Privacy policy

Who we are

AMH Weddings ("we", "us") is a wedding planning and production team based in the Greater Toronto Area, serving Ontario and destination weddings. We are part of the AMH family of companies. We don't publish a street address; the easiest way to reach us about privacy is by email, below.

We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA). In short: we collect only what we need, we tell you why, we keep it safe, and you can ask to see or correct it at any time.

What we collect

We only collect information you choose to give us, plus a small amount of technical information that keeps the site working.

When you send an inquiry

Our planning form ("Plan your wedding"), the short contact form and "Check your date" all feed the same inquiry. Depending on how much you fill in, that includes:

Your name, email address and, if you add it, your phone number and whether we may message you on WhatsApp.
Your role in the wedding (bride, groom, parent, sibling or other) and how you heard about us.
Your events: the type, the date or season, the city, the venue if you have one, and a rough guest count.
The services you're interested in and preferences such as a segregated setup, women photographers and videographers, or help with your imam and nikah.
A budget range, if you choose to share one, and anything you write in the message box.
The page you sent the form from, so we know which service you were reading about.

When you use the planning tools

The wedding checklist and budget planner work entirely in your browser (see what stays in your browser). Nothing leaves your device unless you ask us to email you a copy. If you do, we receive your email address, your name if you add it, and the checklist items you ticked or the budget split you built, so we can send it to you.

Automatically, to keep the site working

Page views. We use Cloudflare Web Analytics to see which pages are read and how fast they load. It doesn't use cookies, doesn't follow you across other websites and shows us only aggregated figures such as page, country, device type and the site you came from.
Form progress. We record simple events such as "planning form started" or "step 3 reached", with no name, email or answers attached, so we can see where people get stuck.
Spam checks. Our forms use Cloudflare Turnstile to tell people from bots, together with a rate limit that briefly stores a hashed version of your IP address so one visitor can't flood our inbox.
Server logs. Like every website, our host keeps short-lived technical logs (IP address, browser type, time of request) for security and troubleshooting.

Why we collect it

To reply to your inquiry, understand your events and prepare a custom proposal.
To send you the checklist or budget summary you asked for.
To keep a simple list of inquiries so our team knows who has been contacted and who is waiting.
To book and hold a consult call, if you choose to book one.
To stop spam and abuse of our forms.
To understand how the site is used and make it better.

We rely on your consent, which you give by filling in a form, and we use the information only for the purpose you gave it. If we ever want to use it for something else, we'll ask first. You can withdraw consent at any time (see your rights), subject to any legal or contractual obligations.

Where it is stored and who processes it

We use a small number of service providers to run the site and respond to you. Each one processes your information on our behalf, under its own contract and privacy policy. Some of them store data outside Canada, including in the United States, where it may be subject to local laws.

Cloudflare hosts the website and runs the database where inquiries are saved (Cloudflare D1), the Turnstile spam check, the rate limiter and Web Analytics.
Resend sends our email: the notification to our team when you inquire, your confirmation, and any checklist or budget summary you ask for.
Google Sheets, through a private Google Apps Script, holds our team's list of inquiries so we can track who we've replied to. It contains the same details you gave in the form.
Calendly handles bookings if you choose to schedule a consult call. Calendly collects your name, email and the time you pick under its own privacy policy.
WhatsApp (owned by Meta) carries any messages you send us through the WhatsApp button, under its own terms. Only message us there if you're comfortable doing so.
Instagram links on the site take you to our profile. Instagram's own policy applies once you're there.

We don't use advertising networks, remarketing pixels or social media tracking on this site.

What stays in your browser

Some features remember things on your own device using your browser's local storage. This information doesn't reach us unless you send a form.

Your checklist progress and your budget planner figures, so they're still there when you come back.
Answers you've started in the planning form, so a page refresh doesn't lose them. They're cleared once you send the form.
A short-lived token from Cloudflare Turnstile that confirms you passed the spam check.

You can clear all of this at any time through your browser's settings. The site sets no advertising cookies and no cookies of its own.

How long we keep it

Inquiries are kept while we're in touch with you and for a reasonable period afterwards, so we can pick the conversation back up if you return. TODO_CONFIRM: retention period for unbooked inquiries, suggested 24 months after last contact
Booked weddings are kept for as long as needed to deliver the wedding and to meet our accounting and legal obligations, typically seven years for financial records.
Checklist and budget emails are kept for the same period as inquiries.
Analytics are aggregated and don't identify you. Technical logs are kept for a short period only.

When we no longer need information, we delete it or make it anonymous.

We never sell, rent or trade your information.
We never share it with vendors, venues or anyone else without your permission, except the service providers above, who work for us.
We never add you to a marketing list because you asked a question or used a planning tool.
We never publish photos, names or details of your wedding without written permission.

We may disclose information if the law requires it, for example in response to a valid court order.

Seeing, correcting or deleting your information

You can ask us, at any time, to:

Tell you what information we hold about you and how we've used it.
Correct anything that's wrong or out of date.
Delete your inquiry, where we have no legal reason to keep it.
Stop contacting you.

Email us using the address below. We'll confirm your identity, then respond within 30 days. There's no charge. If you're not satisfied with our answer, you can contact the Office of the Privacy Commissioner of Canada.

Keeping it safe

The site is served over HTTPS. Inquiries are stored in a database that only our team can access, protected by Cloudflare's access controls, and the secrets that connect our services are never published in the site's code. Only people who need to reply to you can see your inquiry. No system is perfectly secure, but we take reasonable care, and we'll tell you if a breach ever affects your information.

Children

This site is for adults planning a wedding. We don't knowingly collect information from anyone under 18. If you think a child has sent us information, email us and we'll remove it.

Changes to this policy

If we change how we handle your information, we'll update this page and the date at the top. Significant changes will be noted here clearly.

How to reach us

For anything about your privacy, including access and correction requests, email us or send a message through our contact page. Put "Privacy" in the subject line and we'll make sure it reaches the right person.