Privacy Policy

Gr8ful Enterprises LLC, a Wyoming limited liability company, is the controller of personal data collected through this website and through our planning services.

We collect:

• Identity and contact data: name, email, phone, mailing address, nationality when provided
• Event data: preferred destination, date, guest count, plan of interest, dietary needs, accessibility needs, ceremony preferences
• Guest-list data you choose to send us
• Payment and billing data processed by our payment providers
• Communications you send us
• Technical data: IP address, browser type, device, pages viewed, approximate location derived from IP, cookie identifiers

We do not require you to provide guest-list data through the public contact form. If you later send guest lists, you represent that you have a lawful basis to share that information.

Directly from you via forms, email, phone, and contracts. Automatically via cookies and similar technologies. From vendors only as needed to perform contracted services.

We use data solely to:

• respond to inquiries and qualify potential clients
• prepare proposals and plan and execute events
• process payments and keep accounting records
• communicate about the engagement
• improve the website and our services
• protect against fraud, abuse, and legal risk
• comply with law, including United States sanctions screening

We do not sell, rent, or share personal data with third parties for their independent marketing.

Where a legal basis is required, we rely on performance of a contract, steps prior to contract, legitimate interests in operating a luxury planning practice and securing our systems, consent where we ask for it, and compliance with legal obligations.

We share information only:

• with vendors directly involved in your event, under a need-to-know and confidentiality expectation
• with payment processors
• with professional advisors (legal, accounting, insurance)
• with hosting, email, and analytics providers who process data on our instructions
• with authorities when required by law or to protect rights and safety
• in connection with a merger, sale, or reorganization of the Company, subject to this Policy

We screen inquiries and clients against applicable United States sanctions requirements administered by OFAC. We do not accept clients, payments, or inquiries from individuals or entities located in, ordinarily resident in, organized under the laws of, or nationals of jurisdictions subject to comprehensive United States sanctions, including, without limitation: Cuba; Iran; North Korea; Syria; and the Crimea, Donetsk, and Luhansk regions of Ukraine. We also decline engagements involving persons or entities on the OFAC Specially Designated Nationals and Blocked Persons List, and engagements that would violate United States sanctions programs relating to Russia, Belarus, Venezuela, Myanmar (Burma), Sudan, Nicaragua, Afghanistan, Libya, Somalia, Yemen, Lebanon, Iraq, Mali, the Democratic Republic of the Congo, Ethiopia, South Sudan, the Central African Republic, or Hong Kong. Inquiries from a prohibited jurisdiction will be rejected without response. We may collect and retain the minimum data needed to document a declined inquiry for compliance.

This website and our systems are operated in the United States. If you are located outside the United States, your data will be transferred to and processed in the United States. By using the site or submitting an inquiry, you consent to that transfer.

We use essential cookies required for the site to function and analytics cookies to understand usage. You may disable non-essential cookies in your browser. Some features may not function if cookies are blocked.

We use industry-standard encryption in transit and access controls on our systems. No method of transmission or storage is completely secure. We cannot guarantee absolute protection.

We retain inquiry and client records for seven (7) years after the later of the event date or the last communication, for legal, tax, and accounting purposes, then delete or irreversibly de-identify them, unless a longer period is required by law or a dispute is pending. Server logs and analytics are kept for a shorter operational period.

Subject to applicable law, you may request access, correction, or deletion of your personal data, or a copy of data you provided. Send requests to legal@gr8ful.us. We will respond within thirty (30) days. We may need to verify your identity. We may decline a deletion request when we must keep records for law, accounting, sanctions compliance, or dispute resolution.

This website and our services are not directed to children under 18. We do not knowingly collect personal data from children.

We do not currently respond to browser Do Not Track signals.

We may update this Policy at any time by posting a revised version on this page with a new effective date. Continued use of the website constitutes acceptance.

Privacy inquiries: legal@gr8ful.us
Legal inquiries: legal@gr8ful.us
Gr8ful Enterprises LLC
Wyoming, United States