Privacy Notice for Vendors
This notice explains how English Street Ventures Pty Ltd, trading as Cire (“Cire”, “we”), handles personal information across the Cire service — this marketing site, the invitation site couples’ guests use, the organiser portal, and the vendor portal. Couples, co-hosts and organisers have their own notice, for hosts.
What we collect
- Vendor listings and enquiries — if you are a wedding supplier, the contact details on your directory listing (which for a sole trader identify a person), and the enquiry threads between you and a couple. An enquiry sends the couple’s wedding name and message to the vendor they chose.
- Site usage — the technical logs needed to keep the service secure. We run no third-party analytics or advertising trackers.
Your vendor account
You sign in to the vendor portal with your Musubi account, and manage your listing as a member of a Musubi organisation. Musubi describes your Musubi account in its own privacy notice; this section covers what the vendor portal holds.
What it holds
- Your sign-in — when you sign in, Musubi gives us two identifiers for your Musubi profile, and your handle, display name, picture and email address. We store them with a hashed copy of your session cookie.
- Your organisations — when you use the portal, we ask Musubi which organisations you belong to, and your role in the one you are working in. We do not store either answer.
- Your listing — the business name, description, service categories, email, phone number, website, Instagram, location and price guide, and the Musubi organisation it belongs to. A listing a couple created starts with the details they typed, until you change them.
- Your claim — the email address each claim link was made for. While we check a claim, which organisation and Musubi profile made it, and when; once we confirm it, which Musubi profile claimed the listing.
- Your replies — the messages and quotes you send a couple, with the Musubi profile that sent each one. The profile that claimed your listing is a member of each enquiry thread.
Why we keep it
To keep you signed in and show which account you are using, to show your listing to couples planning a wedding on Cire, to carry enquiries, replies and quotes between you and a couple, and to check that a claim on a listing comes from the business before we hand the listing over.
Who sees it
- Couples — once your listing is live, couples on Cire’s Crimson plan, and the co-hosts who share their planning, can find it and see everything on it, your email and phone number included. When a couple adds your listing to their wedding or sends you an enquiry, we copy your business name, email and phone number into their own list of vendors; changing your listing later does not change their copy. The couple you reply to, and the co-hosts who share their planning, can read your replies and quotes. A quote is also saved in the couple’s list of vendors, and they can add it to their budget.
- Your organisation — every member of the Musubi organisation that owns your listing can see and change it, and read its enquiries and the replies in them.
- Our staff — when you claim a listing a couple created, we check the claim before the listing becomes yours. To do that we look up your organisation’s name and handle, your Musubi handle and your role in the organisation, and the email address on your Musubi account.
- Our service providers — Cloudflare hosts the vendor portal and stores what it holds, and Resend delivers the emails we send about your listing, such as claim links and new enquiries.
How long we keep it
- Signing out deletes that device’s sign-in record. In any case the session ends after seven days, and the record is deleted within a day of that.
- A claim link stops working seven days after it is made, and its record is deleted within a day of that.
- Your listing stays until it is removed. The portal cannot delete a listing: to have yours removed, contact us.
- What a couple keeps — their copy of your contact details, the enquiry, and any quote in their list of vendors or budget — stays with their wedding until they remove it or the wedding is permanently deleted.
- There is no set period for the messages in an enquiry thread: today they are not deleted, even when the couple’s wedding is.
Why we collect it
- To provide the service — hosting invitations, collecting RSVPs, powering the planning tools.
- To send transactional email about your listing, such as claim links and new enquiries — never marketing without consent.
- To keep the service secure and improve it.
We do not sell personal information, and we do not use it for third-party advertising.
Who we share it with
We use a small set of service providers to run Cire:
- Cloudflare — hosting, content delivery and databases (global network).
- Resend — transactional email delivery, including vendor claim invitations.
- Enquiries sent to you — an enquiry is sent to the supplier the couple chose, who then holds it under their own responsibility.
- Upstash — infrastructure supporting security features such as rate limiting.
- Grafana Cloud — service telemetry (metrics and traces; pseudonymised identifiers only, never guest content).
- Google Fonts — our pages currently load fonts from Google’s CDN, which sees your IP address when they load. We plan to self-host these fonts.
We also disclose information where the law requires it. Our primary region is Australia; the infrastructure supporting the service’s security is pinned to Sydney, and some technical records — email delivery, service telemetry, payment processing — are handled by providers outside it. If you are in the EEA or the UK, that means your information is transferred out of that area to Australia and elsewhere; ask us and we will tell you what protections apply to that transfer.
How long we keep it
How long we keep your sign-in, your listing, your claims and your enquiries is set out under Your vendor account.
Security
Traffic is encrypted in transit, you sign in through Musubi, which uses passkeys rather than passwords, and session credentials are stored hashed. No system is perfectly secure, but we design for security first.
Your rights
You may have rights to access, correct, delete or port your information, and to object to certain uses — under the Australian Privacy Act, and for people in the EEA or UK, the GDPR and UK GDPR. To exercise them, contact us at [email protected]. You can also complain to a regulator — in Australia, the Office of the Australian Information Commissioner (OAIC), or your local data protection authority.
Cookies
We use only the cookies the service needs to work (such as session cookies for signed-in organisers, vendors and guests). No advertising or cross-site tracking cookies.
Contact
English Street Ventures Pty Ltd (trading as Cire), {{POSTAL_ADDRESS}} — [email protected].