Uncompromising Data Sovereignty.

We recognize that the events managed on our platform involve some of the world's most private individuals, families, and corporations. Expedition Blanche operates on a principle of absolute data minimization and strict confidentiality. We do not sell data, we do not monetize your vendor lists, and we comply fully with global data protection frameworks including GDPR and CCPA. Your data remains your exclusive property.

Expedition Blanche operates this platform and acts as the controller of account data we collect directly from agencies, vendors, and private clients. Where an agency uploads information about its own clients and guests, the agency is the controller of that information and Expedition Blanche processes it on the agency's instructions.

Account data: name, email address, agency or firm name, role, access code, and authentication records.

Event data you enter: budgets and ledger entries, guest records and dietary preferences, seating and floorplan layouts, timelines, run of show notes, documents, moodboard images, and vendor correspondence.

Transactional data: proposals, awards, payment milestones, payment balances, and fee records.

Technical data: log and diagnostic information necessary to operate and secure the service.

We process personal data to provide the platform, authenticate users, route briefs to appropriate vendors, administer fees, send transactional notifications, provide support, and protect the service against abuse. We do not use your data to train general-purpose advertising or profiling systems, and we do not sell it.

Where GDPR applies, we rely on performance of a contract (delivering the platform), legitimate interests (security, service improvement, and fraud prevention), consent (for optional integrations such as calendar or mail connectors), and legal obligation (financial and tax record keeping).

Data is shared only as required to operate the service: with the planner, vendors, and clients explicitly connected to an engagement, and with infrastructure subprocessors that provide hosting, managed database and storage, transactional email delivery, and — where a user connects them — calendar and mail integrations. Subprocessors act under contract and may not use your data for their own purposes.

If you connect a Google Calendar or Gmail account, we store an encrypted authorisation credential scoped to your user and use it only for the actions you initiate — creating event entries or sending invitations from your own address. You can disconnect at any time, which revokes the stored credential.

We use strictly necessary cookies and local storage to keep you signed in and to remember interface preferences. We do not use advertising cookies or cross-site trackers.

Event and account records are retained for as long as the account is active, and thereafter only as required for financial, legal, or dispute-resolution purposes. On verified request we delete or return your records; backups age out on a rolling schedule.

Subject to applicable law you may request access, correction, deletion, restriction, portability, or objection to processing, and — under CCPA — disclosure of the categories of data collected and the right to opt out of sale (we do not sell data). Submit requests to admin@expeditionblanche.com. Where an agency controls the data, we will refer the request to that agency and assist them in responding.

Our clients and vendors operate across regions, so data may be processed outside your country. Where required, transfers are made under appropriate safeguards such as Standard Contractual Clauses.

Platform data is encrypted in transit and at rest, access is governed by role-based controls, and privileged operations are executed server-side behind verified role checks. Further detail is available on our Security & Infrastructure page.

Material changes to this policy will be notified in-product or by email before taking effect. Questions may be directed to admin@expeditionblanche.com.