Privacy Policy
Last updated October 14, 2026
This policy explains what personal data Yeslio collects, why, and what you can do about it. Yeslio is operated by Mudimedia Ltd (“we”, “us”), which is the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
Who we are
Mudimedia Ltd, Unit Da2 Sutherland House, 43 Sutherland Road, London E17 6BU, United Kingdom. Registered in England and Wales, company number 12939842. Email: info@mudimedia.co.uk.
Who is responsible for which data
For the account of a couple who buys Yeslio, we decide how that data is used. For the information a couple adds about their guests (names, email addresses and RSVP replies), the couple decides what to collect and why, and we process it on their behalf only to run their website.
What we collect
- Account data: email address, a securely hashed password, order reference and purchase source.
- Website content: names, wedding details, texts and photos the couple adds.
- Guest list: guest names and, optionally, email addresses added by the couple.
- RSVP replies: name, optional email address, attendance, number of guests and an optional message.
- Technical data: IP address and basic request data, used briefly for security and to stop abuse.
How we use it, and our lawful basis
- To host and show the couple’s wedding website and collect RSVP replies — to perform our contract with the couple.
- To send account emails, hosting reminders and the invitation emails a couple chooses to send — to perform that contract.
- To keep the service secure, for example by limiting repeated login attempts — our legitimate interest in protecting the service.
- To keep purchase records — to meet our legal and tax obligations.
We do not sell personal data, show advertising, or use tracking or analytics cookies.
Cookies
We only use cookies that are strictly necessary: one keeps you signed in to your dashboard, and one remembers that a guest entered the password of a private wedding site.
Who processes data for us
- Cloudflare — hosting, database and photo storage.
- Resend — delivery of emails.
- Stripe — payments made on yeslio.com.
- Etsy — if you buy through Etsy, your order is handled under Etsy’s own privacy policy.
Some of these providers process data outside the UK, for example in the United States. Where they do, the transfer is protected by the UK’s approved safeguards, such as adequacy regulations or the International Data Transfer Agreement.
How long we keep it
A website and its data are kept while its hosting is active (12 months from account activation, longer with a retention plan). When hosting ends, the site goes offline and its content, photos, guest list and RSVP replies are permanently deleted within 30 days. A couple can delete guests at any time, and can ask us to delete the whole account earlier.
Your rights
You can ask to access, correct, export or delete your personal data, or object to how it is used. Couples can export their RSVP list from the dashboard. Guests can contact the couple directly or write to us at info@mudimedia.co.uk, and we will help. We will reply within one month. You also have the right to complain to the UK Information Commissioner’s Office (ico.org.uk) or to the data protection authority where you live.
Changes
If we change this policy, we will update the date above and tell account holders about important changes by email.