VisualsBySaad operates this Platform from St. John's, Newfoundland and Labrador. Newfoundland and Labrador does not have its own private-sector privacy law judged "substantially similar" to the federal standard (unlike Alberta, British Columbia, and Quebec), so personal information handled through this Platform is governed directly by PIPEDA, Canada's federal private-sector privacy law.
This policy explains how personal information is collected, used, and disclosed for everyone who interacts with the Platform: businesses and their owners, vendors, clients, and the guests of the events being planned (see Section 4 for guests specifically).
PIPEDA requires every organization to name someone accountable for privacy compliance. For VisualsBySaad, that's Saad, the business owner. Questions, concerns, or complaints about how personal information is handled can be directed to him through the Platform's contact channels.
When a couple enters their guest list — names, RSVP status, dietary restrictions, plus-one details, sometimes phone numbers — that information is provided by the couple, on behalf of someone else, not collected directly from the guest at the point of entry. PIPEDA's consent principle is generally satisfied here because the couple, as the event host, has a reasonable basis to hold and share this information for the purpose of planning their own event — but the guest themselves has not interacted with this Platform or given consent to us directly at that point.
Where a guest does interact with the Platform directly — submitting their own RSVP, requesting a song, reporting an emergency, or explicitly consenting to receive SMS updates — that information is collected directly from them, with their own consent, as described in our SMS Consent Policy.
A guest who wants to know what information has been entered about them, correct it, or have it removed can contact the couple directly (who control that data) or reach out to us, and we will direct the request to the relevant business.
Personal information is collected to: operate the Platform's core functions (scheduling, communication, payments, guest coordination); process subscription and event payments; send transactional and, where consented, promotional communications; and improve the Platform's reliability and features. We do not collect personal information for purposes unrelated to these.
On public marketing pages, the site may create random visitor and session identifiers in browser storage and record page views, visibility-aware active time, scroll depth, referring host, internal navigation, campaign UTM values, and conversion signals. These analytics records do not contain names, email addresses, phone numbers, message content, or private client-portal activity. You can limit this measurement through browser settings or Do Not Track; the site respects a browser Do Not Track signal.
If you voluntarily join the VisualsBySaad newsletter, we store your email address, signup time, consent version, and the non-sensitive campaign/session attribution supplied at signup so we can manage the list and understand which public content is useful. Newsletter permission is separate from an inquiry or client-portal account. We do not sell the list or export it to an advertising audience from this form.
By creating an account or accepting an invitation, you consent to the collection, use, and disclosure of your information as described here. Newsletter signup uses a separate, affirmative checkbox. You can withdraw newsletter consent by contacting VisualsBySaad through the public contact channels or by using the unsubscribe option in a future newsletter. Consent for SMS communications specifically is handled separately and more strictly, as described in our SMS Consent Policy — providing a phone number alone is never treated as consent to be texted.
We use third-party service providers to operate the Platform. Personal information may pass through:
These providers act as processors on our behalf and are not permitted to use personal information for their own independent purposes. More detail on this is in our Data Processing Terms. We do not sell personal information to anyone.
We collect only what's needed for the purposes above. Information is retained for as long as an account is active, plus a reasonable period after closure for legitimate business and legal purposes (such as financial records), after which it is deleted or anonymized. A business can request deletion of their own data; guest data is controlled by the business/couple who entered it.
Access to personal information is restricted through account permissions and row-level database security — a business cannot see another business's data, a vendor cannot see weddings they're not assigned to, and so on. No system is perfectly secure, and we can't guarantee against every possible breach, but reasonable technical safeguards appropriate to the sensitivity of the information are in place.
If a breach occurs that poses a real risk of significant harm, we will notify the Office of the Privacy Commissioner of Canada and affected individuals as required by PIPEDA.
You can request access to the personal information we hold about you and ask us to correct inaccuracies, generally within 30 days of the request. You can also raise a concern about how your information has been handled directly with our Privacy Officer; if unresolved, you may escalate to the Office of the Privacy Commissioner of Canada (priv.gc.ca).
We may update this policy as the Platform evolves. Material changes will update the "Last updated" date above.