Legal
Privacy Policy
Your privacy matters. Learn how we protect your personal data.
Last updated: February 17, 2026
01
1. Introduction
Too Infinity ("we," "our," or "us") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our wedding venue and catering marketplace platform.
As a company operating in Portugal, we comply with the European Union's General Data Protection Regulation (GDPR) and respect all your data protection rights.
Our Privacy-First Approach: We do not use advertising networks, tracking pixels, or third-party analytics that compromise your privacy. We collect only the data necessary to provide our service.
02
2. Data Controller
Too Infinity is the data controller responsible for your personal data. If you have any questions or need to exercise your data rights, please visit our contact page.
03
3. What Data We Collect
We collect minimal personal data necessary to operate our platform:
Account Information (when you register):
- Name
- Email address
- Password (encrypted)
- Account preferences
Inquiry Information (when you contact venues/caterers):
- Name and contact details
- Wedding date and location
- Number of guests
- Budget and service requirements
- Any additional details you provide in your inquiry
Service Provider Information (venues and caterers):
- Business name and contact information
- Service descriptions and pricing
- Photos and promotional materials
- Business registration details
Technical Data:
- IP address (for security purposes only)
- Browser type and version
- Device information (for providing appropriate mobile/desktop experience)
- Pages visited and actions taken (for service improvement)
04
4. How We Use Your Data
We use your personal data only for the following purposes:
To Provide Our Service:
- Creating and managing your account
- Forwarding your inquiries to relevant venues and caterers
- Facilitating communication between couples and service providers
- Processing and displaying venue/catering listings
To Improve Our Platform:
- Understanding which features are most useful
- Identifying and fixing technical issues
- Improving user experience and interface design
To Communicate With You:
- Responding to your questions and support requests
- Sending essential service updates (e.g., changes to our terms)
- Confirming successful inquiry submissions (with your consent)
For Security and Legal Compliance:
- Preventing fraud and abuse
- Protecting our platform and users from security threats
- Complying with legal obligations
What We Don't Do:
- Sell your personal data to third parties
- Use your data for advertising or marketing purposes
- Share your data with advertising networks or data brokers
- Track your behavior across other websites
- Create detailed profiles for targeted advertising
05
5. Legal Basis for Processing (GDPR)
Under GDPR, we process your personal data based on:
- Contract: Processing necessary to provide our service (lead referral)
- Consent: When you explicitly agree (e.g., to receive non-essential communications)
- Legitimate Interest: Improving our service and preventing fraud, while respecting your privacy
- Legal Obligation: When required by law
06
6. Who We Share Your Data With
We share your data only in these limited circumstances:
With Venues and Caterers (Lead Referral):
When you submit an inquiry, we forward your contact information and requirements to the specific venue(s) or caterer(s) you're interested in. This is the core function of our platform.
With Service Providers (Processors):
- Hosting Provider: To store our platform and database securely
- Email Service: To send account-related and inquiry confirmation emails
- Payment Processor: If you're a venue/caterer paying for enhanced listings
All service providers are contractually bound to protect your data and use it only for the specific services they provide to us.
For Legal Reasons:
We may disclose your data if required by law, court order, or to protect our rights, property, or safety, or that of our users or the public.
We Never Share Data With:
- Advertising networks
- Data brokers or list sellers
- Analytics companies that track you across websites
- Social media platforms for advertising purposes
07
7. Data Retention
We retain your personal data only as long as necessary:
- Account Data: Until you delete your account, plus 30 days for backup purposes
- Inquiry Data: For 2 years after submission, to facilitate follow-up and service improvement
- Technical Logs: For 90 days, for security and troubleshooting
- Legal Records: As required by law (typically 7 years for financial records)
After these periods, data is securely deleted or anonymized.
08
8. Your Data Rights (GDPR)
Under GDPR, you have the following rights regarding your personal data:
- Right of Access: Request a copy of all personal data we hold about you
- Right to Rectification: Correct inaccurate or incomplete data
- Right to Erasure ("Right to be Forgotten"): Request deletion of your data, subject to legal obligations
- Right to Restriction: Limit how we process your data in certain circumstances
- Right to Data Portability: Receive your data in a structured, machine-readable format
- Right to Object: Object to processing based on legitimate interests
- Right to Withdraw Consent: Where processing is based on consent, withdraw it at any time
- Right to Lodge a Complaint: Submit a complaint to your national data protection authority (in Portugal: CNPD)
To exercise these rights, contact us at privacy@toinfinity.com. We will respond within 30 days.
09
9. Data Security
We implement appropriate technical and organizational measures to protect your data:
- Encryption of data in transit (HTTPS/TLS) and at rest
- Strong password requirements and secure authentication
- Regular security assessments and updates
- Access controls limiting who can view your data
- Regular backups with encryption
- Incident response procedures
While we take security seriously, no system is 100% secure. We encourage you to use strong passwords and protect your account credentials.
10
10. International Data Transfers
Your data is primarily stored and processed within the European Union. If we use service providers outside the EU, we ensure they provide adequate protection through:
- Standard Contractual Clauses approved by the EU Commission
- Adequacy decisions (transfers to countries deemed to have adequate protection)
- Other legally approved transfer mechanisms
11
11. Children's Privacy
Too Infinity is not intended for use by individuals under 18 years of age. We do not knowingly collect personal data from children. If we become aware that we have collected data from a child without parental consent, we will delete it promptly.
12
12. Cookies and Tracking
We use only essential cookies necessary for our platform to function (e.g., keeping you logged in). We do not use advertising or tracking cookies. See our Cookie Policy for details.
13
13. Changes to This Policy
We may update this Privacy Policy to reflect changes in our practices or legal requirements. We will notify you of material changes by email and/or by posting a notice on our platform.
The "Last updated" date at the top indicates when the policy was last revised.
14
14. Contact Us
If you have questions, concerns, or wish to exercise your data rights, you can reach us through our contact page:
Supervisory Authority (Portugal): Comissão Nacional de Proteção de Dados (CNPD) Website: www.cnpd.pt
We believe privacy is a fundamental right. If you have suggestions on how we can better protect your privacy, we'd love to hear from you.