Privacy Notice

• Organizers: your email address, the occasion, chosen plan, theme and delivery settings.
• Recipients: name, email address, WhatsApp number and home city, as entered by the organizer.
• Contributors: the name, email address (confirmed with a one-time code), city, message, voice or video note and photo you choose to submit.
• Reports: what was reported, why, the reporter's email if they give it, and a record of what we did about it.
• Technical data: IP address, browser and device information, and basic usage logs.

We do not require anyone to create an account. Payment details are collected by Paddle, not by us.

• To provide the service (build and deliver the capsule, show the organizer's dashboard): performance of a contract.
• To keep the service safe (checking contributor emails, automatic content checks, posting limits, blocking senders who break our rules, handling reports, fraud prevention and security logs): our legitimate interests.
• To support you when you contact us: our legitimate interests or contract.
• To meet legal obligations such as accounting and responding to lawful requests: legal obligation.

• Service providers who host and run the app, store media, send messages and run automatic content-safety checks for us.
• Paddle.com, our Merchant of Record, which handles the sale, payments, tax compliance and invoicing.
• Professional advisers such as lawyers and accountants.
• Authorities, where the law requires it.

Contributor wishes are shared with the organizer and, in the delivered capsule, with the recipient. A contributor's email address is shown only to the organizer, so they can see who sent each wish and block a sender if needed.

Our providers may process data outside your country, including outside the UK and EEA. Where that happens, we rely on appropriate safeguards such as standard contractual clauses or adequacy decisions.

We keep capsule data for as long as needed to create and deliver the capsule and let the organizer manage it, and then delete or anonymise it when no longer needed, unless the law requires us to keep it longer. A delivered capsule file belongs to the recipient and is not stored by us.

Depending on where you live, you may have the right to access, correct, delete, restrict or object to the use of your personal data, to data portability, and to withdraw consent at any time. You can also complain to your local data protection authority. We aim to respond to requests within one month.

We use appropriate technical and organisational measures to protect personal data, including private storage for uploaded media, time-limited access links and restricted access to our systems.

We only use essential browser storage, for example to remember your language and currency choice. We do not use advertising cookies.

To exercise your rights or ask a question, email notice@zelebration.online.