Privacy policy
PRIVACY POLICY
Last updated: May 19, 2026
WHO WE ARE
Letters to the Bride (ABN 59 667 067 085) operates this website and related services at letterstothebride.com ("the Services"). We are based in Australia and our services are intended for Australian customers. This Privacy Policy describes how we collect, use, store, and disclose your personal information in connection with the Services.
For the purposes of applicable data protection laws, Letters to the Bride is the data controller of your personal information.
This Privacy Policy should be read alongside our Terms of Service and Refund Policy. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
By using the Services, you confirm that you have read and understood this Privacy Policy.
AUSTRALIAN PRIVACY ACT
Letters to the Bride complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). If you are located in Australia, these principles govern how we handle your personal information.
WHAT IS PERSONAL INFORMATION
"Personal information" means information that identifies you or could reasonably be used to identify you. It does not include anonymised or de-identified information.
INFORMATION WE COLLECT
Depending on how you interact with the Services, we may collect the following categories of personal information:
From purchasers (MOHs):
- Contact details: name, email address, phone number, shipping address
- Payment information: processed securely via Shopify Payments — we do not store card numbers
- Order and transaction details
- Dashboard login credentials
- Communications you send to us
From guests (letter writers):
- Name and relationship to the honouree (as entered in the letter form)
- The personal letter content submitted through the guest link
- Device information, IP address, and browser data collected automatically when accessing the guest link
Automatically from all users:
- Device type, operating system, and browser
- IP address and approximate location
- Pages visited, time spent, and interaction data
- Cookie and tracking data (see Cookies section below)
HOW WE USE YOUR INFORMATION
We use personal information for the following purposes:
- Delivering the service: Processing purchases, activating guest links, managing MOH dashboards, sending order confirmations and welcome emails
- Producing physical orders: Passing letter content and shipping addresses to our print production process for Printed Letters tier orders
- AI writing assistance: Guest letter content may be processed by our AI writing assistant (powered by Anthropic) to generate writing suggestions. This processing occurs in real time and the content is not stored by Anthropic beyond the immediate request
- Customer support: Responding to enquiries, resolving disputes, and managing refund or replacement requests
- Security and fraud prevention: Detecting and preventing fraudulent transactions and unauthorised access
- Legal compliance: Meeting our obligations under applicable law
- Service improvement: Analysing usage patterns to improve the platform (using anonymised or aggregated data where possible)
- Marketing: Sending promotional communications where you have opted in, or where permitted under applicable law. You may opt out at any time
GUEST LETTER CONTENT — SPECIAL NOTICE
Guest letters contain personal and sensitive content about third parties (the honouree and the guest themselves). We treat this content with strict confidentiality:
- Guest letters are only accessible to the purchasing MOH through their private dashboard
- Letters are never read, reviewed, or accessed by Letters to the Bride staff except where required to resolve a technical support request — and only with your permission
- We will never use, publish, share, or reproduce guest letter content for marketing, research, training, or any other purpose without the explicit written consent of the purchaser and the relevant guest
- All guest letters and associated data are permanently and irreversibly deleted 30 days after your dashboard expires. We have no ability to recover data after this point. It is your responsibility to save or download any content you wish to keep before expiry.
THIRD-PARTY SERVICE PROVIDERS
We share personal information with third-party service providers only to the extent necessary to deliver the Services. These providers are required to handle your information in accordance with their own privacy policies and applicable law.
Our current service providers include:
| Provider | Purpose | Privacy Policy |
|---|---|---|
| Shopify | ecommerce platform, payment processing, storefront hosting | shopify.com/legal/privacy |
| Supabase | database and backend infrastructure — stores order data and letter content | supabase.com/privacy |
| Resend | transactional email delivery (order confirmations, guest links, welcome emails) | resend.com/privacy |
| Anthropic | powers the AI writing assistant. Guest content is processed in real time only and not retained | anthropic.com/privacy |
| Vercel | hosting of the MOH dashboard application | vercel.com/legal/privacy-policy |
| Australia Post | delivery of printed letter orders — shipping name and address only | auspost.com.au/privacy |
Some of these providers are located outside Australia and may store or process your data overseas. By using the Services, you consent to this transfer where required.
RELATIONSHIP WITH SHOPIFY
The storefront at letterstothebride.com is hosted by Shopify. Shopify collects and processes personal information about your access to and use of the storefront in order to provide and improve services. Information you submit at checkout will be transmitted to and processed by Shopify. To learn more about how Shopify handles your personal information, visit . You may exercise privacy rights in relation to Shopify-processed data via the .
MARKETING COMMUNICATIONS
We may send promotional emails to customers who have made a purchase, where permitted under the Spam Act 2003 (Cth). Every marketing email includes an unsubscribe link. You may opt out at any time and we will honour that request promptly.
If you opt out of marketing emails, we will still send transactional emails related to your order (order confirmation, guest link delivery, dashboard notifications).
COOKIES
Our website and dashboard use cookies and similar technologies to improve functionality and analyse usage. These may include:
- Essential cookies: Required for the service to function (session management, login state)
- Analytics cookies: Used to understand how the site is used — we use anonymised data only
- Marketing cookies: Used by Shopify and advertising partners to personalise ads
You may disable cookies through your browser settings. Disabling essential cookies may affect your ability to use the Services.
THIRD-PARTY LINKS
The Services may contain links to third-party websites. We are not responsible for the privacy practices or content of those sites. We recommend reviewing the privacy policy of any third-party site you visit.
CHILDREN'S PRIVACY
The Services are intended for users aged 18 and over. We do not knowingly collect personal information from anyone under 18. If you believe a child has provided us with personal information, please contact us and we will delete it promptly.
DATA SECURITY
We implement reasonable technical and organisational measures to protect your personal information from unauthorised access, loss, misuse, or disclosure. However, no method of internet transmission or electronic storage is completely secure. We cannot guarantee absolute security.
You are responsible for keeping your dashboard login credentials secure. We recommend you do not share your password with anyone.
DATA RETENTION
We retain your personal information for as long as is necessary to deliver the Services, comply with legal obligations, resolve disputes, and enforce our agreements.
Specifically:
- Guest letters and dashboard content: Deleted permanently 30 days after your deadline expires
- Order and transaction records: Retained for 7 years in accordance with Australian tax and accounting obligations
- Customer support communications: Retained for 2 years from the date of the last interaction
YOUR RIGHTS
Under the Australian Privacy Act and, where applicable, other privacy laws, you may have the right to:
- Access the personal information we hold about you
- Correct inaccurate personal information
- Request deletion of your personal information (subject to legal retention obligations)
- Opt out of direct marketing communications
- Make a complaint about how we have handled your personal information
To exercise any of these rights, contact us at . We will respond within a reasonable timeframe and in accordance with our obligations under applicable law.
If you are located in the UK or European Economic Area, you may also have rights to object to or restrict processing, and to data portability. Contact us to make such a request.
COMPLAINTS
If you have a complaint about how we have handled your personal information, please contact us at . We will acknowledge your complaint promptly and work to resolve it.
If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au or call 1300 363 992.
If you are located in the EEA or UK, you may also lodge a complaint with your local data protection authority.
CHANGES TO THIS POLICY
We may update this Privacy Policy from time to time. The current version will always be published at letterstothebride.com/policies/privacy-policy. Where changes are material, we will provide notice as required by applicable law.
CONTACT
Letters to the Bride
letterstothebride.com
ABN 59 667 067 085