or similar identifiers for functions such as frequency capping and aggregated reporting.

For users in the EEA, UK and Switzerland, Google requires publishers using AdSense to make specified disclosures and obtain consent for cookies/local storage where legally required and for personal-data use in personalized advertising. When personalized ads are served in those regions, Google requires publishers to use a Google-certified consent management platform integrated with the IAB Transparency and Consent Framework. Our consent implementation must be configured to meet those requirements before optional advertising technologies are activated for users who require consent.

For U.S. states with applicable privacy requirements, advertising settings may use restricted-data-processing or other privacy treatments and opt-out mechanisms as appropriate. Users should be able to revisit privacy/advertising choices through the site’s privacy or cookie settings where those choices apply.

12. Third-party affiliate links and affiliate marketing

My Celebration Plan may participate in third-party affiliate programs. Some pages, articles, Shop content or recommendations may contain links to independent merchants or services. If you click an affiliate link and later make a qualifying purchase or take another qualifying action, SARAD RETAIL LLC may receive a commission or other compensation from the third party, generally without increasing the price you pay solely because of the affiliate relationship.

Affiliate partners and affiliate-network technology may receive information needed to attribute a referral, such as a click identifier, referring page, device/browser information, IP-derived information, timestamp and transaction/conversion information. Optional affiliate tracking technologies will be handled according to applicable cookie/privacy requirements.

Where a recommendation or endorsement has a material affiliate relationship, we intend to provide a clear and conspicuous disclosure near the relevant recommendation or link. A disclosure buried only in this Privacy Policy is not intended to replace a disclosure required at the point of endorsement.

13. Categories of recipients and marketplace disclosures

We may disclose relevant information to:

• Selected vendors: when a planner sends an inquiry, requests a quote, accepts a quote or otherwise directs a marketplace interaction.
• Planners: when vendors respond with business information, communications and quotes.
• Service providers/processors: hosting, cloud/infrastructure, security, storage, transactional email, payment, customer support and technical providers. Current services may include Hostinger, Stripe and Resend/SMTP infrastructure.
• Advertising, analytics and affiliate providers: when those technologies are enabled and subject to applicable consent/opt-out requirements, including Google for AdSense advertising.
• Professional advisers and authorities: where reasonably necessary for legal, accounting, security, fraud-prevention, regulatory or court obligations.
• Transaction counterparties: in a merger, acquisition, financing, restructuring, bankruptcy or sale of all or part of the business, subject to applicable law.
• Others at your direction: where you request or consent to the disclosure.

14. Cookies, local storage and consent choices

Necessary technologies may support authentication, account security, checkout, fraud prevention, session continuity and saved preferences. Optional categories may include functional, analytics, advertising/marketing and affiliate technologies.

Where prior consent is legally required, optional technologies should remain disabled until the required consent is obtained. Where an opt-out regime applies, users will be provided the applicable choice. Users should also be able to change or withdraw optional consent later through a persistent privacy/cookie settings control.

15. Payments and Stripe

Eligible payments and recurring vendor subscriptions may be processed by Stripe. Payment processors may collect payment-card, billing, fraud-prevention and transaction information directly under their own privacy terms. My Celebration Plan generally receives transaction status, identifiers and related billing metadata rather than complete payment-card credentials.

16. Transactional email and Resend

We use WordPress transactional email infrastructure, including SMTP delivery services such as FluentSMTP and the configured mail provider, to deliver account, inquiry, quote, booking, purchase, subscription, security and support communications. Transactional messages necessary to provide requested services may continue while the relevant account or transaction is active. Marketing communications, if offered, will use the choices required by applicable law.

17. International data transfers

SARAD RETAIL LLC is based in the United States, and our service providers may process information in the United States and other countries. Where GDPR, UK GDPR or another law restricts international transfers, we will rely on an applicable legal transfer mechanism where required, such as an adequacy decision, approved contractual safeguards, an applicable certification/framework mechanism or another lawful basis. Information about relevant safeguards may be requested through our privacy contact.

18. Data retention

We retain personal information for periods appropriate to its purpose. Criteria include whether an account or subscription remains active; whether access to purchased products must be maintained; transaction, tax and accounting requirements; security/fraud needs; marketplace dispute resolution; legal limitation periods; contractual obligations; and applicable law. When information is no longer reasonably required, we may delete, anonymize or restrict it, subject to backup cycles and legal retention obligations.

19. Security

We use administrative, technical and organizational safeguards designed to protect personal information, including access and account-security controls appropriate to the Platform. No internet transmission, website or storage system can guarantee absolute security. Users are responsible for safeguarding credentials and should report suspected unauthorized access promptly.

20. Children and minors

The Platform is intended for adults who can create accounts and enter transactions and is not directed to children under 13. We do not knowingly solicit personal information directly from children under 13. Planners who record information about minor guests are responsible for having an appropriate basis to do so and for limiting the information to what is reasonably necessary for celebration planning.

21. Automated processing and profiling

Automated rules may support fraud prevention, security, entitlements, pricing, marketplace ordering, advertising and operational workflows. Where applicable law provides rights concerning profiling or solely automated decisions producing legal or similarly significant effects, we will provide the protections required by that law.

22. How to exercise privacy rights

Email admin@mycelebrationplan.com and identify the privacy right you wish to exercise and the account/email involved. We may request information reasonably necessary to verify identity, account ownership or an authorized agent’s authority. We will respond within the time required by the applicable law and explain when a legal exception applies.

Where applicable law requires an additional method, appeal process, “Your Privacy Choices,” “Do Not Sell or Share My Personal Information,” sensitive-data limitation mechanism, or universal opt-out recognition, we will provide that mechanism when the legal requirement applies to our processing.

23. Third-party websites and vendor services

The Platform may link to vendor websites, affiliate merchants, advertisers, payment services, social networks or other independent third parties. Their services and privacy practices are controlled by them, not by SARAD RETAIL LLC. Review their privacy policies before providing information directly to them.

24. Vendor payments, communication, and acceptance records

My Celebration Plan does not collect or process payments from planners to independent vendors for vendor services. Planners are responsible for contacting and communicating with vendors, confirming payment arrangements, and paying vendors directly. Vendors and any payment services they use handle those payments under their own privacy practices and terms.

My Celebration Plan may store proposal and booking details, payment schedules, payment statuses entered by users, reminder delivery records, and the planner’s acknowledgment of the direct vendor payment notice, including the proposal identifier, notice version, text, and acknowledgment timestamp. These records support planning, proposal acceptance, notifications, security, and administration of the marketplace; they do not establish that My Celebration Plan processed or independently verified a vendor payment. Do not enter complete card numbers, bank account credentials, or other sensitive payment information into proposal, messaging, or planning fields.

As described in our Terms and Conditions, to the fullest extent permitted by applicable law, My Celebration Plan is not responsible or liable for vendor-service payments, transactions, refunds, or disputes arising from proposal acceptance. Those matters must be handled directly between the planner and vendor and, where applicable, their payment provider.

Payments for My Celebration Plan products and vendor subscriptions are separate from vendor-service payments and remain subject to the payment-processing disclosures elsewhere in this Policy.

25. Changes to this Privacy Policy

We may revise this Policy when laws, technologies, integrations or business practices change. We will post the current version and effective date here and provide additional notice where required for material changes.

26. Contact

My Celebration Plan is operated by SARAD RETAIL LLC. For privacy questions or rights requests, contact admin@mycelebrationplan.com.