Your photos, and what we do with them.
The short version: photos belong to the people in them and to the host who collected them. We store them so the event can share them, we delete them when the gallery closes, and we never sell or advertise against them.
Last updated 23 September 2026. Snap Our Day is a service of JCWDev, the trading name of Jordan Whitbread, in the United Kingdom. Questions about the service: [email protected]. Anything legal, including our postal address: [email protected].
Who is responsible
Jordan Whitbread, trading as JCWDev, decides how the service works and is the data controller for the information described here, registered with the Information Commissioner's Office under [ICO REGISTRATION]. The host who creates an event decides who is invited and what appears on their site; for their own guest list they act as a controller too, and we act for them.
What we hold and for how long
| What | Why we may | How long |
|---|---|---|
| Host account Email address, password hash, the events you create. | Performing our contract with you. | Until you close the account, then deleted within 30 days. |
| Payments Amount, plan, date and the processor's reference. No card details. | Contract, and our legal duty to keep financial records. | Six years, as HMRC requires. |
| Guest uploads The photo, video or voice note, and the name a guest chooses to type. | Legitimate interests: the guest uploads in order to share with the host, and can decline by not uploading. | Deleted with the gallery: 30 days, 6 months or 12 months after the event depending on the plan. |
| RSVP replies Names, party size, an optional email address and any note. | Legitimate interests of the host in planning their event. | Deleted with the event. |
| Guest book The name and message a guest leaves. | Legitimate interests: the guest writes it to be read. | Deleted with the event. |
| Gallery reminders An email address a guest gives to be told when the gallery opens. | Consent, given by typing it in. | Deleted the moment that one email is sent. |
| Server logs IP address, page and time, kept to stop abuse and find faults. | Legitimate interests in keeping the service up and secure. | Rotated within 30 days. |
| Backups An encrypted nightly copy of the database. | Legitimate interests in being able to recover from failure. | 30 days, then destroyed. |
Where the files live
Photos, video and voice notes sit in object storage in the United Kingdom and the EU. They are never public: the site hands out links that are signed and expire within the hour, and the storage refuses anything else. The site itself runs on our own hardware in the United Kingdom, and its fonts and scripts are served from there too, so reading a page sends nothing to a third party.
Who else is involved
| Who | What for | Where |
|---|---|---|
| Cloud storage | Holds the photos, video and voice notes. Files are encrypted in transit and reachable only through links we sign, which expire. | United Kingdom and EU |
| Payment processing | Takes the payment and issues your receipt. Card details go straight to them and never reach our servers. | EU, with UK transfers under their own safeguards |
| Email delivery | Sends verification, digest and gallery emails on our behalf. | United Kingdom |
| Sign-in with Google | Only where a host chooses that button. Everything else on the site is served from our own servers. | EU |
Nobody else. We do not sell personal data, we do not use it to train anything, and there is no advertising on the service. Ask at [email protected] and we will tell you exactly who each of these is.
Children
Children appear in event photos, and that is expected at a wedding or a christening. We have no way to identify them and we do not try to. A host must be 18 or over to create an event, and a parent or guardian can ask us to remove a photo of their child at any time using the details above.
Your rights
You can ask us for a copy of what we hold about you, to correct it, to delete it, to restrict what we do with it, or to object to it. Where we rely on legitimate interests you can object and we will stop unless we have a compelling reason not to, which for a photo of you at somebody else's wedding we generally will not.
To get a photo removed, the quickest route is to ask the host, who can delete it from their own moderation queue in seconds. If you would rather not, or the host will not, write to [email protected] with the event link and what to look for, and we will remove it within five working days.
If we get it wrong you can complain to the Information Commissioner's Office at ico.org.uk, though we would rather you told us first.
Security
Passwords are hashed, files are scanned for malware before they appear, transfers are encrypted, backups are encrypted with a key held away from the server, and the admin interface is not reachable from the internet. No system is perfect: if a breach ever puts you at risk we will tell the ICO within 72 hours and tell you without undue delay.
Changes
If this notice changes in a way that matters we will email hosts with live events. The date at the top always reflects the current version.