Privacy Policy
Last Updated: September 14, 2026 • Effective Immediately
Our Privacy Commitment at a Glance
- • No Data Brokering: We never sell, rent, or trade your personal information to third-party data brokers or advertisers.
- • Encrypted Checkout: Payments are processed via PCI-DSS Level 1 compliant gateways (Whop & Stripe). We never see or store full credit card numbers.
- • International Rights: We honor full GDPR (EU/UK), CCPA/CPRA (California), and global data subject rights, including access and deletion requests.
1. Identification of Data Controller
This Privacy Policy governs the collection, use, and disclosure of personal data by THE AISLE PLAN ("we", "us", or "our"), operating the website theaisleplan.com.
For questions, requests to exercise statutory privacy rights, or data protection inquiries, contact our Bridal Concierge Privacy Officer at: concierge@theaisleplan.com.
2. Information We Collect
We collect information you provide directly and technical telemetry generated automatically when visiting our website:
- Transactional & Account Information: When you purchase our digital wedding suite, you provide your name, email address, billing address, and country of residence.
- Payment Information: Financial transactions are handled securely by our Merchant of Record and payment gateway partners (Whop Inc. and Stripe, Inc.). We receive confirmation tokens, order IDs, and billing status; your sensitive payment card details are never stored on our local infrastructure.
- Communications Data: When you send inquiries to concierge@theaisleplan.com, we retain records of the correspondence to resolve your request.
- Device & Usage Telemetry: IP address, browser type, device identifiers, referring URL, pages viewed, time zone preference (used to auto-select localized currency displays), and session timestamps.
3. How We Use Your Information
We process your personal information under the following legal bases:
- Contract Fulfillment (GDPR Art. 6(1)(b)): To instantly deliver your Google Sheets copy link and Microsoft Excel spreadsheet files, generate your receipt, and provide customer support.
- Legitimate Business Interests (GDPR Art. 6(1)(f)): To detect and prevent fraudulent transactions, protect our intellectual property from unauthorized distribution, and optimize site speed and reliability.
- Legal Compliance (GDPR Art. 6(1)(c)): To comply with tax, accounting, and consumer protection regulations worldwide.
- Consent (GDPR Art. 6(1)(a)): For non-essential analytics or advertising measurement where required by applicable local law.
4. Third-Party Service Providers & Data Processors
We only share data with vetted service providers necessary to operate our digital storefront:
Whop Inc. (Merchant & Portal)
Facilitates encrypted checkout, license fulfillment, customer portal access, and payment collection under SOC 2 & PCI-DSS standards.
Vercel Inc. (Hosting & Edge CDN)
Provides globally distributed edge hosting, SSL encryption, and serverless compute infrastructure.
Stripe, Inc. & Digital Wallets
Processes debit/credit cards, Apple Pay, and Google Pay through bank-grade cryptographic vaults.
Pinterest Tag & Meta Pixel
Measures campaign performance and conversions for bridal inspiration traffic, subject to cookie consent settings.
5. Cookies and Tracking Technologies
Our website uses strictly necessary cookies and local storage tokens (e.g., preserving your chosen currency like USD, EUR, or GBP, and tracking dismissals of announcement ribbons). Non-essential analytics cookies are governed by our on-site cookie consent banner. You may disable cookies at any time via your browser settings.
6. International Data Subject Rights
Depending on your geographic location, you enjoy statutory rights regarding your personal data:
European Union & United Kingdom (GDPR / UK GDPR)
You have the right to access your personal data, rectify inaccuracies, request erasure ("right to be forgotten"), restrict processing, receive data portability, and lodge a complaint with your local supervisory authority (e.g., the ICO in the UK or CNIL in France).
California Residents (CCPA / CPRA)
California consumers have the right to know what personal categories are collected, request deletion, and not receive discriminatory treatment. We do not sell personal data, nor do we share personal data for cross-context behavioral advertising without affirmative consent.
To exercise any of these rights, email concierge@theaisleplan.com with the subject "Privacy Rights Request". We respond to all verified requests within 30 days.
7. Data Retention & Security Safeguards
We retain purchase records for the duration required by applicable financial, accounting, and tax regulations (typically up to 7 years). We enforce industry-standard security measures, including HTTPS TLS 1.3 encryption in transit and restricted administrative access, to safeguard your information against unauthorized disclosure.
8. Changes to This Privacy Policy
We may update this policy periodically to reflect operational, legal, or regulatory advancements. Updates will be posted on this page with an updated "Last Updated" timestamp. Continued use of our site signifies acceptance of any updated terms.