Privacy policy

This policy explains how Gulabi Card (“Gulabi Card”, “we”, “us”) handles personal data when you order a wedding invitation website from us, and when your guests open it. We follow India's Digital Personal Data Protection Act, 2023 (DPDP Act). In the words of that law, you are the “data principal” and we are the “data fiduciary”.

What we collect

From you, when you order

• The couple's names and the family names you want printed on the invitation.
• Event details: dates, times, venues, addresses and the programme of each function.
• Photos you send us for the invitation or its gallery.
• Your phone number and WhatsApp name, and your email if you share it.
• An optional voice message from the parents, if you choose to add one.
• Payment details needed to confirm your payment (for example a UPI transaction reference).

From your guests

• When a guest replies to your invitation (RSVP): the name they type, how many people are coming, and any message they choose to add.

Automatically

• Basic technical data any website receives, such as the browser type, device type and pages viewed, used to keep the site working and to count visits.

We do not collect card numbers or bank passwords. We never ask for them on WhatsApp.

Why we use it

• To make your preview and your invitation website, and to make the changes you ask for.
• To talk to you about your order on WhatsApp, phone or email.
• To confirm your payment, issue a receipt and keep records the law requires.
• To show your guests' RSVP replies to you.
• To keep the website safe and working well.

We do not sell your data, and we do not use it for anything other than the purposes above.

Your consent

We use your data because you give it to us for your invitation and agree to this policy when you order. You can withdraw consent at any time by writing to us. If you do, we stop using your data and take your invitation down; anything already done before you withdrew stays lawful.

Please ask before you share. When you send us photos, names or a voice message of family members, you confirm that they are happy for it to appear on the invitation.

Guest data belongs to the couple

RSVP replies from your guests are collected for you, and you decide what happens to them. We use guest data only to show it to you. We never use it for marketing, never message your guests ourselves, and never share it with anyone else.

Who we share it with

We share data only with the services we need to run your invitation:

• Hosting providers, which store and serve the invitation website and its photos.
• Payment providers, such as your UPI app or bank today, and an online payment gateway (for example Razorpay) when we add one. They handle your payment under their own privacy policies.
• WhatsApp (Meta), because we talk to you and receive your files there. Their own privacy policy applies to messages.
• Government or courts, only when Indian law requires it.

Some of these services may store data on servers outside India, as the DPDP Act allows.

How long we keep it

We keep your invitation data and guest RSVPs while your invitation website is online, so that we can make changes and show you replies. After the invitation is taken down, we delete the photos, voice message, event details and guest data within a reasonable time, unless you ask us to delete them sooner. We keep payment records for as long as tax and accounting laws require.

Your rights

Under the DPDP Act you can:

• Ask what personal data we hold about you and how we use it.
• Ask us to correct, complete or update it.
• Ask us to delete it, and withdraw your consent.
• Name another person to use these rights for you if you die or cannot act yourself.
• Complain to us (see below), and if you are not satisfied, to the Data Protection Board of India.

Guests who want their RSVP reply removed can ask the couple, or write to us directly. We reply to every request as soon as we can.

Children

Our service is for adults. We do not knowingly collect data from children. If an invitation includes a child's name or photo, the parent or guardian who orders it gives consent for it.

Cookies and analytics

We use a small number of cookies and similar browser storage to make the site work, for example to remember your language choice or what you enter in our free tools, on your own device. We may use privacy-friendly analytics to count visits and see which pages are useful. We do not use advertising cookies on your invitation website.

Keeping it safe

We take reasonable steps to protect your data, such as secure (HTTPS) connections and limited access. No system is perfectly secure; if a breach affects your data, we will tell you and the authorities as the law requires.

Grievance officer and contact

For any privacy question, request or complaint, write to our grievance officer, the Gulabi Card team, at hello@example.com. You can also reach us through our contact page.

Changes to this policy

If we change this policy, we will update this page and the date at the top. For important changes, we will tell customers with live invitations on WhatsApp.