One Fine Plan — Privacy Policy

Last updated: June 2026

1. Introduction

This Privacy Policy explains how One Fine Plan Pty Ltd (ABN to be confirmed) (One Fine Plan, we, us, or our) collects, holds, uses, and discloses personal information in connection with the One Fine Plan website at onefineplan.com and the One Fine Plan wedding planning application (together, the Platform).

We are committed to handling personal information responsibly and in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By creating an account or using the Platform, you consent to the collection, storage, use, and disclosure of your personal information in accordance with this Privacy Policy. If you do not agree with this Privacy Policy, you should not use the Platform.

We may update this Privacy Policy from time to time by posting a revised version at onefineplan.com/privacypolicy. Your continued use of the Platform following any update constitutes your acceptance of the revised Policy. We encourage you to review this page regularly.

This Privacy Policy should be read alongside our Website Terms and Conditions, Couple User Agreement, and Supplier User Agreement (as applicable), which govern your use of the Platform. Those documents do not restate the privacy obligations set out here; this Policy is the single source of truth for how we handle personal information.

2. Who This Policy Applies To

This Policy applies to all individuals whose personal information we collect or handle in connection with the Platform, including:

Couples who register for a couple account to plan their wedding (Couples);
Wedding industry businesses and sole traders who register for a supplier account to list their services (Suppliers);
Collaborators invited by a Couple to access their wedding planning account, including partners, family members, wedding party members, and any external wedding planner engaged by the Couple;
Guests whose personal information is uploaded to the Platform by a Couple, or who submit information directly through a public link (such as an RSVP portal or photo gallery link); and
Visitors to the public website at onefineplan.com who have not registered for an account.

Where this Policy refers to you, it applies to whichever of the above categories describes your relationship with the Platform.

3. Personal Information We Collect

3.1 Couples

When a Couple registers for and uses the Platform, we collect:

Full name and email address;
Password (stored in encrypted form);
Wedding date and location;
Payment information --- processed securely by Stripe via Stripe's hosted checkout; we do not store full card details;
Profile information provided through the Platform, including wedding website content auto-generated from your profile (names, wedding date, venue details);
Reviews and star ratings submitted for suppliers, including your first name and, if provided, the month and year of your wedding;
Planning data entered into Platform features, including budget, checklist, day-of timeline, and event details;
Device type, IP address, and approximate geolocation;
Browser type, operating system, and standard web log information; and
Usage data and interactions with the Platform, including features used and pages viewed.

3.2 Guest Information Uploaded by Couples

Couples may upload personal information about their guests as part of using the Platform's guest list, invitation, RSVP, and seating features. This information is provided to us by the Couple, not directly by guests, and may include:

Full name;
Email address and/or mobile number;
Postal or mailing address (where provided);
Dietary requirements or meal preferences;
Plus-one details, including the full name of any nominated plus-one;
RSVP status;
Digital invitation engagement data (including whether and when an invitation was opened);
Seating and table assignments; and
Floor plan placement data, where the floor plan designer is used.

Guest lists may include children under 18 years of age. Where a guest is a child, they are associated with an adult primary guest within a family group. Personal information for child guests is limited to what is necessary for wedding planning purposes and is provided by the Couple. Child guests are not sent any direct communications by us.

3.3 Key Contact Information Uploaded by Couples

Couples may upload personal information about other individuals involved in their wedding through the Key Contacts feature --- for example, suppliers, vendors, family members, bridal party members, and on-the-day co-ordinators. This may include name, role or relationship, company name and address, phone number, email address, and free-text notes. This information is provided by the Couple and is not collected directly from the individuals concerned.

3.4 Collaborators

Where a person is invited to collaborate on a Couple's wedding planning account --- whether as a partner, family member, wedding party member, or external wedding planner --- we collect personal information when they accept the invitation and create or log into a Platform account. This includes:

Full name and email address;
Password (stored in encrypted form);
Device type, IP address, and approximate geolocation;
Browser type, operating system, and standard web log information; and
Usage data and interactions with the Platform.

Collaborators access the Couple's planning data (including guest information) only to the extent of the permissions the Couple has configured. We handle Collaborator personal information in the same manner as Couple account holder information under this Policy.

3.5 Suppliers

When a Supplier registers for and uses the Platform, we collect:

Full name, business name, email address, and phone number;
Business address and service area;
Payment and billing information --- processed securely by Stripe via Stripe's hosted Checkout; we do not store full card details;
Business profile content published on the supplier listing, including description, portfolio images, operating days, pricing, and contact details;
Device type, IP address, and approximate geolocation;
Browser type, operating system, and standard web log information; and
Usage and analytics data relating to listing performance (such as profile views, saves, and enquiry rates).

3.6 Information Submitted by Guests via Public Links

Some Platform features allow guests to submit information directly through a unique public link, without creating an account. We collect that information directly from the guest at the point of submission:

RSVP portal: attendance status, dietary requirements or meal preferences, and the full name of any nominated plus-one. We also collect the time the link was opened, the guest's IP address, and device and browser information.
Guest photo upload: the name entered by the guest, a device identifier used to manage upload limits, and the photos or videos uploaded.
Gift registry reservation: the guest's name and email address, and any optional personal message.

Guests who use these links are not required to create an account. Their submissions are associated with the relevant Couple's wedding account and handled in accordance with this Policy. Guests with questions about how their information is used should contact the relevant Couple directly.

3.7 Photo and Media Content

Where Couples, Collaborators, or guests use the photo gallery, guest upload, or vision board features, we collect and store the photos, videos, and other media uploaded to the Platform. This media will often contain images of identifiable individuals and may constitute personal information under the Privacy Act 1988 (Cth). We handle all media content with the same care as other personal information under this Policy.

3.8 Website Visitors

When you visit the public website at onefineplan.com without registering for an account, we automatically collect standard technical information including your IP address, browser type, operating system, referring URL, and pages visited. This information is used to operate and improve the website and is handled in accordance with Section 3.9 below.

3.9 Cookies, Tracking Technologies, and Analytics

We collect information through cookies and similar tracking technologies when you access the Platform. We use these technologies to keep you logged in, remember your preferences, analyse how the Platform is used, and improve Platform performance.

We use the following analytics tools:

Umami Analytics (self-hosted): a privacy-focused analytics service we operate on our own infrastructure. Where you are logged in, Umami may associate usage data with your email address and account type to help us understand how different users interact with the Platform. Session replay functionality may be enabled with data masking applied.
Microsoft Clarity (operated by Microsoft Corporation, United States): a behavioural analytics tool that records aggregated click, scroll, and session interactions. Data is transmitted to and stored on Microsoft's servers in the United States. We take reasonable steps to ensure Microsoft handles this information consistently with the Australian Privacy Principles.

You can disable cookies through your browser settings, though some Platform features may not function correctly if you do so.

3.10 Push Notification Data

If you consent to receive browser push notifications, we collect and store a push subscription endpoint --- a technical identifier assigned by your browser --- solely to deliver those notifications. This endpoint is retained for as long as you remain subscribed and is deleted when you unsubscribe or revoke browser permission. You can withdraw consent at any time through your browser settings or within the Platform.

4. How We Use Personal Information

4.1 Couples and Collaborators

We use personal information collected from Couples and Collaborators to:

Create and manage accounts and provide access to the Platform;
Process one-off plan payments and provide access to paid plan features;
Operate, maintain, and improve the Platform and its features;
Deliver transactional communications including account confirmations, payment receipts, and security alerts;
Send service updates and feature announcements (you may opt out of non-essential communications at any time --- see Section 8);
Respond to enquiries and provide customer support;
Analyse aggregated and anonymised usage data to improve the Platform;
Analyse aggregated vision board usage to improve curation of the inspiration library; and
Detect, investigate, and prevent fraudulent or unauthorised activity, and comply with our legal obligations.

4.2 Guest Data

Personal information about guests, uploaded by Couples or submitted directly by guests, is used solely to provide the Platform's features to the relevant Couple. This includes delivering digital invitations and automated RSVP reminder emails (where configured by the Couple), managing and tracking RSVPs, managing the guest list and seating across events, and rendering guest names and seating assignments into floor plan images for download. We do not use guest data for our own marketing purposes and do not sell or share guest data with third parties except as necessary to operate the Platform (for example, via an email delivery service to send invitations, or via cloud infrastructure providers to store data).

4.3 Key Contact Data

Personal information uploaded through the Key Contacts feature is used solely to provide that feature to the relevant Couple --- for example, displaying contact details during wedding planning and coordination. We do not use key contact data for our own marketing purposes.

4.4 Sending Invitations and Automated RSVP Reminders

Where a Couple uses the Platform's invitation-sending or Automatic RSVP Reminder features, we use guest email addresses to send those messages on the Couple's behalf. The Couple is the sender of those messages. We process guest email addresses for this purpose only at the Couple's direction and do not use them for any purpose of our own.

4.5 Suppliers

We use personal information collected from Suppliers to:

Create and manage Supplier accounts and listings;
Process recurring subscription payments via Stripe and issue tax invoices;
Display listings and portfolio content in the supplier directory;
Provide supplier platform tools including messaging, listing analytics, and reviews;
Send transactional communications including billing notices, subscription renewal confirmations, and platform updates; and
Comply with our legal obligations and enforce our Supplier User Agreement.

4.6 Supplier Listing Analytics

We provide Suppliers with aggregated analytics data about their listing performance, including profile view counts, save counts, and enquiry rates. This data is derived from Couple usage of the Platform and is provided in aggregated form only. We do not provide Suppliers with personally identifying information about individual Couples who view or save their listing, unless that Couple has initiated direct contact.

5. Disclosure of Personal Information

We may disclose personal information to the following categories of third parties where necessary to operate the Platform or comply with our legal obligations:

Stripe: to process one-off couple plan payments and recurring supplier subscription payments, and to transmit payment lifecycle events to the Platform via secure webhooks. Stripe operates servers outside Australia; we take reasonable steps to ensure Stripe handles your information consistently with the Australian Privacy Principles.
Email and communication service providers: to deliver transactional emails, invitation emails, RSVP notifications, automated reminder emails, and Platform communications. Our email delivery provider operates servers outside Australia; we take reasonable steps to ensure it handles personal information consistently with the Australian Privacy Principles.
Cloud hosting and infrastructure providers: to store and process data in connection with the Platform.
Analytics providers (Umami Analytics on our own infrastructure; Microsoft Clarity operated by Microsoft Corporation in the United States): to help us understand how the Platform is used. See Section 3.9.
Domain registrars and DNS providers: where relevant to Platinum plan custom domain features for Couples.
Social media platforms: limited personal information --- including names, wedding date, and hero photograph --- may be transmitted to social media platforms via Open Graph preview protocols when a wedding website URL is shared. This occurs regardless of the wedding website's visibility setting. We do not control how these platforms use or retain that information.
Suppliers listed in the supplier directory: when a Couple initiates an enquiry or sends a message to a Supplier, the Supplier will receive the Couple's display name, nominated wedding date (if set), and the content of their messages and any file attachments. Where a Couple submits a review of a Supplier, the Couple's first name and review content will be publicly displayed on the Supplier's profile page.
Collaborators invited to a Couple's account: a Couple may invite up to 10 Collaborators (on the Platinum plan) who will have access to the Couple's planning data --- including guest information --- to the extent of the permissions the Couple has configured. The Couple is responsible for determining who is granted access and what permissions they receive.
Our employees, contractors, and professional advisers: where necessary to operate, maintain, and improve the Platform.
Law enforcement, regulators, or courts: where required or permitted by law.

We may disclose personal information to cloud providers, contractors, and other third parties located inside or outside Australia. Where we do so, we take reasonable steps to ensure that any overseas recipient handles your personal information in a manner consistent with the Australian Privacy Principles.

We do not sell personal information to third parties and do not use personal information for targeted advertising.

6. Data Storage and Retention

Your personal information is stored on secure cloud servers. We retain your data for as long as your account is active and as necessary to provide you with the Platform, subject to the following:

6.1 Couple Accounts

Where a Couple has a nominated wedding date, all planning data (other than photos and media) will be automatically scheduled for deletion six months following that date. Photo and media content will be retained for three months following the wedding date, after which it may be permanently deleted. We will endeavour to send a notification before deletion occurs.

Where a Couple closes their account, personal information will be soft-deleted immediately and permanently purged from our systems within 7 days of account closure, except where we are required to retain it by law. Guest information, key contact information, and gift registry claim records will be deleted on the same timeline.

6.2 Supplier Accounts

Where a Supplier account is terminated or cancelled, the Supplier's public listing will be removed. Data associated with the Supplier account --- including messaging history and couple contact records --- will be retained for 60 days to enable export, after which it will be deleted or de-identified. We recommend Suppliers export all business data before closing their account.

6.3 Collaborators

Where a Collaborator's access to a wedding planning account is revoked, their access is immediately deactivated. Records of the collaboration may be retained for a reasonable period for security and dispute resolution purposes. Former Collaborators may contact us at [email protected] to request deletion of their personal information, subject to any applicable retention obligations.

6.4 General

We encourage all users to download and back up their data before closing their account or before any applicable retention period expires. We are not liable for data loss resulting from account closure or the expiry of a retention period.

7. Wedding Website and Public Visibility

A Couple's wedding website can be set to draft, password-protected, or public visibility. If set to public, personal information published on the website --- including names, wedding date, and venue details --- will be accessible to any internet user.

When a wedding website is first created, the Platform automatically pre-populates certain sections with information from the Couple's planning profile. Couples should review all pre-populated content before publishing.

Wedding websites automatically generate Open Graph and social media preview data --- including names, wedding date, and hero photograph --- which is transmitted to third-party social media platforms when the website URL is shared. This occurs regardless of the visibility setting chosen.

Although we apply a "noindex" directive to wedding websites to discourage search engine indexation, this is advisory only and we cannot guarantee that a public website will not be indexed by search engines or archived by third parties. Couples should not publish any information they are not comfortable making publicly available.

8. Marketing Communications

With your consent, we may send you marketing and promotional communications about the Platform, new features, and other matters we think may be of interest to you. We will only send marketing communications in accordance with the Spam Act 2003 (Cth) and will always include a clear option to unsubscribe.

You can opt out of marketing communications at any time by using the unsubscribe link in any marketing email, or by contacting us at [email protected]. Opting out will not affect transactional or service-related communications such as account confirmations, payment receipts, or security notices.

This section applies to One Fine Plan's own marketing communications to account holders. It does not apply to invitation emails or RSVP reminder messages sent by Couples to their guests through the Platform; those messages are sent by the Couple, not by us, and any guest with questions about receiving them should contact the relevant Couple directly.

9. Security

We take reasonable steps to protect the personal information we hold from misuse, interference, loss, and unauthorised access, modification, or disclosure. Our security measures include password protection and encryption of account credentials, HTTPS connections, access controls limiting who within our organisation can access personal information, and use of reputable third-party cloud infrastructure with their own security controls.

No method of transmission or storage is completely secure, and we cannot guarantee the absolute security of personal information. You are responsible for keeping your account credentials confidential and should notify us immediately at [email protected] if you suspect any unauthorised access to your account.

10. Third-Party Links and Services

The Platform may contain links to third-party websites or integrate with third-party services. We are not responsible for the privacy practices of any third party. We encourage you to review the privacy policies of any third party before providing them with your personal information.

11. Couple Responsibilities for Guest and Key Contact Data

When a Couple uploads personal information about guests or other individuals through the Platform, the Couple is acting as the person responsible for that data. By uploading such information, the Couple represents and warrants that:

They have obtained any necessary consent from the individuals concerned to collect and share their personal information with One Fine Plan for wedding planning purposes;
Where a guest is a child under 18, they are the child's parent or guardian, or have obtained appropriate parental consent to include the child's information;
Their collection and use of the personal information complies with the Privacy Act 1988 (Cth) and any other applicable privacy laws; and
The personal information uploaded is accurate, current, and relevant to the purposes for which it is provided.

Couples are also responsible for ensuring that any access they grant to Collaborators is appropriate and that they are entitled to share guest information with those individuals for wedding planning purposes.

Individuals (including suppliers, key contacts, and guests) who have questions about how their personal information is used in connection with a specific wedding should contact the relevant Couple directly.

12. Supplier Responsibilities for Couple Data

Through the Platform's messaging features, Suppliers may receive personal information about Couples, including names, contact details, and wedding dates. Where a Supplier receives couple personal information through the Platform:

The Supplier is an independent data controller in relation to that personal information and is responsible for handling it in compliance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles in their own right;
The Supplier must use couple personal information only for the purpose of responding to the Couple's enquiry or providing services to that Couple; and
Upon termination of a Supplier account, couple contact data stored on the Platform will be retained for 60 days to enable export, after which it will be deleted or de-identified.

13. Accessing and Correcting Your Personal Information

You have the right to request access to the personal information we hold about you, and to request that we correct any information that is inaccurate, out of date, incomplete, or misleading.

Much of your account data --- including your guest list, budget, planning notes, and media --- is accessible and editable directly within the Platform. Self-service data export is available to Premium and Platinum couple plan users via the Platform settings.

To make an access or correction request, or if you are a Free plan user seeking a structured export of your personal information, please contact us at [email protected] with your name and contact details. We may need to verify your identity before providing access. We will respond within a reasonable timeframe.

In some cases we may be unable to provide access to all personal information we hold --- for example, where doing so would reveal information about another person, or where an exemption under the Privacy Act 1988 (Cth) applies. We will explain why if this is the case.

14. Children's Privacy

14.1 Account Holders

The Platform is intended for use by individuals aged 18 and over. We do not knowingly collect personal information directly from anyone under 18 for the purpose of creating or operating an account. If you believe we have inadvertently collected account information from a minor, please contact us at [email protected] and we will address it promptly.

14.2 Child Guests

Wedding guest lists commonly include children. Children may appear as guests on the Platform where they are associated with an adult primary guest within a family group. Personal information collected for child guests is limited to what is necessary for wedding planning purposes (such as name, meal preference, and seating assignment), is entered by the account holder, and is handled with the same care as all other personal information on the Platform. Child guests are not sent any direct communications by us.

15. Complaints

If you believe we have handled your personal information in a way that does not comply with this Privacy Policy or the Australian Privacy Principles, you may make a complaint by contacting us at [email protected]. Please include your name, contact details, and a description of your concern.

We will acknowledge your complaint promptly and aim to resolve it within 30 days. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

16. Contact Us

For any questions about this Privacy Policy, to access or correct your personal information, or to make a complaint, please contact us at:

One Fine Plan Pty Ltd

Email: [email protected]

Website: onefineplan.com

Questions about this document?

One Fine Plan Pty Ltd | ABN to be confirmed | Victoria, Australia