Privacy policy

Velqora Kft. Deák Ferenc u. 15
1215 Budapest
Hungary

E-mail: [email protected]

Further details can be found in our imprint.

• Couples (website owners): e-mail address; the names, dates, places, texts, photos, music and videos you add to your wedding website; your guest list (family names and greetings for personal links); payment status.
• Guests: the answers sent via the reply form — name, whether you will attend, number of adults and children (and children's ages if requested), menu and drink preferences, information about allergies or dietary needs (voluntary), song requests, transport and accommodation needs, comments.
• Support: your name, e-mail address, messages and any photos you attach.
• Technical data: IP address, date and time of access, requested page, browser and operating system, as well as the cookies and local storage entries described below.

We process your data to create, store and display your wedding website, to give you access to your dashboard via a private link, to send you service e-mails (for example your dashboard link, reminders about the trial period and the payment confirmation) and to process payments. Legal basis: Art. 6(1)(b) GDPR (contract and pre-contractual measures).

We do not use your e-mail address for advertising and do not send newsletters.

When you reply to an invitation, your answers are stored with us and shown to the couple who invited you in their dashboard; the couple can also download them as an Excel file. We process the answers to provide the reply function the couple uses to plan their celebration. Legal basis: Art. 6(1)(f) GDPR — the legitimate interest of the couple and of us in organising the celebration.

Information about allergies or dietary needs may reveal health data. It is voluntary and processed on the basis of your explicit consent, which you give by entering it (Art. 9(2)(a) GDPR). You can withdraw your consent at any time — ask the couple to remove the information or write to us.

The couple decides whom they invite and is responsible for what they do with the answers outside our service.

Payments are processed by the payment provider lava.top. You enter your payment details directly on the provider's payment page; we do not receive card or account details. We receive the payment status, amount, currency and the e-mail address used for the payment. Legal basis: Art. 6(1)(b) and (c) GDPR. The provider's own privacy policy applies to its processing.

Service e-mails are sent via Resend, Inc., USA. The provider processes the recipient address and the content of the e-mail on our behalf; the transfer to the USA is based on the EU standard contractual clauses (Art. 46(2)(c) GDPR). Legal basis: Art. 6(1)(b) GDPR.

If you use the function to send your invitation to a guest by e-mail, we use the guest's e-mail address only to deliver this message and do not store it for any other purpose.

Our website is hosted by CLODO Cloud Service Co. L.L.C., Dubai; the servers are located in the Netherlands (EU). Requests are routed through Cloudflare, Inc. (101 Townsend St, San Francisco, CA 94107, USA), which protects the website against attacks and delivers it efficiently. Cloudflare processes IP addresses and technical request data; it is certified under the EU–US Data Privacy Framework, and standard contractual clauses apply in addition. Legal basis: Art. 6(1)(f) GDPR (secure and stable operation).

Server log files (IP address, time, requested page, browser) are deleted after 14 days; error records derived from them, including the IP address, after 90 days.

Fonts, images, music and videos are served from our own server — no connection to Google Fonts or similar services is made. Maps are only linked: Google Maps opens in a new tab when you click the link.

Without your consent we only use technically necessary cookies and local storage entries (§ 25(2) TDDDG, Art. 6(1)(f) GDPR):

• wl_consent — stores your cookie choice (1 year).
• wl_locale — remembers the language you chose or last used (1 year).
• weddinglink_ws_… — access to the dashboard of your wedding website (180 days).
• weddinglink_ws_device — prevents several free trial websites from being created on one device (180 days).
• weddinglink_access_… — access to the payment page of your order (90 days).
• Local storage: the list of wedding websites created on this device with their dashboard keys (for ‘My websites’), your website draft while editing, the status of your reply as a guest, dismissed notices.

Only with your consent (see section 9): weddinglink_ws_guest — an anonymous identifier used to count how many different guests opened a wedding website (2 years).

We only load web analytics tools after you click ‘Accept analytics’. At the moment no web analytics service is active on our website.

Before we activate one (we plan to use Google Analytics), we will name it in this policy together with the provider, the data processed and any transfer to countries outside the EU. The legal basis will be your consent (Art. 6(1)(a) GDPR, § 25(1) TDDDG).

You can withdraw your consent at any time with effect for the future via ‘Cookie settings’ at the bottom of every page.

• Wedding websites deleted by the couple, and unpaid websites archived after 30 days of inactivity: permanently deleted after a further 30 days.
• All wedding websites including guest replies and uploaded files: permanently deleted 180 days after the wedding date.
• Unpaid orders: deleted after 30 days. Paid orders: kept for 10 years because of tax and commercial law (Art. 6(1)(c) GDPR).
• Support conversations: deleted 2 years after the last message.
• Server log files: 14 days; error records: 90 days.

We only pass on data to the service providers named in this policy (hosting, content delivery, e-mail delivery, payment) and, for guest replies, to the couple who invited you. We do not sell personal data.

You have the right of access (Art. 15 GDPR), rectification (Art. 16), erasure (Art. 17), restriction of processing (Art. 18), data portability (Art. 20) and the right to object to processing based on legitimate interests (Art. 21). Where processing is based on consent, you can withdraw your consent at any time with effect for the future.

To exercise your rights, write to [email protected]. Couples can also delete their dashboard themselves; guests can ask the couple or us to delete their reply.

You also have the right to lodge a complaint with a data protection supervisory authority, in particular in the EU member state of your habitual residence, place of work or the place of the alleged infringement.

An e-mail address is required to create a wedding website; a reply requires a name. All other information is voluntary. We do not use automated decision-making or profiling within the meaning of Art. 22 GDPR.

We update this policy when our service or the legal situation changes. The current version is always available on this page.