Consumer health data privacy policy

This policy is for residents of Washington, Nevada and Connecticut, whose laws give extra protection to "consumer health data". It covers the consumer health data that Contextual Labs Ltd. ("Linenfold", "we") handles through Linenfold, the wedding planning app. Our privacy policy covers everything else.

Consumer health data we collect, and why

• Dietary needs and allergies of a wedding's guests (for example vegetarian, gluten-free or a nut allergy), and which people in a household each one applies to.
• Notes that a couple or a guest writes, such as an RSVP note, a guest note or an accessibility need, when they mention health.

We collect it only so a couple can plan their wedding: to show it in their workspace, count it for the meal, and put it in what the couple chooses to print, download or share, such as the caterer report, place cards and the Wedding Day Binder. We don't use it for anything else. We don't sell it, use it for advertising, or collect any other health information, such as precise location.

Where it comes from

• The couple and the people they invite to plan with them, who type it in or bring it in from a spreadsheet or another file.
• Guests, who send it through a couple's address form or RSVP page, or mention it in a reply to a text from the couple.

What we share

The same categories listed above: dietary needs and allergies, and notes that mention health.

Who we share it with

• The couple and the people planning with them, who see their own wedding's information.
• People the couple chooses to share with, such as their caterer and other vendors, through a printout, a download or a vendor page. A vendor page shows how many people have each dietary need, never who has it.
• Service providers that store and run Linenfold for us: our database provider (Supabase), our hosting and email provider (Cloudflare) and, only when a couple texts their guests from Linenfold, our texting provider (Twilio), which carries a guest's text reply to the couple. They may use it only to provide their service to us.

We have no affiliates, and we never sell consumer health data.

Your rights, and how to use them

You have the right to:

• confirm whether we collect, share or sell your consumer health data, and see it, with a list of the third parties and affiliates we've shared it with and how to contact each one;
• withdraw your consent to our collecting or sharing it;
• have it deleted, including by the providers above.

To use these rights, email privacy@linenfold.co. A couple can also see, change and delete their guests' information in their workspace, delete a wedding in Settings, or delete their account in Settings → Account. A guest can also ask the couple, who can change or delete it themselves.

We may need to confirm it's you before we act, and we'll answer within 45 days. If we need longer, up to 45 more days, we'll tell you why within the first 45. Requests are free, up to twice a year.

If we turn your request down, we'll explain why, and you can appeal by replying to our answer. We'll answer an appeal in writing within 45 days. If we still say no, we'll tell you how to complain to your state's Attorney General: in Washington at atg.wa.gov/file-complaint, and in Nevada at ag.nv.gov/Complaints/File_Complaint.

Changes

We'll post updates here and change the dates at the top. Before a material change to how we collect, use or share consumer health data, we'll email account holders and, where the law asks for it, get consent again.

Contact

Privacy Officer, Contextual Labs Ltd. · privacy@linenfold.co