miboda
Policy · Law 172-13

Privacy policy

Last updated: August 16, 2026

At miboda.do we take the privacy of the couples who trust us to find their wedding vendors seriously. This policy explains what data we collect, what we use it for, who we share it with, and what rights you have over it, in accordance with Dominican Republic Law 172-13 on the Protection of Personal Data.

1. Who is responsible

The controller of the data collected through this site is miboda.do. For any question about your personal data, write to us at privacidad@miboda.do.

2. What data we collect

We collect only the data you voluntarily provide when you request information through our "Request information" form. Specifically:

  • Your name.
  • Your email address or WhatsApp number (at least one is required so the vendor can reply to you).
  • The approximate date of your wedding.
  • The vendor category you're interested in.
  • Optionally: your approximate budget and estimated guest count.
  • Any message or additional detail you choose to share.

We do not collect financial information, identity documents, or sensitive data about health, religion or orientation.

3. What we use your data for

Your data is used only to:

  • Forward your request to the relevant vendor(s) so they can contact you directly.
  • Follow up briefly to make sure you received a reply and, where applicable, learn whether you ended up booking the vendor (an internal directory-quality metric).
  • Improve the directory's curation based on the aggregated, anonymous requests we receive.

We do not use your data for advertising, we do not sell it, and we do not share it with third parties other than the vendor you chose to contact.

4. Legal basis for processing

We process your data on the basis of your express consent, given by checking the corresponding box on the form before sending your request, in accordance with article 6 of Law 172-13. You may withdraw your consent at any time (see section 8).

5. Who we share your data with

Your data is shared only with:

  • The vendor(s) you asked to contact. We forward your request by WhatsApp or email so they can reply directly.
  • Supabase, our infrastructure provider (servers located in the United States), solely to store the site database under industry-standard security measures.

We do not share your data with any other company, advertising platform or social network, nor transfer it beyond the strict purpose described.

6. How long we keep your data

We keep your request for a maximum of 24 months from submission, unless you ask us to delete it sooner. After that, the data is automatically deleted or anonymized. Aggregated, anonymized data (for example, the total number of requests per category) may be kept indefinitely for internal statistical purposes.

7. Security

We apply reasonable technical and organizational measures to protect your data: encryption in transit (HTTPS), encryption at rest in the database, access restricted to authorized staff, and row-level security policies that prevent unauthorized access to other couples' requests.

8. Your rights

Under Law 172-13, you have the right to:

  • Access the data we hold about you.
  • Rectify inaccurate or incomplete data.
  • Erase your data when it is no longer necessary or when you withdraw your consent.
  • Object to the processing of your data.
  • Withdraw your consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, write to us at privacidad@miboda.do with your full name and the data you're referring to. We will respond within a maximum of 15 business days.

9. Cookies and tracking technologies

This site runs three measurement tools, two of which set cookies. We would rather be plain about it:

  • Ahrefs Analytics — counts visits in aggregate (which pages are viewed, and from which country). It sets no cookies and does not identify you.
  • Google Analytics 4 — measures how the site is navigated and how many enquiries are sent, so we can tell which pages actually earn their place. It sets Google's own cookies (_ga, _ga_*) which tell your browser apart from someone else's.
  • Microsoft Clarity — produces heatmaps and session recordings: it logs which pages you visit, where you click, and how you move your cursor or finger, so we can see where people get stuck. It sets Microsoft cookies (_clck, _clsk, CLID, MUID, ANONCHK), and because Microsoft shares identifiers with its advertising platform (Bing), cookies on the bing.com domain may appear as well. Those are third-party advertising cookies.

What the recordings never capture: what you type into a form. The name, email, WhatsApp, date and message fields are masked at the source, so a recording shows that you typed something, never what you typed. Your contact details reach us only when you press send, by the route described in sections 2 and 3.

Beyond these, the site sets only the cookies strictly necessary for it to work (browsing session).

How to turn it off. You can block these cookies in your browser settings, or install the Google Analytics opt-out add-on. Private browsing also stops them persisting between visits. None of this affects your ability to use the directory or send us an enquiry. If you would rather we deleted the recordings from your visit, write to privacidad@miboda.do.

10. Changes to this policy

We may update this policy to reflect changes in our practices or in applicable regulations. Any substantial change will be announced on this page, updating the last-revised date. We recommend reviewing this page periodically.

11. Contact

If you have any question about this policy or how we handle your data, write to us at privacidad@miboda.do. If you believe your rights have not been properly respected, you may also file a complaint with the competent data-protection authority in the Dominican Republic.