Privacy Policy

1. Who processes your data

The operator of Invitations with Love is the data controller. Questions and requests are accepted at pokanisobich@abv.bg and on +359 884 58 6464.

2. Information we collect

• the customer’s name, telephone number or email address;
• event type, selected design and package, date and description of the idea;
• wording, photographs and other materials supplied for the work;
• for guest RSVP forms: name, attendance response, number of guests and an optional message;
• order number and status. Card details are processed by Stripe and are not stored by us.

3. Why we process it

We process data to answer enquiries, enter into and fulfil orders, provide the invitation and maintain guest replies. Where required by law, certain payment and accounting records are kept for the applicable statutory period. We do not use submitted contact details for unsolicited marketing.

4. Who may receive it

Data is shared only when necessary with providers supporting the service: Stripe for payments, Resend for service emails, and providers of hosting, databases and protected file storage. Information may also be disclosed when required by law or a competent authority.

5. How long we keep it

Enquiry data and working materials are retained only while needed to fulfil and support the invitation, normally for up to 24 months after the last contact. Guest replies are deleted or anonymised after the agreed period ends. Records required for accounting or legal purposes are kept for the applicable statutory period.

6. Your rights

You may request access, correction, erasure, restriction or portability of your data and object to certain processing where the law provides that right. Contact us by email. You may also lodge a complaint with the Bulgarian Commission for Personal Data Protection.

7. Guest data

RSVP responses are visible only in the host customer’s protected management page. The host should send an invitation only to people they have a legitimate reason to invite and must not use their replies for unrelated purposes.

8. Security and changes

Customer materials are available through a long private link that must not be published. Management of all orders and file downloads is limited to the administrator. We use access controls and appropriate technical measures, but no internet service can guarantee absolute security. If this policy changes materially, we will update its date and content.

9. Aggregate activity counts

We use daily counters to understand how public pages, the wording helper and invitation editor are used. They store the action type, page category, occasion category, package and language. They contain no names, emails, invitation wording, photos, visitor identifiers or full page addresses. These counters use no cookies or browser storage and do not link a person’s actions across visits. They are disabled when the browser sends Do Not Track or Global Privacy Control.

Request protection separately uses a temporary hash derived from the connection address to limit repeated requests. It is not linked to the activity counters. Wording and trial photos remain in the browser until you choose to create an order through the purchase form.