One Fine Plan — Privacy Policy

Last updated: June 2026

1. Introduction

This Privacy Policy explains how One Fine Plan Pty Ltd (ABN 18 699 081 304) (One Fine Plan, we, us, or our) collects, holds, uses, and discloses personal information in connection with the One Fine Plan website at onefineplan.com and the One Fine Plan wedding planning application (together, the Platform).

We are committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By creating an account or using the Platform, you consent to the collection, storage, use, and disclosure of your personal information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Platform.

We may update this Privacy Policy from time to time by posting a revised version at onefineplan.com/privacypolicy. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy. We encourage you to review this page regularly.

This Privacy Policy should be read alongside our Website Terms and Conditions, Couple User Agreement, and Supplier User Agreement (as applicable), which govern your use of the Platform. Those documents do not restate the privacy obligations set out here; this Policy is the single source of truth for how we handle personal information.

2. Who This Policy Applies To

This Policy applies to all individuals whose personal information we collect or handle in connection with the Platform, including:

Couples who register for a couple account to plan their wedding (Couples);
Wedding industry businesses and sole traders who register for a supplier account to list their services (Suppliers);
Collaborators invited by a Couple to access their wedding planning account, including partners, family members, wedding party members, and any external wedding planner engaged by the Couple;
Guests whose personal information is uploaded to the Platform by a Couple, or who submit information directly through a public link (such as an RSVP portal or photo gallery link); and
Visitors to the public website at onefineplan.com who have not registered for an account.

Where this Policy refers to you, it applies to whichever of the above categories describes your relationship with the Platform.

3. Personal Information We Collect

3.1 Couples

When a Couple registers for and uses the Platform, we collect:

Full name and email address;
Password (stored in encrypted form);
Wedding date and location;
Payment information --- processed securely by Stripe via Stripe's hosted checkout; we do not store full card details;
Profile information provided through the Platform, including wedding website content auto-generated from your profile (names, wedding date, venue details);
Reviews and star ratings submitted for suppliers, including your first name and, if provided, the month and year of your wedding;
Planning data entered into Platform features, including budget, checklist, day-of timeline, and event details;
Device type, IP address, and approximate geolocation;
Browser type, operating system, and standard web log information; and
Usage data and interactions with the Platform, including features used and pages viewed.

3.2 Guest Information Uploaded by Couples

Couples may upload personal information about their guests as part of using the Platform's guest list, invitation, RSVP, and seating features. This information is provided to us by the Couple, not directly by guests, and may include:

Full name;
Email address and/or mobile number;
Postal or mailing address (where provided);
Dietary requirements or meal preferences;
Plus-one details, including the full name of any nominated plus-one;
RSVP status;
Digital invitation engagement data (including whether and when an invitation was opened);
Seating and table assignments; and
Floor plan placement data, where the floor plan designer is used.

Guest lists may include children under 18 years of age. Where a guest is a child, they are associated with an adult primary guest within a family group. Personal information for child guests is limited to what is necessary for wedding planning purposes and is provided by the Couple. Child guests are not sent any direct communications by us.

3.3 Key Contact Information Uploaded by Couples

Couples may upload personal information about other individuals involved in their wedding through the Key Contacts feature --- for example, suppliers, vendors, family members, bridal party members, and on-the-day co-ordinators. This may include name, role or relationship, company name and address, phone number, email address, and free-text notes. This information is provided by the Couple and is not collected directly from the individuals concerned.

3.4 Collaborators

Where a person is invited to collaborate on a Couple's wedding planning account --- whether as a partner, family member, wedding party member, or external wedding planner --- we collect personal information when they accept the invitation and create or log into a Platform account. This includes:

Full name and email address;
Password (stored in encrypted form);
Device type, IP address, and approximate geolocation;
Browser type, operating system, and standard web log information; and
Usage data and interactions with the Platform.

Collaborators access the Couple's planning data (including guest information) only to the extent of the permissions the Couple has configured. We handle Collaborator personal information in the same manner as Couple account holder information under this Policy.

3.5 Suppliers

When a Supplier registers for and uses the Platform, we collect:

Full name, business name, email address, and phone number;
Business address and service area;
Payment and billing information --- processed securely by Stripe via Stripe's hosted Checkout; we do not store full card details;
Business profile content published on the supplier listing, including description, portfolio images, operating days, pricing, and contact details;
Device type, IP address, and approximate geolocation;
Browser type, operating system, and standard web log information; and
Usage and analytics data relating to listing performance (such as profile views, saves, and enquiry rates).

3.6 Information Submitted by Guests via Public Links

Some Platform features allow guests to submit information directly through a unique public link, without creating an account. We collect that information directly from the guest at the point of submission:

RSVP portal: attendance status, dietary requirements or meal preferences, and the full name of any nominated plus-one. We also collect the time the link was opened, the guest's IP address, and device and browser information.
Guest photo upload: the name entered by the guest, a device identifier used to manage upload limits, and the photos or videos uploaded.
Gift registry reservation: the guest's name and email address, and any optional personal message.

Guests who use these links are not required to create an account. Their submissions are associated with the relevant Couple's wedding account and handled in accordance with this Policy. Guests with questions about how their information is used should contact the relevant Couple directly.

3.7 Photo and Media Content

Where Couples, Collaborators, or guests use the photo gallery, guest upload, or vision board features, we collect and store the photos, videos, and other media uploaded to the Platform. This media will often contain images of identifiable individuals and may constitute personal information under the Privacy Act 1988 (Cth). We handle all media content with the same care as other personal information under this Policy.

3.8 Website Visitors

When you visit the public website at onefineplan.com without registering for an account, we automatically collect standard technical information including your IP address, browser type, operating system, referring URL, and pages visited. This information is used to operate and improve the website and is handled in accordance with Section 3.9 below.

3.9 Cookies, Tracking Technologies, and Analytics

We collect information through cookies and similar tracking technologies when you access the Platform. We use these technologies to keep you logged in, remember your preferences, analyse how the Platform is used, and improve Platform performance.

We use the following analytics tools:

Umami Analytics (self-hosted): a privacy-focused analytics service we operate on our own infrastructure. Where you are logged in, Umami may associate usage data with your email address and account type to help us understand how different users interact with the Platform. Session replay functionality may be enabled with data masking applied.
Meta Pixel (operated by Meta Platforms, Inc., United States) and TikTok Pixel (operated by TikTok): advertising measurement technologies that tell us whether our advertising on Facebook, Instagram, and TikTok brings people to the Platform. They load only if you accept non-essential cookies. We do not send these platforms your email address, name, or phone number, in any form. What they receive is the cookie identifiers they set themselves, your IP address, your browser user agent, and, if you are signed in, a one-way hashed version of your internal account number, which is meaningless to them beyond recognising repeat visits from the same person. We do not send them your planning data, your guest list, or anything a guest has given you, and they are not loaded on guest-facing pages such as RSVP, gift registry, and photo upload, or on the wedding websites that Couples publish.

You can disable cookies through your browser settings, though some Platform features may not function correctly if you do so.

3.10 Push Notification Data

If you consent to receive browser push notifications, we collect and store a push subscription endpoint --- a technical identifier assigned by your browser --- solely to deliver those notifications. This endpoint is retained for as long as you remain subscribed and is deleted when you unsubscribe or revoke browser permission. You can withdraw consent at any time through your browser settings or within the Platform.

4. How We Use Personal Information

4.1 Couples and Collaborators

We use personal information collected from Couples and Collaborators to:

Create and manage accounts and provide access to the Platform;
Process one-off plan payments and provide access to paid plan features;
Operate, maintain, and improve the Platform and its features;
Deliver transactional communications including account confirmations, payment receipts, and security alerts;
Send service updates and feature announcements (you may opt out of non-essential communications at any time --- see Section 8);
Respond to enquiries and provide customer support;
Analyse aggregated and anonymised usage data to improve the Platform;
Analyse aggregated vision board usage to improve curation of the inspiration library; and
Detect, investigate, and prevent fraudulent or unauthorised activity, and comply with our legal obligations.

4.2 Guest Data

Personal information about guests, uploaded by Couples or submitted directly by guests, is used solely to provide the Platform's features to the relevant Couple. This includes delivering digital invitations and automated RSVP reminder emails (where configured by the Couple), managing and tracking RSVPs, managing the guest list and seating across events, and rendering guest names and seating assignments into floor plan images for download. We do not use guest data for our own marketing purposes and do not sell or share guest data with third parties except as necessary to operate the Platform (for example, via an email delivery service to send invitations, or via cloud infrastructure providers to store data).

4.3 Key Contact Data

Personal information uploaded through the Key Contacts feature is used solely to provide that feature to the relevant Couple --- for example, displaying contact details during wedding planning and coordination. We do not use key contact data for our own marketing purposes.

4.4 Sending Invitations and Automated RSVP Reminders

Where a Couple uses the Platform's invitation-sending or Automatic RSVP Reminder features, we use guest email addresses to send those messages on the Couple's behalf. The Couple is the sender of those messages. We process guest email addresses for this purpose only at the Couple's direction and do not use them for any purpose of our own.

4.5 Suppliers

We use personal information collected from Suppliers to:

Create and manage Supplier accounts and listings;
Process recurring subscription payments via Stripe and issue tax invoices;
Display listings and portfolio content in the supplier directory;
Provide supplier platform tools including messaging, listing analytics, and reviews;
Send transactional communications including billing notices, subscription renewal confirmations, and platform updates; and
Comply with our legal obligations and enforce our Supplier User Agreement.

4.6 Supplier Listing Analytics

We provide Suppliers with aggregated analytics data about their listing performance, including profile view counts, save counts, and enquiry rates. This data is derived from Couple usage of the Platform and is provided in aggregated form only. We do not provide Suppliers with personally identifying information about individual Couples who view or save their listing, unless that Couple has initiated direct contact.

5. Disclosure of Personal Information

We may disclose personal information to the following categories of third parties where necessary to operate the Platform or comply with our legal obligations:

Stripe: to process one-off couple plan payments and recurring supplier subscription payments, and to transmit payment lifecycle events to the Platform via secure webhooks. Stripe operates servers outside Australia; we take reasonable steps to ensure Stripe handles your information consistently with the Australian Privacy Principles.
Email and communication service providers: to deliver transactional emails, invitation emails, RSVP notifications, automated reminder emails, and Platform communications. Our email delivery provider operates servers outside Australia; we take reasonable steps to ensure it handles personal information consistently with the Australian Privacy Principles.
Cloud hosting and infrastructure providers: to store and process data in connection with the Platform.
Analytics: we run our own analytics on our own infrastructure, so usage data is not shared with an external analytics provider. See Section 3.9.
Domain registrars and DNS providers: where relevant to Platinum plan custom domain features for Couples.
Social media platforms: limited personal information --- including names, wedding date, and hero photograph --- may be transmitted to social media platforms via Open Graph preview protocols when a wedding website URL is shared. This occurs regardless of the wedding website's visibility setting. We do not control how these platforms use or retain that information.
Suppliers listed in the supplier directory: when a Couple initiates an enquiry or sends a message to a Supplier, the Supplier will receive the Couple's display name, nominated wedding date (if set), and the content of their messages and any file attachments. Where a Couple submits a review of a Supplier, the Couple's first name and review content will be publicly displayed on the Supplier's profile page.
Collaborators invited to a Couple's account: a Couple may invite up to 10 Collaborators (on the Platinum plan) who will have access to the Couple's planning data --- including guest information --- to the extent of the permissions the Couple has configured. The Couple is responsible for determining who is granted access and what permissions they receive.
Our employees, contractors, and professional advisers: where necessary to operate, maintain, and improve the Platform.
Advertising platforms (Meta Platforms, Inc. and TikTok): where you have accepted non-essential cookies, so that we can measure whether our own advertising is working and reach people who have already visited the Platform. Section 3.9 sets out exactly what is shared. These platforms may combine it with information they already hold about you, governed by their own privacy policies rather than this one.
Law enforcement, regulators, or courts: where required or permitted by law.

We may disclose personal information to cloud providers, contractors, and other third parties located inside or outside Australia. Where we do so, we take reasonable steps to ensure that any overseas recipient handles your personal information in a manner consistent with the Australian Privacy Principles.

We do not sell personal information to third parties.

6. Data Storage and Retention

Your personal information is stored on secure cloud servers. We retain your data for as long as your account is active and as necessary to provide you with the Platform, subject to the following:

6.1 Couple Accounts

Where a Couple has a nominated wedding date, all planning data (other than photos and media) will be automatically scheduled for deletion six months following that date. Photo and media content will be retained for three months following the wedding date, after which it may be permanently deleted. We will endeavour to send a notification before deletion occurs.

Where a Couple closes their account, personal information will be soft-deleted immediately and permanently purged from our systems within 7 days of account closure, except where we are required to retain it by law. Guest information, key contact information, and gift registry claim records will be deleted on the same timeline.

6.2 Supplier Accounts

Where a Supplier account is terminated or cancelled, the Supplier's public listing will be removed. Data associated with the Supplier account --- including messaging history and couple contact records --- will be retained for 60 days to enable export, after which it will be deleted or de-identified. We recommend Suppliers export all business data before closing their account.

6.3 Collaborators

Where a Collaborator's access to a wedding planning account is revoked, their access is immediately deactivated. Records of the collaboration may be retained for a reasonable period for security and dispute resolution purposes. Former Collaborators may contact us at [email protected] to request deletion of their personal information, subject to any applicable retention obligations.

6.4 General

We encourage all users to download and back up their data before closing their account or before any applicable retention period expires. We are not liable for data loss resulting from account closure or the expiry of a retention period.

7. Wedding Website and Public Visibility

A Couple's wedding website can be set to draft, password-protected, or public visibility. If set to public, personal information published on the website --- including names, wedding date, and venue details --- will be accessible to any internet user.

When a wedding website is first created, the Platform automatically pre-populates certain sections with information from the Couple's planning profile. Couples should review all pre-populated content before publishing.

Wedding websites automatically generate Open Graph and social media preview data --- including names, wedding date, and hero photograph --- which is transmitted to third-party social media platforms when the website URL is shared. This occurs regardless of the visibility setting chosen.

Although we apply a "noindex" directive to wedding websites to discourage search engine indexation, this is advisory only and we cannot guarantee that a public website will not be indexed by search engines or archived by third parties. Couples should not publish any information they are not comfortable making publicly available.

8. Marketing Communications

With your consent, we may send you marketing and promotional communications about the Platform, new features, and other matters we think may be of interest to you. We will only send marketing communications in accordance with the Spam Act 2003 (Cth) and will always include a clear option to unsubscribe.

You can opt out of marketing communications at any time by using the unsubscribe link in any marketing email, or by contacting us at [email protected]. Opting out will not affect transactional or service-related communications such as account confirmations, payment receipts, or security notices.

This section applies to One Fine Plan's own marketing communications to account holders. It does not apply to invitation emails or RSVP reminder messages sent by Couples to their guests through the Platform; those messages are sent by the Couple, not by us, and any guest with questions about receiving them should contact the relevant Couple directly.

9. Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include password protection and encryption of account credentials, HTTPS connections, access controls limiting who within our organisation can access personal information, and use of reputable third-party cloud infrastructure with their own security controls.

No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of personal information. You are responsible for keeping your account credentials confidential and should notify us immediately at [email protected] if you suspect any unauthorised access to your account.

10. Third-Party Links and Services

The Platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third party before providing them with your personal information.

11. Couple Responsibilities for Guest and Key Contact Data

When a Couple uploads personal information about guests or other individuals through the Platform, the Couple is acting as the person responsible for that data. By uploading such information, the Couple represents and warrants that:

They have obtained any necessary consent from the individuals concerned to collect and share their personal information with One Fine Plan for wedding planning purposes;
Where a guest is a child under 18, they are the child's parent or guardian, or have obtained appropriate parental consent to include the child's information;
Their collection and use of the personal information complies with the Privacy Act 1988 (Cth) and any other applicable privacy laws; and
The personal information uploaded is accurate, current, and relevant to the purposes for which it is provided.

Couples are also responsible for ensuring that any access they grant to Collaborators is appropriate and that they are entitled to share guest information with those individuals for wedding planning purposes.

Individuals (including suppliers, key contacts, and guests) who have questions about how their personal information is used in connection with a specific wedding should contact the relevant Couple directly.

12. Supplier Responsibilities for Couple Data

Through the Platform's messaging features, Suppliers may receive personal information about Couples, including names, contact details, and wedding dates. Where a Supplier receives couple personal information through the Platform:

The Supplier is an independent data controller in relation to that personal information and is responsible for handling it in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles in their own right;
The Supplier must use couple personal information only for the purpose of responding to the Couple's enquiry or providing services to that Couple; and
Upon termination of a Supplier account, couple contact data stored on the Platform will be retained for 60 days to enable export, after which it will be deleted or de-identified.

13. Accessing and Correcting Your Personal Information

You have the right to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, out of date, incomplete, or misleading.

Much of your account data --- including your guest list, budget, planning notes, and media --- is accessible and editable directly within the Platform. Self-service data export is available to Premium and Platinum couple plan users via the Platform settings.

To make an access or correction request, or if you are a Free plan user seeking a structured export of your personal information, please contact us at [email protected] with your name and contact details. We may need to verify your identity before providing access. We will respond within a reasonable timeframe.

In some cases we may be unable to provide access to all personal information we hold --- for example, where doing so would reveal information about another person, or where an exemption under the Privacy Act 1988 (Cth) applies. We will explain why if this is the case.

14. European Union and United Kingdom Users

This section applies in addition to the rest of this Privacy Policy if you are located in the European Economic Area (EEA), Switzerland, or the United Kingdom. Where it conflicts with anything above, this section prevails for those users.

14.1 Who is responsible for your data

One Fine Plan Pty Ltd (ABN 18 699 081 304), Victoria, Australia, is the controller of the personal data described in this policy. You can reach us at [email protected].

Where a Couple uploads information about their guests, the Couple decides what is collected and who may see it. For that guest data the Couple is the controller and we act as a processor on their instructions. Section 11 sets out the Couple's responsibilities.

14.2 Our legal bases for using your data

We only use your personal data where the law gives us a basis to do so:

Performance of a contract. Creating and running your account, providing the planning tools, taking payment for a plan, sending transactional email such as receipts, invitations, and RSVP notifications, and providing support.
Legitimate interests. Keeping the Platform secure and preventing abuse, fixing faults, understanding in aggregate how the Platform is used so we can improve it, and defending legal claims. We balance these against your interests and use the least intrusive option available.
Consent. Non-essential cookies and similar technologies, including third-party analytics and advertising measurement, as described in our Cookies Policy. You can withdraw consent at any time using the Cookie preferences link in the website footer, and withdrawing it does not affect anything done beforehand.
Legal obligation. Keeping financial and tax records, and responding to lawful requests.

14.3 Your rights

You have the right to:

Access a copy of the personal data we hold about you.
Rectification of data that is inaccurate or incomplete.
Erasure of your data where there is no overriding reason for us to keep it. Some records, such as payment and tax records, must be retained for a period set by law.
Restriction of how we use your data while a concern is being resolved.
Portability of data you gave us, in a structured, commonly used, machine-readable format.
Object to processing we carry out on the basis of legitimate interests, and to object at any time to direct marketing.
Withdraw consent where consent is the basis we rely on.

We do not make decisions about you by automated means that have a legal or similarly significant effect, and we do not carry out profiling of that kind.

14.4 How to exercise your rights

Email [email protected] and tell us what you would like us to do. We may need to verify your identity first, so that we do not disclose someone else's data to the wrong person.

We will respond within one month. If your request is complex we may extend that by a further two months, and we will tell you within the first month if we need to.

Exercising these rights is free. We will only charge a fee, or refuse a request, where it is manifestly unfounded or excessive, and we will explain our reasons if that happens.

If your request concerns guest information that a Couple entered about you, we will normally direct you to that Couple, or pass your request on to them, because they decide how that information is used.

14.5 Sending data outside the EEA and the UK

We are based in Australia and the Platform is operated from there, so using it involves transferring your personal data outside the EEA and the UK. Some of the providers listed in Section 5 are located in the United States.

Australia is not covered by a UK or European Commission adequacy decision. Where we transfer personal data out of the EEA or the UK we rely on appropriate safeguards, including the European Commission's Standard Contractual Clauses and the UK International Data Transfer Addendum in our agreements with providers, together with the technical and organisational measures described in Section 9. You can ask us for more detail about the safeguards that apply to a particular transfer.

14.6 How long we keep your data

Section 6 explains our retention periods. In short, we keep your data for as long as you have an account with us and for a limited period afterwards, then delete or anonymise it, except where we are required to keep records for longer.

14.7 Complaints to a regulator

If you are unhappy with how we have handled your personal data, please contact us first so we can try to put it right.

You also have the right to complain to a supervisory authority. In the United Kingdom that is the Information Commissioner's Office (ico.org.uk). In the EEA it is the supervisory authority in the country where you live or work. This is in addition to the Australian complaints route in Section 15.

15. Children's Privacy

15.1 Account Holders

The Platform is intended for use by individuals aged 18 and over. We do not knowingly collect personal information directly from anyone under 18 for the purpose of creating or operating an account. If you believe we have inadvertently collected account information from a minor, please contact us at [email protected] and we will address it promptly.

15.2 Child Guests

Wedding guest lists commonly include children. Children may appear as guests on the Platform where they are associated with an adult primary guest within a family group. Personal information collected for child guests is limited to what is necessary for wedding planning purposes (such as name, meal preference, and seating assignment), is entered by the account holder, and is handled with the same care as all other personal information on the Platform. Child guests are not sent any direct communications by us.

16. Complaints

If you believe we have handled your personal information in a way that does not comply with this Privacy Policy or the Australian Privacy Principles, you may make a complaint by contacting us at [email protected]. Please include your name, contact details, and a description of your concern.

We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

17. Contact Us

For any questions about this Privacy Policy, to access or correct your personal information, or to make a complaint, please contact us at:

One Fine Plan Pty Ltd

Email: [email protected]

Website: onefineplan.com

Questions about this document?

One Fine Plan Pty Ltd | ABN 18 699 081 304 | Victoria, Australia