Privacy Policy

Effective date: 6/20/2026

Welcome to Zorava. This Privacy Policy explains how we collect, use, share and protect personal data when you use our wedding and event photo sharing platform. We use clear, plain English in this document. If you have questions, contact us at hello@zorava.co.uk.

1. Who we are

Zorava is an online wedding and event photo sharing platform that enables event hosts and their guests to upload, share and view photos and videos from events. For UK GDPR purposes, Zorava acts as the data controller for personal data processed through the platform. You can contact us at hello@zorava.co.uk.

Information Commissioner's Office (ICO)
Zorava is registered with the UK Information Commissioner's Office (ICO) as a Data Controller.
ICO Registration Number: ZC178346

2. Personal data we collect

We collect personal data that is necessary to operate the service and provide a good user experience. This may include:

• Names
• Email addresses
• Event information (event name, date, location and settings)
• Uploaded photos and videos
• Comments, captions and other content you add
• Technical information such as IP address, browser type, device information and performance data
• Account and booking information (where applicable)

3. How we use personal data

We use personal data to operate and improve the platform and to provide the services you expect, including to:

• Operate the platform and provide your account and gallery features
• Process bookings, payments and related communication
• Provide and display event galleries to authorised users
• Detect and prevent fraud and abuse and ensure platform security
• Provide customer support and respond to enquiries
• Analyse and improve our services, features and performance

4. Lawful basis for processing

Under UK GDPR we rely on one or more lawful bases to process personal data, including:

• Contract — where processing is necessary to fulfil a contract you have with us (for example, to provide gallery access or to process a booking or payment).
• Legitimate interests — where we have a genuine and proportionate reason to process data to operate, secure and improve the service (for example, to prevent fraud or maintain platform reliability). We balance these interests against individual rights.
• Legal obligations — where processing is required to comply with the law (for example, for tax, accounting or anti-fraud requirements).

5. Event galleries and user content

Event galleries are private by default but accessible to anyone with the gallery link or event code. Content uploaded to galleries (photos, videos, comments, captions) is user-generated content. Event hosts are responsible for how gallery links are shared. We may remove content that breaches our terms or the law, and we will respond to valid requests to remove personal data where required by law.

6. Data sharing and third-party providers

We do not sell your personal data. We may share personal data with trusted third-party data processors who help us deliver the Zorava service. These providers are contractually required to process data securely and only for the purposes we specify. Examples include:

• Supabase — secure database, authentication and storage
• Vercel — website hosting and deployment
• Resend — transactional email delivery
• Stripe — secure payment processing
• Google Analytics — anonymous website analytics

Personal data is only shared where necessary to provide our services or where required by law.

7. International transfers

Some of our service providers and their infrastructure may be located outside the UK or the European Economic Area (EEA). Where we transfer personal data internationally we will ensure appropriate safeguards are in place, such as standard contractual clauses, or rely on providers that have adequate protections. If you would like details of the safeguards we use, please contact us at hello@zorava.co.uk.

8. Data security

We take the security of your personal information seriously. Zorava uses secure cloud hosting, encrypted connections (HTTPS), authentication controls and industry-standard security practices to help protect your personal data from unauthorised access, disclosure, alteration or destruction. We regularly review our systems and security procedures to help protect customer information. Access to personal data is restricted to authorised personnel and trusted service providers where required. Although we work hard to protect your information, no online service can guarantee absolute security. If you believe your information has been compromised, please contact us immediately at hello@zorava.co.uk.

9. Data retention

We only retain personal data for as long as necessary to provide our services and meet our legal obligations. Event galleries remain available until the expiry period included with the purchased package has ended. Following expiry, galleries may remain available for a short grace period before permanent deletion. Certain information, including payment records and accounting information, may be retained where required by law.

10. Your rights under UK GDPR

You have rights in relation to your personal data. These include the right to:

• Access the personal data we hold about you
• Request correction of inaccurate or incomplete data
• Request erasure of your data (where we have no lawful reason to retain it)
• Object to or restrict our processing in certain circumstances
• Request portability of your data where applicable

To exercise any of these rights, contact us at hello@zorava.co.uk. We will respond in line with applicable law. You also have the right to lodge a complaint with the UK supervisory authority, the Information Commissioner’s Office (ICO) — https://ico.org.uk.

11. Children's data

Our services are not intended for children under 16. We do not knowingly collect personal data from children under 16. If we become aware that a child under 16 has provided us with personal data, we will take steps to delete it. If you believe we may have collected data from a child under 16, please contact us.

12. Cookies

We use cookies and similar technologies to provide essential website functionality, maintain secure user login sessions and improve the performance of our platform. We may also use analytics cookies, including Google Analytics, to understand how visitors use our website and to improve the services we provide. You can control or disable cookies through your browser settings, although some features of the website may not function correctly if essential cookies are disabled.

13. Complaints to the Information Commissioner's Office (ICO)

If you are unhappy with how we handle your personal data you can raise a complaint with us at hello@zorava.co.uk. If you remain dissatisfied, you can complain to the ICO: https://ico.org.uk/make-a-complaint/.

14. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes we will notify users where appropriate and update the effective date at the top of this page. Continued use of the service after changes indicates acceptance of the updated policy.

If you have any questions about this Privacy Policy or how we process your personal data, please contact us at hello@zorava.co.uk.

Version: 1.0
Last Updated: 3 July 2026

This Privacy Policy is governed by the laws of England and Wales.