OOUR INVITE

PRIVACY, PLAINLY EXPLAINED

Privacy policy

This policy explains what information Our Invite handles when couples create and share a digital wedding invitation, and when guests reply.

Last updated: 24 July 2026 · Version 1.0

1. Who we are

Our Invite is a digital invitation builder and RSVP service. “Our Invite”, “we”, “us” and “our” mean Our Invite, trading as Our Invite.

For account, billing and service-administration information, we normally act as the data controller. When a couple uploads or enters information about their guests, the couple decides why that information is used and is normally the controller for that guest-list information; Our Invite processes it to provide the service on their instructions.

2. Information we collect

  • Account information: names, email address, encrypted password credentials, verification status and account dates.
  • Invitation content: couple names, event details, venue, schedules, story, dress code, photos, videos, music, design choices and other content you add.
  • Guest-list information: guest names, email addresses, phone numbers, invitation type, private access links, party size and any notes entered by the couple.
  • RSVP information: attendance for the ceremony, meal and evening reception, named attendees, dietary or accessibility notes, song requests, messages and response dates.
  • Order information: order number, billing email, amount, currency, payment status and payment-provider references. Card details are handled by Stripe when paid checkout is enabled; Our Invite does not store full card numbers.
  • Technical and security information: IP address, browser and device information, server logs, session identifiers, security events and rate-limit records.
  • Communications: messages and support requests you send to us.
Dietary and accessibility details can be sensitive. Guests should only provide what the couple reasonably needs to host the event. Couples must limit access to this information and delete it when it is no longer needed.

3. How and why we use information

PurposeTypical lawful basis
Create accounts, save invitations, publish links, process RSVPs and provide support.Performance of our contract with the account holder; legitimate interests in operating the requested service.
Process payments, issue receipts and keep accounting records.Contract and legal obligation.
Send account verification, password reset, invitation and RSVP-notification emails.Contract and legitimate interests in delivering and securing the service.
Prevent fraud, abuse and unauthorised access; diagnose faults and protect the service.Legitimate interests and, where applicable, legal obligation.
Handle dietary or accessibility details supplied through an RSVP.The guest’s voluntary, explicit provision of the information for event arrangements, and the couple’s instructions. Couples remain responsible for choosing an appropriate lawful basis.
Comply with law, enforce our terms and resolve disputes.Legal obligation and legitimate interests.

We do not sell personal information. We do not use guest lists for Our Invite marketing. We do not make decisions with legal or similarly significant effects solely by automated means.

4. Couples’ responsibilities for guest data

If you create an invitation, you must have a lawful and fair reason to give us guest information. Tell guests that Our Invite will host their invitation and responses, share this policy where appropriate, collect only what you need, keep private links secure and honour valid guest requests about their data.

Do not upload contact books wholesale. Select only people relevant to the event and review imported details before saving or sending anything.

5. Who receives information

Information may be shared only as reasonably needed with:

  • the account holder and people they authorise to access their invitation or dashboard;
  • SiteGround and related infrastructure providers that host the website, database, files, backups and email delivery;
  • Stripe and its banking partners when payment is enabled;
  • technical suppliers such as email and font-delivery providers used by the site;
  • professional advisers, insurers, regulators, courts or law-enforcement bodies where necessary or required by law; and
  • a buyer or successor if the business is reorganised, sold or transferred, subject to appropriate safeguards.

Public invitation links can be viewed by anyone who receives or discovers the link. Private guest links include a unique access token and should not be forwarded.

6. International transfers

Some suppliers may process information outside the UK. Where UK data-protection law requires it, we will use an adequacy regulation, the UK International Data Transfer Agreement or Addendum, or another permitted safeguard, and apply suitable security measures.

7. Security

We use measures designed for a small online service, including password hashing, HTTPS when correctly deployed, restricted database access, secure session cookies, CSRF protection, unique guest tokens and request-rate controls. No internet service is completely secure, so users should also use strong unique passwords, protect guest links and retain their own copies of important information.

8. How long we keep information

We keep different information for different periods based on its purpose, legal requirements and the status of the account or invitation. Our current schedule and deletion process are explained in the Data retention & deletion notice.

9. Your rights

Depending on the circumstances, UK data-protection law may give you rights to be informed, access your information, correct it, erase it, restrict its use, object to its use, receive portable data and withdraw consent. These rights can have legal exceptions.

We normally respond within one month after receiving a valid request and any information reasonably needed to verify identity. Guests can contact the couple directly about an RSVP, or contact us if that is not practical.

You may complain to the UK Information Commissioner’s Office at ico.org.uk. We would appreciate the opportunity to address the concern first.

10. Children

Our Invite accounts and purchases are for people aged 18 or over. An adult may include a child’s name and meal requirements within a household RSVP where reasonably necessary for the wedding. Do not provide unnecessary information about children.

11. Changes to this policy

We may update this policy when the service, suppliers or law changes. The latest version will appear here with a revised date. We will give prominent notice where a change materially affects how existing information is used.