Privacy policy

WASLA WEDDINGS LLC Wasla Privacy Notice

Effective date: 30 September 2026

Service Provider: Wasla Weddings LLC Commercial Registration Number: Not yet issued Tax Registration Number: Not yet issued Registered Address: Not yet registered Support: cs@waslaweddings.com

1. Who this Privacy Notice applies to

This Privacy Notice explains how Wasla Weddings LLC, trading as “Wasla” (“Wasla”, “we”, “us” or “our”), collects, uses, stores, shares and otherwise processes personal data when you visit waslaweddings.com, create or use a Wasla account, purchase a wedding package, collaborate on a wedding, act as a wedding guest, use an invitation or RSVP flow, interact with a partner workspace, contact support, or otherwise use Wasla.

Wasla processes personal data in accordance with applicable Egyptian law, including the Personal Data Protection Law No. 151 of 2020, together with other laws that apply to particular transactions or records. This Notice should be read with the applicable Wasla Terms.

2. Our role and wedding-specific data

For account administration, platform operation, security, payments, support, analytics, product administration and our own business records, Wasla determines why and how the relevant personal data is processed.

Couples and their authorized collaborators also decide what wedding-specific information to enter, which guests to invite, which events a guest may attend, what RSVP or meal questions to ask, and who may access wedding information. Depending on the processing activity, the legal roles and responsibilities of Wasla, the couple, a planner, a venue or another organization may differ. This Notice describes Wasla’s processing; another party may also have its own legal obligations for information it controls.

3. Personal data we collect

Account and identity data: name, email address, account identifiers, authentication status, profile information, language preference and role or membership information.

Wedding data: wedding name, date, timezone, couple details, public slug, event information, venue/location information, announcements, website content, collaboration records, guest-management settings and package/hosting status.

Guest and invitation data: guest name, phone number, email where provided, invitation eligibility, personal or shared invitation identifiers, plus-one information, event eligibility, RSVP status, attendance choices, seating or table information where used, replies and messages.

Meal and dietary data: meal selections, allergies, dietary restrictions or related responses when a wedding enables these questions. Some such information may reveal health-related information and can require additional protection under applicable law.

Media and content: photographs, videos, captions, website text, uploaded files, posters/renditions, messages and other content provided by couples, collaborators or guests.

Purchase and payment data: package, price, currency, order identifiers, promo-code data, payment method, payment status, transaction or provider identifiers, refund information and reconciliation records. For InstaPay, this may include transfer references, payer references and payment-proof images or files submitted for verification. For Paymob, Wasla may receive transaction status, amount, provider identifiers and payment metadata. Full payment-card credentials are normally entered into and processed by the payment provider rather than stored by Wasla.

Phone-verification data: phone number, verification-attempt identifiers, verification status, timestamps, provider responses and anti-abuse information needed to operate guest verification. Verification may be provided through Akedly or another provider configured by Wasla.

Support and communications data: emails, support requests, WhatsApp or phone contact details, complaint information, correspondence and records needed to resolve an issue.

Technical and security data: IP address, user agent, device/browser information, request identifiers, timestamps, authentication events, security logs, rate-limit information, error diagnostics and similar operational data.

Usage and analytics data: pages or product surfaces viewed, funnel events, feature interactions and performance information where analytics is enabled. Wasla seeks to avoid placing wedding content, guest names, phone numbers or other sensitive content into analytics events.

4. How we obtain personal data

We obtain data directly from you when you create an account, purchase, edit a wedding, respond as a guest, verify a phone number, upload content, contact support or otherwise interact with Wasla.

We also receive data from wedding owners or authorized collaborators when they create guest records, import guest lists, assign guests to events, configure invitations or enter wedding information before a guest visits Wasla.

We may receive payment and verification information from providers such as Paymob, InstaPay-related banking records available to Wasla, Akedly, email providers or other service providers involved in the transaction.

We generate some technical, security and audit information automatically when the service is used.

5. Why we process personal data

We process personal data to create and administer accounts; create and operate wedding workspaces; provide invitations, guest verification, RSVP and meal features; publish wedding websites; host media; enable collaboration; process and verify payments; provide purchased entitlements; prevent fraud and abuse; protect accounts and wedding data; provide support; diagnose incidents; maintain records; enforce applicable terms; comply with legal obligations; establish, exercise or defend legal rights; improve reliability and product usability; and administer partner relationships.

Where processing depends on consent under applicable law, consent will be requested in a manner appropriate to that processing. Contract acceptance is not treated as blanket consent to all personal-data processing.

Where sensitive personal data is processed, Wasla will apply the additional requirements and safeguards required by applicable law.

6. Guest data supplied by couples

A couple or authorized collaborator may add a guest’s information before the guest has interacted with Wasla. This is necessary for core wedding functions such as creating the guest list, determining invitation eligibility and sending or generating personalized invitation access.

The person who supplies guest information is responsible for providing it lawfully and for giving any notice or obtaining any authorization required from them. Wasla separately remains responsible for its own processing obligations under applicable law.

Guests can contact Wasla using the privacy contact below regarding personal data held by Wasla. Some wedding-specific changes may also require coordination with the couple because the couple controls the underlying guest-list decision.

7. Sensitive data and dietary information

Wasla may process dietary restrictions, allergies or similar information only when a wedding enables those questions or a guest voluntarily submits the information. This information is used to coordinate the wedding and may be accessible to the couple and authorized collaborators.

Wasla does not use dietary or allergy information for advertising or unrelated profiling. Where Egyptian law requires specific consent, authorization, licensing or additional safeguards for sensitive personal data, Wasla will apply those requirements before or in connection with the relevant processing.

Guests should avoid submitting medical details beyond what is reasonably necessary for wedding coordination.

8. How we share personal data

With the couple and authorized wedding users: wedding owners, second owners, editors and other authorized collaborators may receive information according to their role and the wedding’s configuration.

With partner organizations: where a planner, venue or partner is legitimately assigned to the wedding, it may receive only the information made available through its authorized role or separately agreed workflow.

With service providers: Wasla uses service providers to host, secure and operate the platform. Current or expected providers may include Supabase for database, authentication and storage services; Vercel for application hosting and analytics; Resend or another email provider for transactional email; Akedly or another verification provider for guest phone verification; Sentry or another observability provider for error monitoring; Paymob for electronic payment processing; and banking or instant-payment channels used to reconcile InstaPay transfers. Providers receive only the data reasonably required for the services they perform and are subject to applicable contractual and legal obligations.

With professional advisers and authorities: we may disclose information to lawyers, accountants, auditors, insurers, regulators, courts, law-enforcement bodies or other competent authorities where disclosure is required or permitted by law or reasonably necessary to establish, exercise or defend legal rights.

Business transfers: if Wasla is reorganized, financed, sold, merged or transfers relevant business assets, personal data may be disclosed subject to appropriate confidentiality, legal safeguards and applicable data-protection requirements.

Wasla does not sell guest lists or personal data to advertisers.

9. Payments

Paymob: When you choose a Paymob-supported payment method, payment information is processed through Paymob and relevant banks, card networks, wallets or payment channels. Wasla receives the transaction information needed to create, confirm, reconcile, refund and support the order. Payment providers may independently process information under their own privacy notices and regulatory obligations.

InstaPay: When you pay using InstaPay, Wasla may process the amount, order reference, transfer reference, payer reference, payment-proof file and the banking record needed to match the incoming transfer. Payment proof is retained only for as long as reasonably required for verification, fraud prevention, accounting, legal compliance and dispute handling under Wasla’s retention rules.

Wasla does not treat an uploaded InstaPay screenshot as final settlement; verification is performed against the corresponding incoming transfer.

10. International processing and data transfers

Some technology providers used by Wasla may host, support or process information using infrastructure located outside Egypt or accessible by personnel outside Egypt. Where personal data is transferred or made accessible across borders, Wasla will apply the requirements of Egyptian Personal Data Protection Law No. 151 of 2020 and any applicable permits, approvals, contractual protections or transfer rules.

The specific hosting region used by a provider may change according to Wasla’s configuration and the provider’s service architecture. Wasla will maintain appropriate vendor and processing records rather than promising that all data remains physically inside Egypt.

11. Data retention

We retain personal data for the period reasonably necessary for the purpose for which it was collected, the duration of the relevant wedding and hosting term, applicable support and recovery periods, payment/accounting requirements, fraud prevention, security, legal obligations and the establishment or defense of legal claims.

Different categories have different retention periods. Legal acceptance records, order records, invoices, payment reconciliation records and audit/security records may need to be retained longer than ordinary wedding content.

When retention is no longer justified, data will be deleted, anonymized or otherwise disposed of in accordance with Wasla’s retention process, subject to backup-cycle limitations and legal obligations.

Expiration of a wedding website or package does not necessarily mean that every related record is deleted at the same instant.

12. Security

Wasla uses administrative, technical and organizational measures designed to protect personal data against unauthorized access, loss, misuse, alteration or disclosure. Measures may include role-based access controls, row-level database controls, restricted administrative functions, authentication controls, logging, encrypted transport, private storage, signed or time-limited access mechanisms, provider security controls, rate limiting and incident monitoring.

No internet service can guarantee absolute security. If you believe your account, invitation credential or personal data has been compromised, contact Wasla promptly.

13. Your data-protection rights

Subject to the conditions, exceptions and procedures in applicable Egyptian law, you may have rights to know whether and how your personal data is processed, access or obtain information about it, request correction or updating, request deletion where applicable, withdraw consent where processing is based on consent, object to or limit certain processing where the law provides that right, and complain to the competent authority.

To make a privacy request, contact cs@waslaweddings.com. We may need to verify your identity and the scope of your request before acting. We may also need information identifying the relevant wedding or guest record.

Some requests may be limited where retention or processing is required by law, necessary for the rights of another person, necessary for security or fraud prevention, or otherwise lawfully exempt.

14. Children and minors

Wasla consumer accounts and purchases are intended for adults who can lawfully contract. Wedding guest lists may include children or minors as guests or plus-ones. Where an adult supplies information about a child, the adult must have the authority required to do so.

Wasla will apply any consent, guardian authorization or additional safeguards required by Egyptian law when processing personal data relating to children in circumstances where those requirements apply.

15. Cookies and similar technologies

Wasla may use cookies, local storage and similar technologies that are necessary for authentication, security, language preferences, guest sessions and core product functionality. Analytics or measurement technologies may also be used where configured.

Where applicable law requires a separate choice for non-essential tracking or marketing technologies, Wasla will provide the required notice and choice. Wasla does not use a Terms-and-Conditions checkbox as consent for unrelated advertising tracking.

16. Direct marketing

Wasla may send service communications needed to operate an account, order, payment, invitation, security flow or wedding feature. These are operational communications rather than promotional marketing.

Where Wasla sends direct electronic marketing, it will do so in accordance with applicable Egyptian law and provide the required identification and opt-out mechanism. Guest contact details obtained for wedding administration will not be repurposed for Wasla marketing merely because a guest used an invitation.

17. Automated decisions and fraud prevention

Wasla may use automated rules to enforce rate limits, validate input, prevent duplicate or abusive requests, detect technical anomalies and protect accounts or payment flows. Material commercial or access decisions that require human review under Wasla’s product design, such as manual InstaPay proof review, are not treated as approved solely because a user uploaded evidence.

If Wasla later introduces automated decision-making that has legal or similarly significant effects, this Notice will be updated and any rights required by law will be provided.

18. Changes to this Privacy Notice

Wasla may update this Privacy Notice when the service, vendors, legal requirements or processing activities change. The current published version will show its publication or effective date.

Where a change materially affects a processing activity for which new consent or another specific legal step is required, Wasla will obtain or provide that step rather than relying solely on publication of an updated notice.

19. Contact and complaints

For privacy questions or requests, contact cs@waslaweddings.com. For general customer support, contact cs@waslaweddings.com.

You may also have the right to submit a complaint to the competent Egyptian personal-data protection authority once and to the extent its complaint mechanisms apply to the relevant matter. Nothing in this Notice limits a right granted by applicable law.

20. Language and governing framework

This Notice is intended to be available in Arabic and English. The versions are intended to describe the same processing. If an inconsistency arises, the Arabic version will prevail to the extent permitted by applicable law.

This Notice is governed by the applicable laws of the Arab Republic of Egypt, including Personal Data Protection Law No. 151 of 2020.