Privacy policy
Version of 17 July 2026.
This policy explains what personal data we process, why, for how long, who receives it and how you keep control over it. It applies to the Planners site and service, whatever the domain through which you access it.
It is the reference document on the subject: our general terms and conditions refer to it and add nothing that contradicts it.
1. Who is responsible for your data
The data controller is:
THE GOBELINERSSASU with a share capital of 10,000 euros
61 rue de Lyon
75012 Paris
France
RCS Paris 532 571 122
Hereinafter "Planners".
For any question or to exercise your rights: privacy@planners.fr.
We have not appointed a data protection officer: our activity does not fall within any of the cases where the law requires one. The address above is the dedicated point of contact.
2. The data we process
We only collect what the service needs. Depending on who you are:
- If you are a couple submitting a project: your email, your telephone number, the envisaged date, the postcode of the venue, the type of event and the indicative budget. Nothing about your beliefs, your health or your private life within the meaning of the GDPR: do not send us any such information.
- If you are a provider: the information of your account and of your listing (identity, professional contact details, company identification number, description, photographs, videos), your exchanges with the couples, your subscription and your credit purchases.
- In all cases: the technical data linked to your browsing (IP address, browser type, pages consulted), the messages you send us, and the audience measurement trackers if you have accepted them.
Mandatory fields are indicated when you fill them in. Without them, we cannot deliver the service.
3. Why we process this data, on what basis, and for how long
| Purpose | Legal basis | Retention period |
|---|---|---|
| Creating and managing your account | Performance of the contract between us | The whole life of the account. Deletion when you delete the account, or after three years without any login. |
| Recording your wedding project and presenting it to providers | Performance of the service you request | Three years after the date of the event or, if your last exchange with us is later than that date, three years after that exchange. |
| Verifying your telephone number by a code sent by SMS | Performance of the service you request, and our legitimate interests in ruling out bogus requests | The code is deleted as soon as it is used or expires. Only the fact that the number has been verified is retained with the project. |
| Suggesting nearby providers to you and matching requests with the relevant professionals | Performance of the service you request | Same period as the project. |
| Passing your contact details on to a provider who requests them | Performance of the service you request: this is the very purpose of putting parties in contact | The record of the transmission is retained with the project. See below what becomes of the copy held by the provider. |
| Publishing a provider's listing in the directory and translating it automatically into the languages of the site | Performance of the contract between us and the provider | For as long as the listing is online. The translations are deleted with it. |
| Ranking providers in the directory and calculating their score | Our legitimate interests in presenting useful results | Recalculated each day; no history retained beyond the data used for the calculation. |
| Managing subscriptions, credit purchases and payments | Performance of the contract, and compliance with our legal obligations | For the duration of the subscription relationship. The payment data is retained by our payment provider in accordance with its own obligations. |
| Handling guarantee claims on unlocks | Performance of the contract | The duration of the project concerned. |
| Replying to your messages | Our legitimate interests in replying to you | Three years after the last exchange. |
| Sending you commercial information, if you are a couple | Your consent | Until you withdraw your consent, and at most three years after our last contact. |
| Sending commercial information to a provider, about their professional activity | Our legitimate interests in promoting a service aimed at their trade | Until you object — which you may do at any time, without having to give a reason — and at most three years after our last contact. |
| Measuring the audience of the site and evaluating our advertising campaigns | Your consent, obtained through the cookie banner | A limited period, in line with the caps recommended by the CNIL as regards trackers. |
| Preventing fraud and abusive use of the service | Our legitimate interests in protecting the service and its users | For as long as is necessary to handle the incident, and at most one year. |
| Ensuring the security and proper technical functioning of the site | Our legitimate interests in maintaining a reliable service, and our security obligations | Technical logs and error reports: one year at most. |
At the end of these periods, the data is deleted. We may retain beyond them what a legal obligation or an ongoing dispute requires us to keep, and only that.
4. Who receives your data
This is the most important point of this policy, so let us say it plainly: our service consists in passing your contact details on to professionals, and it is from that transmission that our turnover comes. We do not sell it to data brokers, we do not rent it to anyone and we do not transfer it to any advertiser. But a wedding provider pays to obtain it.
If you are a couple
When you submit a project, you are asking to be put in contact. Here is exactly what happens.
- Your request is presented to providers selected according to the venue and the type of event. At that stage, they see the content of the project — date, geographical area, type of event, indicative budget — but not your contact details.
- A provider obtains your email and your telephone number in two cases, and two only:
- they spend a credit, purchased individually or allocated by their subscription, to unlock your request;
- they subscribe to our Premium offer: in that case, their credits are not deducted and your contact details appear to them as soon as they open your request, without their having to take any further step.
- Several providers may obtain your contact details for the same project. You are under no obligation to reply to them.
From the moment a provider has received your contact details, they become responsible for it on their own account: it is they who decide what they do with it and how long they keep it, within the limits the law imposes on them. Our terms prohibit them from using it for purposes other than replying to your request, and from transferring it to a third party. To ask them to erase their copy, contact them directly. If you do not succeed, write to us at privacy@planners.fr: we will do what is within our power.
If you are a provider
The information on your listing is public: that is its raison d'être. It is visible to all, indexable by search engines, and translated automatically into the languages of the site. Your subscription and billing data, on the other hand, is never public.
5. Our processors and transfers outside the European Union
We rely on technical providers which process data on our behalf, on our instructions, and for those purposes only:
| Provider | Role | Processing area |
|---|---|---|
| Platform.sh | Hosting of the site | France |
| Supabase | Database | European Union (Ireland) |
| Amazon Web Services | Storage of the files and images uploaded | European Union |
| MongoDB Atlas | Listing consultation statistics | European Union |
| Stripe Payments Europe, Ltd. | Payments, subscriptions and billing. We neither receive nor store any bank card data. | European Union (Ireland) |
| Mailgun | Sending of the service's emails | Outside the European Union possible |
| SMS operator | Sending of the verification codes by SMS | European Union |
| Cloudinary | Optimisation and delivery of images | Outside the European Union (United States) |
| Sentry | Detection of technical errors | Outside the European Union (United States) |
| Google Cloud Translation | Automatic translation of the providers' listings | Outside the European Union (United States) |
| Google Analytics, Google Tag Manager, Google Ads | Audience measurement and advertising. Loaded only if you accept them. | Outside the European Union (United States) |
Some of these providers therefore process data outside the European Union, in particular in the United States. These transfers are possible only if they rest on one of the mechanisms provided for by the GDPR: an adequacy decision of the European Commission, or appropriate contractual safeguards coupled with security measures. You may write to us at privacy@planners.fr to find out the mechanism applicable to a given provider and to obtain a copy of it.
We may also disclose data to an administrative or judicial authority where legislation obliges us to do so. We then limit ourselves to what is requested.
6. Cookies and trackers
The cookies strictly necessary for the operation of the site — your session, your language, security — are placed without consent, because the service cannot work without them.
All the others, those for audience measurement and advertising, are placed only after you accept them. Until you have accepted, they are not loaded: neither the measurement tools, nor the tag manager. Refusing is as simple as accepting, and you may change your mind at any time from the cookie management banner, without this degrading your browsing.
7. Security
We implement the appropriate technical and organisational measures to protect your data: encryption of the exchanges between your browser and our servers, compartmentalisation of access, passwords stored in hashed form, hosting in the European Union for the database, selection of contractually committed processors.
No system is infallible, and we do not claim otherwise. But the security of your data is our obligation, not your risk: we do not place it on you.
If a data breach occurs and it presents a risk to your rights, we notify it to the CNIL within the legal time limits. If it presents a high risk, we inform you directly.
8. Your rights
You have, over the data concerning you, the following rights:
- Access: to know whether we process data about you and to obtain a copy of it.
- Rectification: to have corrected what is inaccurate or incomplete.
- Erasure: to have your data deleted, in the cases provided for by law.
- Restriction: to request the freezing of a processing operation, for instance while a challenge is being settled.
- Portability: to receive the data you have provided to us in a machine-readable format, or to ask us to transmit it to another organisation.
- Objection: to object to a processing operation based on our legitimate interests, on grounds relating to your situation.
- Objection to prospecting: to object at any time to receiving commercial messages. That right does not have to be reasoned: it is enough to ask, and we stop.
- Withdrawal of consent: where a processing operation rests on your consent — measurement cookies, prospecting addressed to couples — you may withdraw it at any time. The withdrawal does not call into question what has been done before.
- Post-mortem directives: to lay down instructions on the fate of your data after your death, and to designate who will be able to have them applied.
To exercise these rights, write to privacy@planners.fr, or use the contact form. Exercising your rights is free of charge. We reply within one month of receiving your request. If it is complex, or if we receive a great many, that period may be extended by two months: we will then inform you within the first month, giving you the reason.
We may need to verify your identity before replying, if a reasonable doubt exists. We then ask only for what is strictly necessary.
9. Complaint to the CNIL
If you consider that we are not respecting your rights, you may lodge a complaint with the French supervisory authority:
Commission nationale de l'informatique et des libertés (CNIL)3 place de Fontenoy — TSA 80715
75334 Paris Cedex 07
France
www.cnil.fr
If you reside in another country of the European Union, you may also bring the matter before the supervisory authority of your country. You are not required to have contacted us beforehand, even if we would obviously prefer to settle things with you first.
10. Deleting your account
You may delete your account at any time from your personal area. Two things to know before doing so.
- The deletion is immediate and definitive. Your account data is erased from our databases, with no recovery period. We will not be able to restore it, and a provider will lose their listing, their history of exchanges and their balance of unused credits.
- It does not affect the copies already transmitted. The contact details which a provider obtained before the deletion remain with them: contact them to have them erased. Likewise, the data held by our payment provider is subject to its own obligations and its own retention periods.
If you only want to stop receiving messages or to have your listing withdrawn from the directory, write to us instead at privacy@planners.fr: deleting the account is not necessary for that.
11. Amendment of this policy
This policy may change, for example when we change technical provider or add a feature.
The version date appears at the head of the document: it enables you to know which text applies. In the event of a substantial change — a new purpose, a new recipient of your contact details, a change of legal basis — we inform you before it takes effect, by a message sent to account holders or by a visible notice on the site. It is not for you to monitor this page.
12. Contact us
For any question about this policy or about the processing of your data: privacy@planners.fr.
For any other question: hello@planners.fr, or the contact form.
The French text of this policy is authoritative. The other language versions are provided for information purposes only.