Legal — Privacy

Privacy notice

Serai Oak Limited, Ireland, is the controller of personal data collected through this website. Contact us at hello@seraioak.com.

Information we collect

Enquiry forms ask for your name, email address, message and, where relevant, your organisation or the type of work you are enquiring about. Product-interest forms ask for your name and email address.

The Elaine and James event form asks for guest name(s), an attendance response, and optional dietary requirements or allergies. We store the submitted name text and each parsed guest name separately. Dietary or allergy information may reveal health information, so provide only what is needed for the event.

Our forms also process technical information to prevent misuse: a hash derived from your IP address and user-agent, the user-agent string, form-render time, submission timestamps, and Cloudflare Turnstile verification.

Why we use it and our legal bases

We use enquiry and product-interest details to respond to you and discuss the relevant service or product. We use ordinary event RSVP information on the basis of our legitimate interests in organising the wedding and administering responses. We use technical data for our legitimate interests in securing our forms and preventing abuse.

Dietary or allergy information is optional. If you enter it, we process it only for wedding dietary arrangements with your explicit consent. You can withdraw that consent by emailing us before the event. Withdrawal does not affect processing that took place before it.

Form checks are automated: Turnstile and rate limiting can reject a submission that fails a security or abuse-prevention check. These checks do not make decisions about an event invitation, a client engagement, or a product opportunity.

Recipients and service providers

We use Vercel to host this website, Google Fonts to supply website typography, Cloudflare Turnstile for form-abuse protection, Fly.io to host the form API, and Supabase to store form submissions. For production enquiries, we also send limited notification content to Telegram so that we can respond promptly. These providers process information only as needed to provide their services to us.

Some providers may process information outside the European Economic Area. Their locations, transfer arrangements and privacy information are available from the relevant provider; we will use an applicable lawful transfer mechanism where one is required.

Retention

Supabase RSVP records, including guest names, attendance, dietary-consent records and RSVP form-abuse metadata stored with the RSVP, are scheduled for deletion one month after the wedding on 18 December 2026. This scheduled deletion does not control service-provider request and security logs, which are retained under the relevant provider's policies. Enquiries and product-interest submissions are retained only for as long as needed to handle the request, maintain relevant records, or meet legal obligations.

Your rights

You may ask for access to, correction of, deletion of, or a copy of your personal data. Depending on the circumstances, you may also have rights to restrict processing or object to processing based on legitimate interests. Contact hello@seraioak.com. You may also complain to the Irish Data Protection Commission.

Cookies

Serai Oak uses essential cookies where needed for security or a service you request. We do not currently run advertising or analytics cookies. A first-party cookie named serai_oak_cookie_preferences records when you dismiss the cookie notice and lasts for up to 180 days.

You can reopen the notice using Cookie information in the footer. If non-essential technologies are introduced, we will update this notice and the controls before enabling them.

Last updated: 15 October 2026