We process only what is needed to answer enquiries, book meetings, operate the website and manage our own business assets.
Contact
Data controller
Casamento Perfeito is responsible for the processing described in this policy and provides wedding planning and coordination services in Portugal. For privacy matters, you can contact us through [email protected].
Transparency
Data we may process
- Enquiries and meetings: name, email and telephone, which are required to complete a booking; date and time; optional notes; and the planner answer summary.
- Optional cultural or religious details: if you select that format, the answer may reveal preferences of this nature and is sent with the booking only after explicit confirmation. You can omit it by selecting another format.
- Preferences stored on the device: language, planner answers, comparison choices and cookie preferences.
- Technical data: IP address, browser information, requested path, security logs and temporary rate-limiting data.
- Consented analytics and attribution: usage events, visit source and campaign parameters. Configured events do not deliberately include name, email or telephone; a pseudonymous lead identifier may appear in both the conversion event and booking metadata to relate the two.
- Business Meta integration: data obtained from Meta APIs and connected assets, including technical identifiers for the Page, Instagram account, ad account, posts and campaigns; selected publishing content; settings, budgets, aggregate metrics and protected technical tokens.
When enabled, the Meta integration is used internally only for Casamento Perfeito's own business assets. The configured permissions do not cover passwords, full payment card numbers, private messages, named follower lists or the individual Meta profiles of website visitors.
Limited use
Purposes and legal grounds
- Pre-contractual steps: responding to enquiries, preparing meetings and sending the information required by the scheduling service.
- Explicit consent: using an optional cultural or religious detail only to adapt the requested conversation and service.
- Requested functionality: saving choices on the device and keeping the planner available.
- Consent: measuring the website and relating campaigns to enquiries through analytics and marketing attribution.
- Legitimate interests: authenticating, validating, publishing and managing content and ads on our own Meta business assets, and protecting and diagnosing the service.
- Legal obligations: retaining or providing information where required by law.
Authorisation granted within Meta enables technical API use and is not automatically treated as GDPR consent. Any consent may be withdrawn without affecting processing carried out before withdrawal.
Restricted access
Providers and transfers
Data is shared only where necessary with:
- Cal.com, which receives name, email, telephone, time, notes, the planner summary, pseudonymous lead identifier and consented attribution to create and manage the booking.
- Google, which receives events, a pseudonymous lead identifier and campaign data through Google Analytics after consent.
- Meta Platforms Ireland, which provides connected-asset data and receives the content, settings and instructions needed to manage posts, ads and metrics.
- Cloudflare and hosting and security providers, which receive the technical data needed to deliver and protect the website.
- Unsplash, when the browser loads external editorial images, receiving the normal technical data associated with that request.
Some providers may process information outside the European Economic Area under adequacy decisions, standard contractual clauses or other safeguards identified in their policies. You may request more information about these safeguards through [email protected]. Casamento Perfeito does not sell personal data or provide contact lists to advertisers.
Data minimisation
Retention and security
- Planner answers remain on the device until replaced or deleted by the user.
- Consented attribution stored in the browser expires after 90 days.
- The IP address used only for rate limiting remains in process memory for between 60 seconds and 15 minutes; ordinary infrastructure logs follow the provider's operational retention period.
- Meeting data in Cal.com is reviewed according to whether the meeting has taken place, whether there is an active professional relationship, whether the enquiry still needs a response and any applicable legal periods.
- Meta tokens currently issued for a limited period are replaced or revoked on expiry; identifiers and settings are kept only while the asset connection is active or required for requests and legal obligations.
- Data covered by a valid deletion request is erased promptly, except for the part strictly required by law or needed to establish, exercise or defend legal claims.
Technical and organisational measures proportionate to the risk are applied. You can request the retention criteria applicable to your case through [email protected].
GDPR
Rights and deletion requests
You may request access, correction, deletion, restriction, portability or objection, where applicable, through[email protected]. You may withdraw consent and complain to the Portuguese Data Protection Authority.
See the data deletion instructions. We will respond without undue delay and normally within the legal period of one month. The website does not make solely automated decisions that produce legal or similarly significant effects for users.
Current version
Changes and contact
This policy may change when the website, providers or integrations change. The current version will remain at /en/privacy-policy/. Last updated: 15 August 2026.