Privacy Policy

1. Who this covers

This policy covers quinceanerasonabudget.com (the "Directory") and everything we do with information collected through it. Two different groups give us information, and we treat them differently: vendors who ask to be listed, and families who use the Directory to find them.

2. What we collect from vendors

When a business applies for a listing, we collect what it takes to publish one: business name, contact name, business email and phone, website, social profiles, city and state, service categories, a description, and a link to a folder of photos.

We also record the consent choices made on the form — photo rights, listing terms, and marketing communications — with a timestamp and a version stamp of the terms in effect at that moment. That record is the proof of what was agreed to, which is why we keep it (see section 6).

3. What we collect from families

The Build My Dream Team tool records the details of the request itself: metro area and state, event date, budget range, language preference, the categories selected, and which vendors matched.

An email address is optional. The tool works completely without one, and we ask for it only if you want to hear from us. If you do not give an email, your request is stored without anything that identifies you, and identical requests overwrite each other instead of accumulating — so repeated use does not build a profile of you.

If you do give an email, we require you to tick the consent box first. There is no path through the form that captures an address without it.

4. What we collect from everyone

Cloudflare provides bot protection on our forms, which involves standard security signals from your browser and may set cookies necessary for that protection to work. We use cookie-free analytics that count visits and pages in aggregate; it does not track you across other websites.

5. What we never collect

We do not collect passwords, payment or card details, government identifiers, dates of birth, or health information — anywhere on this platform. This is a deliberate boundary, not an oversight. The Directory needs contact details and preferences to work, and nothing more sensitive than that, so we do not ask for it and we have nowhere to put it.

6. How we use it, and who we share it with

Vendor business information is published. That is the entire purpose of a directory listing, and vendors submit it knowing it will appear publicly.

Family information is used to produce your matches and to understand which categories and metros need more vendors. If you consented to hear from us, we may email or text you about the Directory.

We do not sell or rent anyone's information. We do not share it with third parties for their own marketing. We do not hand a family's email address to vendors — if you want a vendor to have your contact details, you contact them yourself.

7. Where it lives and how it is protected

Submissions are stored in a private Cloudflare R2 bucket that is not publicly reachable. Every object is encrypted at rest with AES-256, and everything travels over TLS, with HTTPS enforced site-wide.

Family email addresses are stored only in that private bucket and deliberately never enter our code repository, because a repository gets cloned onto laptops and consumer contact data does not belong there.

Vendor photos are reviewed by a person before anything is published, and image location and camera metadata (EXIF/GPS) are stripped during processing.

8. How long we keep it

Applications that never became listings are deleted after 90 days. Long enough for us to notice a failure and rescue a vendor's submission, then gone — keeping contact details indefinitely on businesses we did not list is not something we can justify.

Dream Team records, including any email given with consent, are deleted after 365 days. A quinceañera cycle runs about a year; past that the record has no purpose.

Consent records for published vendors are kept for as long as the listing exists, because deleting them would destroy the evidence of what a vendor agreed to. An explicit erasure request overrides this — see section 9.

These windows are enforced automatically by the storage system rather than by someone remembering to run a cleanup.

9. Your choices

Three different requests, which are easy to confuse, so we treat them separately. Stopping messages does not remove your listing, and removing your listing is not the same as erasing your records.

Stop hearing from us: use the unsubscribe link in any email, reply STOP to any text, or write to us. Your listing is unaffected — a vendor can stop receiving messages and stay listed.

Remove a listing: any vendor can ask at any time, and we remove the listing and the photos we host for it. We do not require a reason.

Delete everything: we will delete the records we hold about you, including the private submission records described above.

Write to info@quinceanerasonabudget.com for any of these. We honor these requests for everyone who asks, wherever you live, rather than only where a law compels it.

10. Messages you may receive

Any marketing email or text we send is based on consent given on one of our forms, and every message carries a way out — an unsubscribe link in email, STOP for text. Message and data rates may apply and frequency varies. Opting out takes effect for future marketing messages and does not affect a vendor's listing.

11. Children

The Directory is intended for adults planning a celebration. It is not directed to children under 13, and we do not knowingly collect information from them. If you believe a child has given us information, write to us and we will delete it.

12. Changes and contact

If we change this policy we will update the date at the top of this page. Material changes to how we use information already collected will not be applied retroactively without a fresh basis for doing so.

Questions, requests, or corrections: info@quinceanerasonabudget.com.