Privacy Policy
Effective Date: June 18, 2026 • Last Updated: June 18, 2026
1. Introduction & Scope
Welcome to Ivy Invitations (referred to as "Ivy Invitations," "we," "our," or "us"). We respect your privacy and are committed to protecting the personal data of our users (couples purchasing invitations) and their wedding guests who interact with our digital invitation services (the "Services").
This Privacy Policy describes how we collect, use, store, and share information when you visit our website, purchase or customize a digital invitation package, or use the interactive invitation and RSVP features.
2. Information We Collect
We collect information to deliver elegant and interactive digital invitations. The data we collect falls into three categories:
A. Information Provided by Couples
- Account & Booking Details: Names, email addresses, WhatsApp or mobile numbers, billing details, and event descriptions.
- Invitation Content: Photos of the couple, wedding dates, times, venue locations (including maps), itinerary timelines, design preferences, registry links, and custom stories.
B. Information Provided by Wedding Guests
- RSVP Responses: Guest names, contact details, attendance status (accepting/declining), number of accompanying guests (plus-ones), and dietary restrictions.
- Guest Book Wishes: Messages, congratulations, and wishes that guests write for the couple.
C. Technical & Usage Information
We automatically collect certain standard technical information when you access our platform:
- IP addresses, device type, operating system, browser type, and timestamps of access.
- Usage patterns, scroll behavior, and interactions with invitation elements (such as RSVP submissions).
3. How We Use Your Information
We process personal data for the following business purposes:
- Creating and Hosting Invitations: Designing, publishing, and rendering the custom digital invitations.
- Managing RSVPs: Providing an interactive mechanism for guests to respond, and dynamically displaying or sending RSVP summaries directly to the couple via email or WhatsApp.
- Customer Support: Assisting couples with design tweaks, custom requirements, and technical troubleshooting.
- Platform Optimization: Analyzing site usage to refine page load speeds, fix bugs, and enhance design aesthetics.
- Security and Fraud Prevention: Preventing automated bots from submitting spam RSVPs, ensuring server security, and maintaining stable database performance.
4. Public Nature of Digital Invitations
⚠️ IMPORTANT NOTICE FOR COUPLES & GUESTS
By default, digital invitations hosted on Ivy Invitations are accessible via a unique URL (e.g., invites.ivyinvitations.lk/your-names/token). Anyone who has access to this URL can view the invitation details, guest wishes, and RSVP mechanisms. If couples request password protection or hidden RSVP features, we will implement them; otherwise, guest RSVPs and wishes are public to individuals visiting the URL.
5. Sharing & Third-Party Services
We value your trust and do not sell, rent, or lease your personal information to third parties. We only share information with trusted subprocessors who help us operate our Services:
- Hosting & Infrastructure: Database and cloud hosting services where the pages and guest data are securely stored.
- Bank Transfers: Payments are processed through direct bank transfers. We collect only the information necessary to verify payments, such as the payer's name, transfer reference, and payment confirmation details. We do not collect or store credit or debit card information.
- Communication Gateways: Services used to route emails, SMS alerts, or WhatsApp notifications of guest responses to the couple.
6. Security & Data Retention
Data Security
We employ technical, organizational, and physical security measures to safeguard data against unauthorized access, loss, misuse, or alteration. All traffic is encrypted using Secure Socket Layer (SSL) protocols.
Data Retention
We store invitation and guest details for as long as needed to fulfill the service. Standard wedding invitations remain active and hosted for six (6) months following the wedding date. Following this period:
- The digital invitation URL is taken offline.
- Data is archived. Couples may download their final guest RSVP lists as a CSV/Excel format.
- We completely delete the data from our active database servers after 12 months, or sooner if explicitly requested by the couple.
7. Sri Lanka PDPA Compliance & Your Rights
As a service operating in Sri Lanka, we align our operations with the Personal Data Protection Act (PDPA) No. 9 of 2022. In accordance with the law, you hold the following rights:
- Right to Access: You can request a copy of the personal data we hold about you or your wedding.
- Right to Correction: You can request correction of any inaccurate or incomplete details.
- Right to Erasure ("Right to be Forgotten"): You can request that we remove your wedding site and delete guest records permanently.
- Right to Object/Withdraw Consent: Guests who have submitted RSVPs can request their names be deleted from the RSVP sheet.
To exercise any of these rights, please email us at ivyinvitations.lk@gmail.com with your request details.
9. Changes to this Policy
We may update this Privacy Policy from time to time to reflect operational, legal, or regulatory modifications. When changes are made, we will update the "Last Updated" date at the top of this page. We encourage you to review this policy periodically.
10. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your data, please contact our Data Protection Officer:
