An inquiry to our Seattle bridal boutique is kept 18 months, then deleted.

1.1Effective date.This notice takes effect on September 30, 2026 and replaces any earlier version. The date at the head of this page is the date of the last change; if nothing has moved since, it stays as written.

1.2Controller.The site is operated by Idobridal, trading at idobridal.us as I Do Bridal, a wedding dress boutique in Seattle that has sold gowns since 1997. The postal address is 424 N 85th St, Seattle, Washington 98103, United States. That business decides what is collected here and why, and answers for it. No other company shares that role.

We are one salon. There is no group, no franchise and no reseller behind the site, so a question about your data reaches the same people who book the fitting room.

2.1The inquiry form.When you send the booking or inquiry form, vulof67.php writes the fields you filled in: your name, phone, email, the address or zip you gave, the kind of inquiry you picked, your message, any gown specification you described and whether you ticked the consent box. Alongside it the server records your IP address, your browser's user-agent string, the page that referred you, the moment the form was rendered and the moment it was sent. The two timestamps exist to catch automated spam, which fills a form in under a second.

2.2The support chat.If you open the chat, muwu0a0.php keeps the conversation, plus whatever name, phone or email you choose to add. A token is stored in your browser so you can come back to the same thread without starting over.

2.3Logs and storage.The web server writes an access log of requests, with IP address, time, the page asked for and user-agent. Your cookie choice is stored in your browser under site_consent_v2. If you allow storage, the advertising and measurement tags set their own cookie identifiers, listed on the cookies page.

2.4Click identifiers.A visit that starts from a paid ad arrives with an identifier in the link: gclid from Google, msclkid from Microsoft, fbclid from Meta. It ties the visit to the ad click.

There is no account, no password and no payment on this site. We take no card data, because nothing is sold here. Gowns are bought in the salon.

2.5Purposes.Form and chat data are used to answer you, book the appointment and prepare the rail before you arrive, which means a stylist reads what you wrote about the venue, the date and the silhouettes you like. Log data keeps the site running and blocks abuse. The consent record remembers your answer so the banner does not ask twice. Cookie identifiers and click identifiers, when you allow them, tell us which ad led to an inquiry, so we stop paying for the ones that bring nobody.

2.6Legal bases.For visitors covered by the GDPR each purpose rests on one stated ground. Under US state law the same purposes are disclosed at collection, which is this notice.

Answering an inquiry, booking a fitting

Steps you asked for before a contract, and your consent tick

Chat conversation

Consent, given by starting the chat

Server logs, spam timing

Legitimate interest in a working, safe site

Storing your cookie choice

Legal obligation to record consent

Ad measurement, remarketing

Consent only, withdrawable at any time

3.1Platforms that send traffic.The boutique buys ads today. Google Ads, Microsoft Advertising and Meta Ads send visitors to this site. Google Ads attaches gclid to the link you click. Microsoft Advertising attaches msclkid. Meta Ads attaches fbclid where a campaign runs there. The identifier is read on arrival and, if you allow storage, kept so that a later inquiry can be credited to the ad. None of these platforms has a say in how the salon runs, and none of them sees what you type into the form.

3.2Consent Mode v2.The site uses Google Consent Mode v2. Before you choose, four signals are set to denied: ad_storage, ad_user_data, ad_personalization and analytics_storage. While they are denied, no advertising or analytics cookie is written and no user data is passed for ad purposes. Pressing Allow sets them to granted. Pressing Decline, or withdrawing later through Cookie settings in the footer, sets all four back to denied at once, and they stay there on your next visit.

3.3Global Privacy Control.If your browser sends the Global Privacy Control signal, the Sec-GPC header, we treat it as an opt-out of sale and sharing. The four consent signals stay denied and the banner does not ask you to reconsider.

4.1Recipients.Named one at a time. Google Ireland Ltd and Google LLC run Google Ads, which attaches gclid and receives the consent signals. Microsoft Ireland Operations Ltd runs Microsoft Advertising, which attaches msclkid; its handling is set out in the Microsoft privacy statement at privacy.microsoft.com/privacystatement. Meta Platforms Ireland Ltd runs Meta Ads, which attaches fbclid where a campaign runs there. The hosting provider serves the site and stores the inquiry database. The mail provider carries the notification of a new inquiry to the boutique's inbox. Nobody else receives your data, and we do not sell a list of brides to photographers, florists or venues. People ask. The answer is no.

4.2Transfers.The boutique is in the United States and the data is processed here. If you write from Europe, your data travels to the United States. For the ad platforms, that transfer runs under the EU-US Data Privacy Framework where the recipient is certified, and under the European Commission's standard contractual clauses otherwise. Google, Microsoft and Meta route European data through their Irish entities named above.

4.3Retention.Real periods, not "as long as necessary". A wedding is usually planned within a year and a half, which is why inquiries are kept that long and no longer.

Inquiries and their email copies

Kept for 18 months

Chat transcripts

Kept for 12 months

Server and access logs

Kept for 90 days

Record of a consent choice

Kept for 6 months

Once a gown is ordered in the salon, the sales paperwork is a separate record kept under tax law, not under this site.

4.4Security.The site is served only over HTTPS. The inquiry database is not reachable from the public web, and the staff panel that reads it sits behind a login. Forms carry two hidden trap fields and a timing check to turn away bots. Access is limited to the people who answer inquiries. No system is perfect; if a breach touched your data we would tell you by email without undue delay.

5.1Under the GDPR.If you reach the site from Europe, the GDPR gives you these rights, each of which we honour:

• access to the data we hold on you, with a copy;
• rectification of anything wrong, such as a misspelled name or an old phone number;
• erasure, so your inquiry and chat are deleted;
• restriction, so we keep the data but stop using it;
• portability, a copy in a plain machine-readable file;
• objection to processing based on legitimate interest;
• withdrawing consent at any time, without affecting what was done before.

5.2Under US state law.California residents have rights under the CCPA as amended by the CPRA: to know what personal information is collected and why, to delete it, to correct it, to limit use of sensitive information, and to opt out of the sale or sharing of personal information. Sharing a click identifier with an ad platform for cross-context advertising counts as sharing under that law, so declining cookies or sending Global Privacy Control is how you opt out. Residents of Washington, Colorado, Connecticut, Virginia, Oregon, Texas and the other states with privacy laws in force have the same rights on the same terms. We never charge for a request and never treat you differently for making one.

5.3Children.The site is for adults planning a wedding. It is not directed at children under 13, and we do not knowingly take data from anyone under 16. A parent who finds that a child has written to us can ask and we delete it.

5.4Complaints.Write to us first, since we can usually fix it the same week. You may complain at any time to your state Attorney General, and in California to the California Privacy Protection Agency. Visitors from Europe may complain to the data protection authority of the country where they live.

6.1Making a data request.Email [email protected] with "Data request" in the subject, or post a letter to I Do Bridal, 424 N 85th St, Seattle, Washington 98103, United States. Say which right you are using and give the email or phone you wrote to us from, so we can find the record and confirm it is yours. We answer within 5 days. An authorised agent may make a request for you with your signed permission.

6.2Changes.A change to this notice is published here with a new effective date at the head of the page. If a change adds a new recipient or a new use of data you already gave us, we email the people with an open inquiry before it applies, and ask again for consent where consent is the basis.

6.3Contact.A person reads every message. Email [email protected], call +1 206-633-5070, or come to the salon at 424 N 85th St, Seattle, Washington 98103. For how cookies are set and refused, see the cookie notice; for the conditions of an appointment and an order, see the terms.

7.1Standard.We build this site to meet WCAG 2.2 at level AA. Text on the paper ground passes AA contrast; the terracotta signal colour carries white text only at 16px and above. Every control can be reached with a keyboard and shows a visible focus ring. Tap targets are at least 44px. Headings run in order, images carry written descriptions, and the rotating word in the home page headline is read by screen readers as one fixed sentence.

7.2Motion.If your system asks for reduced motion, the running strips stop and headings appear without sliding. Nothing on the site plays sound or video on its own.

7.3Known gaps.Wide tables on the gown and legal pages turn into labelled blocks on a phone, which reads well but takes more scrolling. Some photographs describe fabric in words that assume you know what tulle or mikado is; ask us and a stylist will explain it plainly.

7.4In the salon.If you need something at the appointment itself, such as extra time, a seat in the fitting room or a quieter slot, say so when you book on the contact page or call +1 206-633-5070. Report a barrier on the site to [email protected] and we reply within 5 days.