Who we are
Invited by Love is run by TeoPix Creative Ltd, a company registered in England and Wales (company number [company number]), [registered office address], London. For anything to do with your data, write to hello@invitedby.love.
For couples’ accounts, we are the controller of your data. For the replies your guests send, we hold them on the couple’s behalf, so that the couple can plan their wedding, and we use them for nothing else.
What we keep
If you are a couple
- Your name, email address and password. Passwords are stored only in scrambled (hashed) form; we can never read them.
- Everything you put in your invitation: your names, your families’ names if you add them, the date, venue and programme, menu, dress code, any gift or bank details you choose to show your guests, and your music choice.
- That you agreed to our terms and privacy policy, and whether you asked to hear from us by email, each with the date you chose it.
- When you pay, the payment itself is handled by our payment provider. We see that you paid and how much, never your full card number.
If you are a guest replying to an invitation
- The name you give, whether you can come to each part of the day, how many of you are coming and any meal choices.
- Anything you choose to add: a message for the couple, a song request, and allergies or other requests.
- Which link you used (for example the bride’s side or the groom’s side), the language you read the invitation in, and a random reply code kept in your browser so that, if you change your answer, your first reply is updated rather than counted twice.
Allergies and dietary needs. A note such as “nut allergy” can count as health information. It is always optional. We only collect it when you choose to write it, we show it only to the couple whose invitation you replied to, and we use it for nothing else. You can ask us to remove it at any time.
Technical details
- Like every website, our hosting providers briefly log technical details such as IP addresses to keep the service running and secure.
Why we use it
- To provide the service you asked for: your account, your invitation, publishing it and delivering your guests’ replies to you (performance of our contract with you).
- To keep the service safe: preventing abuse, spam replies and attacks (our legitimate interests).
- Allergy and dietary notes: only because the guest chose to give them for this purpose (explicit consent, which can be withdrawn by asking us to delete the note).
- To keep financial records once you have paid (legal obligation).
- News, new themes and offers: only if you ticked the box when you signed up (consent). Every such email has an unsubscribe link, and you can also write to us to stop them at any time. Emails about your account, such as confirming your address or resetting your password, are part of the service and are sent either way.
We do not sell personal data, we do not use it for advertising, and we never send marketing to guests.
Who helps us run it
We use a small number of trusted providers, each bound by a data processing agreement:
- Supabase - our database and sign-in system. Your data is stored in London, United Kingdom.
- Vercel - hosts the website and delivers pages quickly around the world.
- Resend - sends our account emails (such as confirming your email address) from servers in Ireland.
- Stripe - takes payments, when you pay to publish.
- Google Fonts - supplies the lettering on our pages, so your browser contacts Google’s servers to load it.
- Google Maps - only if you tap to show the venue map on an invitation.
- YouTube - only if the couple chose a song from YouTube for their invitation. YouTube’s own privacy policy applies to its player.
- OpenStreetMap - when a couple searches for their venue in the studio, the search words (not your identity) go through our server to OpenStreetMap to find the address.
Some of these providers are based in, or may access data from, the United States. Where that happens, the transfer is covered by the UK’s adequacy arrangements or by the UK International Data Transfer Agreement or Addendum.
Cookies and your browser
We only use what the service needs to work. There are no analytics or advertising cookies.
- Sign-in cookies keep you signed in to your account.
- Your draft is also kept in your browser’s storage while you design, so nothing is lost if you close the page.
- Guests get the small reply code described above, kept in their browser.
Google Maps and YouTube may set their own cookies, but only when you choose to load the map or the couple has added a YouTube song.
How long we keep it
Your account, your invitations and your guests’ replies stay until you delete them or ask us to. When an account is deleted, its invitations and every reply to them are removed from our database straight away; backups roll over and disappear within a few weeks. If you have paid, we keep the payment record for six years, as UK tax law requires.
Guests can ask us to remove their reply at any time; we will let the couple know it has been removed.
Your rights
Under UK data protection law you can ask us to show you the data we hold about you, correct it, delete it, limit how we use it, object to how we use it, or give it to you in a portable format. Write to hello@invitedby.love and we will reply within one month.
If you are unhappy with how we have handled your data, please tell us first so we can put it right. You also have the right to complain to the Information Commissioner’s Office at ico.org.uk.
Children
Accounts are for adults planning their own celebration. Guests of any age may be named in a reply by the adult who sends it.
Changes
If we change this policy in a way that matters, we will update the date at the top and, for significant changes, email account holders.