How Regalia Vows collects, uses, retains and protects personal information — under the UAE Personal Data Protection Law and, where applicable, the EU General Data Protection Regulation.
15 May 2026
We treat every name, address and image entrusted to us as if it were our own. This notice describes, in plain language, exactly how.
Regalia Vows FZ-LLC (“Regalia Vows,” “we,” “us”) is a private commissioning house registered in the United Arab Emirates and operating from 14 66 Street, Al Souq Al Kabeer, Al Fahidi Plaza, Dubai, UAE. We act as the data controller for the personal information collected through regaliavows.com and through any direct correspondence with our studio.
We process personal data under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data (the “PDPL”). Where a couple, client or guest is resident in the European Economic Area or the United Kingdom, we additionally apply Regulation (EU) 2016/679 (the “GDPR”) and the UK GDPR.
The categories of personal data we may process include:
We use personal data for the following purposes:
We rely on the following lawful bases under the GDPR: performance of a contract (Art. 6(1)(b)), compliance with a legal obligation (Art. 6(1)(c)), our legitimate interests in operating and protecting the studio (Art. 6(1)(f)), and your consent (Art. 6(1)(a)) — for example before publishing imagery in which you are identifiable. Equivalent bases are applied under the PDPL.
Enquiry data reaches only the founders and the named Regalia Vows team members assigned to a commission. During delivery we share strictly necessary details with vetted suppliers (venues, photographers, florists, transport and security partners) under written confidentiality undertakings. We do not sell personal data and we do not share it with third parties for their own marketing.
When a commission is delivered outside the UAE — or when a supplier processes data outside the UAE — we transfer personal data only under appropriate safeguards, including Standard Contractual Clauses where required by the GDPR, and the transfer mechanisms permitted under Article 22 of the PDPL.
Enquiry data is retained for up to twenty-four months from the last point of contact unless a commission proceeds. Commission records are retained for seven years from the close of the engagement to satisfy UAE tax, audit and statute-of-limitations requirements. Imagery is retained indefinitely in the studio archive but is only reproduced publicly with documented consent.
Subject to the applicable framework, you may:
To exercise any of these rights, write to privacy@regaliavows.com. We respond within thirty days.
The site uses strictly necessary cookies to render pages and a small first-party analytics measurement to understand which compositions are being read. We do not use advertising cookies. A cookie consent notice will appear before any non-essential measurement is set.
We apply administrative, technical and physical safeguards appropriate to the sensitivity of the data we hold, including encrypted transport, restricted access, supplier NDAs and offline backups for commission records.
We may update this notice from time to time. The version below is the one in force; material changes will be flagged at the top of this page for at least thirty days.
Questions about this notice may be sent to privacy@regaliavows.com. This document is provided as a good-faith summary of our practices; it does not constitute legal advice and is reviewed with our counsel before each material update.