Pre-launch policy draft · 18 October 2026. The site is in development and checkout uses test mode. The operator’s full legal name and business correspondence address, final retention schedule and supplier arrangements must be completed before launch. This draft is not a completed compliance assessment.
Who this notice is for
This notice describes how The Wishing Sky website handles information supplied by visitors, people requesting a free mini wish, purchasers and the people named in a personalised wish. Contact hello@thewishingsky.com for privacy questions. The controller’s full legal identity and business correspondence address are pending confirmation.
Information you provide
A mini wish asks for a first name, email address and wish choices. A paid wish uses the couple’s names, wedding date, selected town, optional venue, story, memories and writing choices. Checkout separately collects the billing/contact details needed for the order and payment. Support emails contain whatever you choose to send.
Please have permission to use another person’s details. Avoid sensitive information about health, religion, sexuality or other private matters, and avoid information about children. Only share memories you are comfortable having processed and included in the keepsake.
Why information is used
Order details and personalisation are used to provide the requested collection and support it. Contract-related processing supports that request; legal obligations may require payment and accounting records. Security, fraud prevention and maintaining the service involve legitimate interests, balanced against your rights. Marketing relies on a valid, specific consent record and must offer an easy way to withdraw. The lawful basis for personal stories about people who are not purchasers, including any sensitive information, must be assessed before launch.
AI-assisted writing
When AI personalisation is enabled, the supplied names, story, memories and writing choices are sent to OpenAI through its API to draft the letter. The integration does not deliberately include your email, card details or payment information in that writing request. The resulting letter is saved with the wish. Do not include information you do not want shared for this purpose.
The application asks OpenAI not to store the response through the API’s response-storage setting. That setting does not mean there is no provider-side processing or retention. Provider terms, processing agreements, any international transfer safeguards and current retention rules must be checked before launch.
Service providers
The website uses WordPress, WooCommerce, WooPayments and the Wishing Sky plugin. SmartHost provides hosting and the configured mailbox/SMTP service. WP Mail SMTP sends website mail through that configured transport. FunnelKit is installed for intended signup and marketing workflows. Payment information is handled through WooPayments and its payment providers; the Wishing Sky plugin does not store complete card numbers or security codes.
Other installed services, including Jetpack and security tools, must be reviewed for enabled analytics, logging, cookies and data transfers before launch. This notice does not assert that every installed optional feature is active.
Town and sample-country information
The selected town supplies coordinates and a timezone for approximate sky calculations. It is not your exact wedding venue. Regional examples can be suggested from your browser’s region and, where available, WooCommerce’s local country lookup. The custom sample selector does not call an external IP-location service or ask for device GPS permission. You can choose a different sample country.
Private access and email-link tracking
Private pages use expiring access links and a secure access cookie. Anyone you forward a valid private link to may be able to access that wish. The updated plugin records the first and latest successful access through newly issued ready-email links and a count of those accesses. This does not prove that a person read an email; automated mail tools or forwarded links can affect it. The custom access counter does not retain visitor IP addresses or user-agent strings. Hosting/security systems may keep their own logs.
Retention and deletion
The private page’s hosting expiry is shown on the wish page. Save your PDFs before it expires. Expiry removes customer access; it does not automatically erase every order, PDF, revision, email or backup. The plugin retains finished content and correction history unless an authorised deletion process removes them. The final schedule for expired wishes, unconfirmed signups, support emails, security logs and backups is being set before launch. Accounting records may need to be retained separately for legal obligations.
Your choices and rights
You may request access, correction, erasure, restriction or portability where applicable, object to processing based on legitimate interests, and withdraw marketing consent without affecting earlier lawful processing. Use the unsubscribe link in a marketing email or email the address above. Some records may need to be retained for legal obligations or to protect other people’s rights. You may complain to Ireland’s Data Protection Commission, or your local supervisory authority.
Security and changes
HTTPS, restricted administrative access and expiring private links help protect the service, but no system can be guaranteed risk-free. Please do not email card details or post private links publicly. Changes to this notice will be dated on this page.
Saved mini-wish previews and personal email links
When you use our saved-preview feature, we retain the couple’s names, selected wedding date, town and venue wording, hopes, atmosphere, writing language, and the sender’s name and email for up to 30 days. This lets a personal link in your mini-wish email or eligible follow-up emails restore the details when you continue to a paid wish, including on another device.
Preview details are encrypted in our website database. The personal link acts as an access key to these details, so keep it private and only forward it if you want the recipient to see and use them. It does not grant access to paid orders or payment details. Links stop restoring details after 30 days; expired preview records are removed by scheduled cleanup on the next successful run. Restored form details are available for 30 minutes in the active shopping session.
Preview expiry does not unsubscribe you from email inspiration or delete a completed order. Marketing preferences and order records are managed separately. Unsubscribe using the link in a marketing email, or contact hello@thewishingsky.com about your personal information.