Privacy Policy

Effective date: [date]

1. Our promise

Weddings involve family and friends, and couples trust us with their details. We collect only what's needed to run your wedding site, we don't sell anyone's personal information, and we follow the Philippines' Data Privacy Act of 2012.

Who's responsible for what: the Host decides who's on their guest list and what to ask guests. We store and process that information on the Host's behalf, to run their wedding site.

2. What we collect

About dietary notes: allergies and medical dietary needs can count as sensitive personal information. Guests share these voluntarily, and they're used only so the couple can plan the food.

3. Who can see what

• Guests only see their own invite and reply, and the replies of people in their party when answering for them. Guests never see other guests' names when searching, and someone replied for by another guest sees only their own details until they choose to edit.
• Hosts see their own guest list and replies. Nobody else's.
• Visitors who aren't on the guest list can't RSVP. If the Host turns on privacy, they also can't see full venue details, and a site password can hide the whole site.

4. How we handle your data ourselves

We've designed Four Favours Events so that we don't look at guest details in normal operations:

• Guest details are hidden by default, even in our own admin tools.
• We only access a wedding's guest details for a specific reason: when the Host asks us for help, to fix a security or technical problem, or when the law requires it.
• Every time we access guest details, it's logged.

5. Services we use

We use trusted service providers to run Four Favours Events. They only process data to provide their service to us:

• [Supabase]: secure database and logins
• [Vercel]: website hosting
• [Resend]: emails to Hosts
• [Google Maps]: venue maps

Some of these providers may store data outside the Philippines. We choose providers with strong security and privacy commitments.

6. Featuring wedding sites

We only feature a wedding site on our social media or website if the Host opts in. We never share guest information, and Hosts can withdraw permission anytime.

7. What we never do

• Sell personal information.
• Use guest details for advertising.
• Contact guests for marketing. Emails about RSVPs go to Hosts, not guests.

8. How long we keep data

• Guest details and RSVP replies are automatically deleted [6 months] after the wedding date. We'll remind the Host before this happens so they can download their guest list first.
• Hosts can delete their wedding site and all its guest data anytime.
• Account details are kept until the Host deletes their account, except where the law requires us to keep records longer (for example, payment records).

9. Keeping data safe

We use secure connections, protected logins and access controls so each Host can only reach their own wedding's data. No system is perfectly secure, but if a data breach affects your information, we'll notify you and the National Privacy Commission as the law requires.

10. Your rights

Under the Data Privacy Act, you can ask to:

• See the personal information we hold about you.
• Correct anything that's wrong.
• Delete your information, or object to how it's used.

Guests can contact the couple who invited them, or us at hello@fourfavours.com. Hosts can manage most of this in their account. You can also file a complaint with the National Privacy Commission.

11. Children

Four Favours Events is for adults. Hosts may add children to their guest list (such as a flower girl), and a parent, guardian or another adult in their party replies for them. We only use children's details for the wedding RSVP.

12. Changes and contact

• We may update this Privacy Policy. If changes are important, we'll let Hosts know before they take effect.
• Data Protection Officer, Four Favours: hello@fourfavours.com.