Privacy Policy
Last updated: April 2026
1. Introduction
HeyJodi ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.
2. Information We Collect
We may collect the following types of information:
- Personal information (name, email address, phone number)
- Account credentials (username, password)
- Wedding planning preferences and vendor interactions
- Device and browser information
- Usage data and analytics
3. How We Use Your Information
We use your information to:
- Provide and maintain our services
- Connect you with wedding vendors
- Send you relevant communications and updates
- Improve our platform and user experience
- Comply with legal obligations
4. Data Sharing
We may share your information with vendors you choose to contact, service providers who assist our operations, and as required by law. We do not sell your personal information to third parties.
5. Data Security
We implement appropriate technical and organizational measures to protect your personal data against unauthorized access, alteration, disclosure, or destruction.
6. Your Rights
Under GDPR and UK data protection laws, you have the right to access, correct, delete, or transfer your personal data. You may also object to certain processing activities.
7. Analytics & Cookies
We use PostHog (PostHog, Inc.) for product analytics. PostHog is hosted on EU-region infrastructure and may process the following data when you use HeyJodi:
- Anonymous distinct ID and session ID
- Pages visited, features used, and interaction events
- Browser and device type
- Session recordings — all form inputs are masked before capture and never leave your browser in plain text
We also record pseudonymous vendor engagement events (page visits, phone reveals, enquiries sent) in our own database to provide vendors with usage statistics. This data uses a randomly generated visitor ID and contains no personal information.
Analytics data is only collected after you give explicit consent via our cookie banner. You may withdraw consent at any time from our Manage Preferences page — this immediately stops all data collection and clears locally stored analytics data. PostHog's privacy policy is available at posthog.com/privacy.
8. Third-Party Processors
The following third parties process data on our behalf:
- Supabase — our primary database and backend infrastructure. Stores vendor listings, enquiry records, and pseudonymous analytics events. supabase.com/privacy
- PostHog — product analytics and session recording (EU Cloud). posthog.com/privacy
- Mapbox — address and location search used in the vendor listing form and location search. Queries are sent server-side; your IP address is not exposed to Mapbox. mapbox.com/legal/privacy
9. Data Retention
- Vendor listings — retained while the listing is active. Deleted on written request to privacy@heyjodi.co.uk.
- Enquiry data — forwarded directly to the vendor by email. HeyJodi does not retain the message content after delivery.
- Vendor analytics events — retained for 90 days, then purged.
- PostHog analytics data— retained for 30 days per PostHog's project settings.
10. Contact Us
If you have questions about this Privacy Policy, please contact us at privacy@heyjodi.co.uk