Henna & Harmony ("Henna & Harmony," "we," "us," or "our") operates the websites hennaandharmony.com (the "Site") and the planning application at hennaandharmony.app (the "App," together with the Site, the "Services"). This Privacy Policy explains what information we collect, how we use and share it, and the choices you have. By using the Services you agree to this Policy. If you do not agree, please do not use the Services.
1. Who this Policy applies to
Our Services are used by three kinds of people, and what we collect depends on which describes you:
- Visitors — anyone browsing the Site, reading planning resources, or looking through the vendor directory and real-wedding archive.
- Couples — people planning a wedding who contact us, request early access, submit their wedding for editorial review, or create an account on the App.
- Vendors and creative partners — wedding professionals who claim or create a listing in our vendor directory, or who submit weddings they photographed, filmed, planned, or styled.
2. Information we collect
a. Information you give us
- Contact and early-access forms. Your name, email address, optional phone number, message, optional preferred date or wedding date, and how you heard about us.
- Vendor accounts. Email address and password (the password is hashed by our auth provider — we never see it), business name, contact email, description, quote, expertise tags, categories, profile and card images, Instagram and website URLs, location and service areas, team size, years active, typical events per year, and lead time.
- Vendor claim and review. Information you provide to verify ownership of a listing, including links and any correspondence with our review team.
- Wedding submissions. Partner names, wedding date and locations, heritages and traditions represented, ceremony and event details, photographs (hero and gallery images), vendor credits, and the written responses you provide for editorial review. You also confirm the consents described in Section 5.
- Resource downloads. The email address you provide to receive planning resources.
- Communications with us. The contents of emails, support requests, and any other messages you send.
b. Information collected automatically
- Usage data. Pages viewed, links clicked, referring URLs, timestamps, approximate location derived from IP address, browser type, device type, operating system, and screen size.
- Cookies and similar technologies. Small files set by us or by analytics providers to keep you signed in, remember preferences, and measure how the Services are used. Details are in Section 4.
c. Information from third parties
If a vendor or creative partner is added to our directory based on publicly available business information (for example, a public Instagram bio or business website), the listing remains unclaimed and limited to that public information until the vendor claims it. Vendors may then update or remove their listing as described in Section 7.
3. How we use information
- To operate and improve the Services.
- To respond to contact form submissions, early-access requests, vendor claim requests, inquiries, and support questions.
- To review wedding submissions for editorial publication and to credit the creative partners involved.
- To create, authenticate, and secure vendor accounts, and to send transactional emails such as password resets, claim approvals, and inquiry notifications.
- To send occasional emails about Henna & Harmony, the vendor program, and editorial features. You can opt out at any time by replying or using the unsubscribe link.
- To detect, prevent, and respond to fraud, abuse, and security incidents.
- To comply with legal obligations.
4. Cookies, analytics, and tracking
We use cookies and similar technologies to keep the Services working and to understand how they are used. You can disable cookies in your browser, but parts of the Services — especially signed-in areas of the App — will not function correctly without them.
a. On hennaandharmony.com (the Site)
- Google Analytics 4. We use GA4 to measure how many people visit the Site and which pages they read. GA4 sets cookies (for example,
_ga) that identify a browser across visits. Google may process this information in the United States and other countries. You can opt out of GA tracking using Google's browser add-on at tools.google.com/dlpage/gaoptout. - Session cookies. If you sign in as a vendor, Supabase Auth (our authentication provider) sets cookies to keep you signed in.
- Operational cookies. Short-lived cookies used to carry intent between steps of certain flows, such as the vendor claim flow.
b. On hennaandharmony.app (the App)
- PostHog. We use PostHog to measure feature usage — for example, which screens are viewed and which buttons are clicked — so we can improve the planning tools. PostHog sets cookies and may process information in the United States. We do not enable session replay or recording of form inputs.
- Authentication cookies. Supabase Auth cookies keep you signed in to your account.
We do not use third-party advertising cookies and we do not allow advertisers to track you across other sites through the Services. We do not respond to browser "Do Not Track" signals; we follow the choices described in this Policy instead.
5. Photos, wedding submissions, and editorial use
Wedding submissions are central to the Services, so this section sets out clearly how photographs and related details are handled.
- Who may submit. A couple may submit their own wedding, or a creative partner (such as the photographer, videographer, or planner) may submit a wedding they worked on.
- Required consents. Before a submission can be sent, the submitter must confirm: (i) for couples, that they have the right to share the photos or have written permission from the photographer or videographer, and grant Henna & Harmony permission to feature the wedding — photos, names, and story details — on the Site and on social channels; (ii) for creative partners, that they own the copyright to the images or have a license or written consent from the copyright holder to submit them for editorial use, and that the couple has been informed and consents to the submission. False or unauthorised submissions may be removed without notice.
- Storage. Submitted photographs are stored in a dedicated cloud bucket. Files used in published features are served from public URLs so that browsers can display them on the Site. Files associated with submissions that are not approved may be deleted from storage when a submission is rejected or abandoned.
- Editorial review. Our editorial team reviews each submission, may request additional details or higher-resolution imagery, and decides whether to publish. Published features include credits for the creative partners identified in the submission.
- License you grant us. By submitting content, you grant Henna & Harmony a worldwide, non-exclusive, royalty-free, sublicensable, transferable license to host, store, reproduce, adapt, publish, display, and distribute that content on the Services and on Henna & Harmony social media channels for editorial, promotional, and archival purposes. You retain ownership of your content.
- Taking content down. Couples or copyright owners can ask us to remove a published wedding or specific images at any time. See Section 7 and Section 10.
6. Information that is public by design
- Vendor directory. A vendor listing's business name, categories, description, photographs, social and website links, location and service areas, expertise, team size, years active, and similar profile details are intended to be publicly visible once published.
- Published weddings. The public title, summary, photographs, and credited vendors of a published wedding are intended to be publicly visible. Personal responses provided during submission are treated as editorial material and are not displayed verbatim.
- Account email addresses. Vendor account emails are not displayed on public profiles unless the vendor chooses to publish a contact email.
7. How we share information
We do not sell personal information. We share it only as described below.
- Service providers (sub-processors). We use trusted third parties to run the Services. Each is bound by data-processing terms and may only use the information to provide services to us.
- Supabase — database, authentication, and file storage.
- Netlify — hosting and delivery of the Site and App.
- Resend — delivery of transactional emails such as contact replies, early-access notifications, vendor claim updates, and password resets.
- Google — Google Analytics 4 on the Site, Google Maps for displaying location information, and a Google Sheets endpoint that captures early-access requests for our internal records.
- PostHog — product analytics on the App.
- Publicly displayed information. The data described in Section 6 is shown to anyone who visits the relevant pages.
- Vendor inquiries. If you contact a vendor through an inquiry form, the contents of your inquiry are shared with that vendor so they can respond.
- Legal and safety. We may disclose information to comply with applicable law, valid legal process, or government requests, to enforce our Terms, or to protect the rights, safety, or property of Henna & Harmony, our users, or the public.
- Business transfers. If we are involved in a merger, acquisition, financing, or sale of assets, information may be transferred as part of that transaction, subject to standard confidentiality protections.
8. How long we keep information
We keep personal information for as long as it is needed to provide the Services and for legitimate business or legal purposes. Vendor account data is retained while your account is active. Contact form and early-access submissions are retained so we can respond and follow up. Wedding submission files that are not approved are routinely deleted from storage. Published wedding features are retained indefinitely as part of the editorial archive unless you ask us to remove them.
9. Security
We use commercially reasonable administrative, technical, and organizational safeguards to protect information, including encryption in transit, restricted access to production systems, managed authentication via Supabase, and HMAC-signed tokens for anonymous uploads. No system is perfectly secure, and we cannot guarantee the security of information transmitted over the internet.
10. Your choices and rights
- Access, correction, deletion. You may ask us to provide a copy of, correct, or delete personal information we hold about you. Vendors can update most profile information directly in the dashboard. To request deletion of an account, a wedding submission, or a published feature, email hello@hennaandharmony.com.
- Email preferences. You can opt out of non-transactional emails at any time. Transactional emails (security, account, and editorial-review messages) are sent as part of the Services and are not opt-out.
- Analytics. You can disable cookies in your browser or use the Google Analytics opt-out add-on. PostHog tracking only runs while you are signed in to the App.
- U.S. state privacy rights. If you live in California, Virginia, Colorado, Connecticut, Utah, or another U.S. state that grants privacy rights, you may have the right to access, correct, or delete personal information about you and to appeal a decision we make about your request. We do not sell personal information or share it for cross-context behavioral advertising.
- EU/UK rights. If you are in the European Economic Area, the United Kingdom, or Switzerland, you have rights under the GDPR or UK GDPR, including the rights of access, rectification, erasure, restriction, portability, and objection. Our legal bases for processing are: contract (to operate the Services for vendors and submitters), consent (for non-essential cookies and editorial publication of submissions), legitimate interest (for product measurement, security, and improving the Services), and legal obligation. You may also lodge a complaint with your local supervisory authority.
To exercise any of these rights, contact hello@hennaandharmony.com. We will respond within the time required by applicable law.
11. International users
The Services are operated from the United States. If you access the Services from another country, your information will be transferred to, processed in, and stored in the United States and other countries where our sub-processors operate. By using the Services you consent to these transfers.
12. Children
The Services are not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has provided personal information to us, please contact hello@hennaandharmony.com and we will delete it.
13. Changes to this Policy
We may update this Policy from time to time. Material changes will be highlighted on the Site and, when appropriate, sent by email. The "Effective Date" at the top of this page reflects the latest version. Continued use of the Services after changes take effect constitutes acceptance of the updated Policy.