What we hold, and what we do not

Who this covers

This statement covers digitalinvitations.io, the invitations we build, and everyone whose information passes through them. That is two different groups of people, and they are worth separating.

Clients are the people who ask us to make an invitation. Guests are the people who receive one and reply to it. We collect much more from clients than from guests, and guests never chose us, so their information is handled with that in mind.

What we collect from clients

Only what is needed to talk to you and to build the invitation you asked for. Nothing is bought from anyone, and there is no profiling of any kind.

• ✓Your name, and a mobile number or an email address, from the start form or the contact form
• ✓What you tell us about the event: the occasion, the date, the venue, the guest count, the look you want
• ✓The content you send us for the invitation itself: names, the programme, photographs, the entourage or godparent lists
• ✓Messages between us, on Messenger, Viber, email or a call
• ✓A record that a payment was made, and by which method. We never see or hold card or bank credentials

What we collect from guests

Whatever a guest chooses to put into an invitation, and nothing more. A guest is never asked to make an account, never asked for a password, and never tracked across the internet.

• ✓The name a guest gives when they reply, so the host knows who answered
• ✓Their reply, the number of seats, and any dietary note they add
• ✓A message, if they leave one on the well wishes wall
• ✓Photographs they choose to upload, and the name attached to them

Children's information

A christening, a first birthday and a seventh birthday invitation are all about a child, and we take that seriously. A child's name, their photograph and the date of their celebration are personal information belonging to a minor, and we only ever hold them because a parent or guardian gave them to us for that invitation.

We do not use a child's name or photograph in our own marketing. Every child on this site is invented, and every sample invitation is set at a fictional event with fictional names. If you would like a child's details removed from an invitation we have built, tell us and we will do it the same day.

Why we are allowed to hold it

Under the Data Privacy Act of 2012 we rely on two grounds, and which one applies depends on who you are.

For clients it is the contract: we cannot build an invitation for an event without the details of the event, or reply to an enquiry without a way to reply. For guests it is consent, given by choosing to reply, leave a message or upload a photograph. A guest who opens an invitation and does nothing leaves nothing behind.

Who else touches it

As few companies as possible, and none of them for their own purposes. We do not sell information, we do not share it with advertisers, and we do not use it to train anything.

• ✓Supabase, which provides the database and the file storage for invitations, hosted in Singapore
• ✓Vercel, which hosts and serves the site itself
• ✓Meta and Rakuten Viber, if you choose to talk to us on Messenger or Viber, under their own privacy terms rather than ours
• ✓Nobody else, unless we are legally required to disclose something

Information leaving the Philippines

Some of it does, and you should know that plainly. Our database and file storage sit in Singapore, and the site is served from data centres outside the country. That is a cross-border transfer under the Data Privacy Act.

Both providers are contractually bound to protect the information they hold for us and to process it only on our instructions. Nothing is transferred anywhere for marketing, resale or analysis.

How long we keep it

Long enough to be useful, and then not longer. These are the periods we work to, and we will delete anything sooner if you ask.

• ✓The invitation itself, with its replies and messages, stays reachable for 12 months after the event
• ✓Guest photographs stay downloadable for 90 days after the event, or a year if you have extended that
• ✓Enquiries that never became a project are deleted within a year
• ✓Records of payments and invoices are kept for as long as tax and accounting rules require

Cookies and tracking

This site sets no advertising cookies, runs no analytics, and carries no tracking pixels from any social network. There is nothing here following you to another website, and no consent banner because there is nothing to consent to.

Invitations may use a small, strictly necessary cookie to keep a guest signed in to the invitation they were sent, so they do not have to identify themselves again on every page. It does nothing else and it is not used to track anybody.

How it is kept safe

Invitations are private by default. Each one lives on its own unguessable link, search engines are told not to index it, and the guest list behind it is never public. Access to the database is restricted to the studio, over encrypted connections only.

No system is perfect, and we would rather say that than promise otherwise. If information we hold is ever exposed, we will tell the people affected and the National Privacy Commission within the time the law requires.

Your rights, and how to use them

The Data Privacy Act gives you real rights over your own information, and you do not need a reason to use them. You can ask us what we hold about you, ask us to correct it, ask for a copy of it, object to how we are using it, or ask us to delete it.

• ✓To be told what we hold, and where it came from
• ✓To have anything wrong corrected, which we do the same day where we can
• ✓To be given a copy in a form you can take elsewhere
• ✓To object to a use, or to withdraw consent you gave earlier
• ✓To have it erased, unless we are legally required to keep it
• ✓To complain to the National Privacy Commission if we have not put something right

Changes to this statement

If we change how any of this works, we will change this page and move the date at the top of it. We will not quietly broaden what we collect and leave the statement describing an older, smaller version of it.