Privacy Policy

Effective date: 20 March 2026

This Privacy Policy explains how KANTECH LIMITED (company number 13425835), registered office at Anglo Dal House, 5 Spring Villa Park, Edgware, Middlesex, United Kingdom, HA8 7EB ("we", "us", "our"), collects, uses, and protects your personal data when you use thersvpplace.com (the "Site").

We are committed to protecting your privacy and processing your data in compliance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

1. Who We Are

KANTECH LIMITED is the data controller for personal data collected directly through the Site (such as Organiser account data and contact form submissions). We are registered with the Information Commissioner's Office (ICO) under registration reference ZB841379.

Where an event Organiser uploads personal data about their guests (names, phone numbers, email addresses, etc.) to the Site, KANTECH LIMITED acts as a data processor on behalf of that Organiser, who is the data controller for their guests' personal data. Our Terms of Service, together with this Privacy Policy, constitute the data processing agreement between us and each Organiser for the purposes of Article 28 of the UK GDPR. If you are a guest and have questions about how your data is used by the event organiser, please contact them directly.

WhatsApp and SMS messaging. Where an Organiser uses the WhatsApp or SMS add-on to send messages to their guests, the Organiser (as data controller) is responsible for ensuring they have obtained the necessary prior consent from each recipient under the UK Privacy and Electronic Communications Regulations (PECR). KANTECH LIMITED acts solely as processor, sending messages on the Organiser's instruction. We do not verify or store guest consent records on behalf of Organisers.

2. Data We Collect

2a. Organisers (registered users)

Account data: your name and email address, and a hashed password.
Event data: event name, event date, couple's names, gift delivery address, wedding photo, and any event configuration you set up.
Payment data: payment is processed by Stripe. We do not store your full card number. We may retain a record of the transaction amount, date, and Stripe payment reference.
Communications: any emails or messages you send to us.
Co-organiser invitation data: if you invite another person to co-manage your Event, we collect that person's name and contact details (email address or phone number) solely to send the invitation and, if accepted, to grant them access to your Event dashboard.

2b. Guests (invitation recipients)

Guest data is entered by the event Organiser or provided by the guest directly when RSVPing. This may include:

Name, phone number(s), and email address(es).
RSVP response (attending / not attending), number of attendees, and dietary requirements.
Table and seating assignment.
Photos uploaded to the event gallery.
Guestbook messages submitted through the event page.

2c. Technical and usage data

Your IP address and browser type (collected automatically when you visit the Site).
Session and authentication tokens stored in cookies (see our Cookie Policy).
Error and diagnostic data collected by Sentry, our error-monitoring service (no personally identifiable information is intentionally transmitted).

3. Legal Basis for Processing

We process personal data on the following legal grounds:

Performance of a contract: to create and manage your account, process your payment, and provide the Service to Organisers.
Legitimate interests: to maintain security and prevent fraud, monitor and fix technical errors, and improve the Site.
Compliance with a legal obligation: where we are required to retain records by law (e.g. financial records).
Consent: where you have expressly opted in to receive communications from us.

For guest data processed on behalf of Organisers, our legal basis is the performance of our contract with the Organiser (data processing agreement). The Organiser is responsible for having a lawful basis under UK GDPR to share guest data with us, and for satisfying the separate consent requirements under PECR where WhatsApp or SMS messaging is used.

We also rely on recognised legitimate interests (as provided for under the Data (Use and Access) Act 2025, effective February 2026) for certain internal security processing activities, including fraud prevention and the protection of our platform against abuse.

4. How We Use Your Data

To create and manage your Organiser account.
To process payments for Event creation and Add-ons via Stripe.
To send email invitations, reminders, and event updates to guests on behalf of Organisers (via SendGrid).
To send WhatsApp messages to guests on behalf of Organisers (via Meta's WhatsApp Business Platform), if the WhatsApp Add-on has been purchased.
To send SMS text messages to guests on behalf of Organisers (via Alfonica), if the SMS Add-on has been purchased.
To display guest RSVPs, dietary requirements, and seating information to Organisers and any Co-organisers they have appointed.
To send invitations to Co-organisers on behalf of event Organisers, and to grant accepted Co-organisers access to the relevant Event dashboard.
To host and display photos uploaded by guests to the event gallery (stored on Amazon Web Services S3).
To respond to enquiries submitted through our contact form.
To monitor the Site for errors and security issues.
To comply with our legal obligations.

5. Third-Party Service Providers

We share data with the following trusted third parties only to the extent necessary to operate the Site:

Provider	Purpose	Location
Stripe	Payment processing	USA / UK
Amazon Web Services (S3)	Photo and file storage	EU / UK
SendGrid (Twilio)	Email delivery	USA
Meta (WhatsApp Business Platform)	WhatsApp messaging (Add-on only)	USA
Alfonica	SMS text message delivery (Add-on only)	EU
Sentry	Application error monitoring	USA
Google	reCAPTCHA (contact form bot protection)	USA

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

We may also disclose personal data to law enforcement or regulatory authorities where required by law, or to protect the rights, property, or safety of KANTECH LIMITED, our users, or the public.

6. International Data Transfers

Some of our third-party providers are based outside the UK or EEA. Where personal data is transferred to countries that do not have an equivalent level of data protection, we ensure appropriate safeguards are in place, such as the UK International Data Transfer Agreement (IDTA) or Standard Contractual Clauses approved by the ICO.

7. Data Retention

Organiser account data is retained for as long as your account is active. If you close your account, we will delete your personal data within a reasonable period, except where we are required to retain it for legal or financial compliance purposes (e.g. payment records, which we may retain for up to 7 years).
Guest data (entered by Organisers) is retained until the Organiser deletes it or their Event is deleted. Photo storage associated with an Event expires 3 months after the Event date, after which photos are permanently deleted.
Contact form submissions are retained for up to 12 months.

8. Your Rights

Under UK GDPR, you have the following rights in relation to your personal data:

Right of access: to request a copy of the personal data we hold about you.
Right to rectification: to request correction of inaccurate or incomplete data.
Right to erasure: to request deletion of your personal data ("right to be forgotten"), subject to certain exceptions.
Right to restrict processing: to request that we limit how we use your data in certain circumstances.
Right to data portability: to receive your data in a structured, machine-readable format.
Right to object: to object to processing based on our legitimate interests.
Right to withdraw consent: where processing is based on consent, to withdraw it at any time without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us at rafael@thersvpplace.com or via WhatsApp at +44 7385 297011. We will respond within one month.

If you are a guest and wish to exercise your rights over data held in connection with a specific event, please contact the event Organiser in the first instance, as they are the data controller for that data.

9. Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted connections (HTTPS), hashed passwords, and access controls. However, no method of transmission over the internet or electronic storage is completely secure, and we cannot guarantee absolute security.

Platform administration. Authorised KANTECH staff may access account and Event data where necessary to provide technical support, investigate issues, ensure platform security, or maintain the service. Such access is governed by internal data protection policies and is limited to what is necessary for the operational purpose.

10. Children

The Site's account registration and payment features are intended for users aged 18 and over. We do not knowingly collect personal data directly from children under 13. If you believe we have inadvertently collected data from a child without appropriate consent, please contact us and we will promptly delete it.

11. Cookies

We use a small number of cookies essential to the operation of the Site. For full details, please see our Cookie Policy.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify registered Organisers of material changes by email. The "Effective date" at the top reflects the most recent revision. Continued use of the Site after changes are posted constitutes your acceptance of the updated policy.

13. Complaints

If you have a concern about how we handle your personal data, please contact us first and we will do our best to resolve it. You also have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

14. Contact

Email: rafael@thersvpplace.com
WhatsApp: +44 7385 297011
Post: KANTECH LIMITED, Anglo Dal House, 5 Spring Villa Park, Edgware, Middlesex, HA8 7EB, UK