Privacy Policy

How we use booking information

We use the information you provide to manage your booking, process payment, send essential booking messages, prevent fraud, and comply with legal and accounting obligations. Payments are processed by Stripe. For more information, see our Privacy Policy.

A fitting request can include your name, email address, phone number, appointment details, dress preference and optional notes. Please do not provide medical or other sensitive personal information in the notes field.

Our reasons for processing

We process booking information to take steps before entering into and performing our agreement with you, to meet legal and accounting obligations, and for legitimate interests such as security, fraud prevention and protecting legal claims. Marketing email requires a separate, optional consent.

Payments and Stripe

Stripe processes the fitting payment. We do not store card numbers, CVC values or full payment-method details. We retain only the Stripe identifiers, amount, currency, payment or refund status, and dates needed for operations and accounting. Stripe may retain some information independently to meet its own legal obligations.

Booking messages and marketing

Essential messages about a booking, payment or cancellation are not marketing. Email news and offers are optional, are never required to book, and require an affirmative opt-in. You can withdraw that consent at any time.

How long we keep information

• Expired or abandoned unpaid bookings without a provided service: up to 30 days after the last activity or failed payment.
• Cancelled appointments: up to 12 months after the later of cancellation or the scheduled appointment.
• Full operational records for completed appointments: up to 24 months after the appointment.
• Minimal contract, claim, payment and accounting records: up to 6 years where legally or operationally required.
• Active email-marketing consent: until withdrawal or the programme ends.

When the operational period ends, contact details, free-form notes and unnecessary operational fields are deleted or anonymised. Records subject to a legal retention requirement are restricted and are not used for marketing.

Your privacy requests

You may ask for access, a portable export, correction or deletion of your information or withdraw email marketing consent through our contact page at sales@caitbridal.ie. We may need to verify your identity proportionately. We normally respond within one month. A complex request may take up to two additional months, and we will notify you within the first month if an extension is needed.

Information that must be retained by law or for substantiated legal claims cannot always be deleted immediately. We will explain what was deleted, what must be retained, why it is retained, and when final deletion is expected.