What we store, and why

This notice explains which personal data we process when you build an invitation, when you pay, and when your guests reply.

Controller

The controller is [[company name and address]]. Contact: [[support email]]. [[Data protection officer, if one is appointed]]

Data you give us

When you create an invitation we store the names, date, time, venue, message, schedule, music choice and any photographs you enter. We need this to render the invitation — Art. 6(1)(b) GDPR, performance of a contract.

Guest replies

When a guest replies we store the name they type, their attendance status, headcount and any note. You are the person who invited them; we process this on your behalf so you can plan your event.

Payment

Card details are entered on the payment provider’s own page and never reach our servers. We receive the order reference, the amount and your billing email from [[payment provider]].

Hosting and logs

The site runs on [[hosting provider]]. Server logs record the request, an abbreviated IP address and a timestamp for security and abuse prevention — Art. 6(1)(f) GDPR.

How long we keep it

Invitations and replies stay for [[retention period]] after the event date, then are deleted. Invoices are kept for the statutory period of [[years]] years.

Your rights

You may request access, rectification, erasure, restriction, portability, and object to processing based on legitimate interests. Write to [[support email]]. You may also complain to a supervisory authority.

Cookies

We set no advertising or analytics cookies. [[List any strictly necessary cookies and their purpose.]]