Privacy policy

Contact form

Names, wedding date, email address, package of interest and the message you send us.

Invitation order

The couple’s names, email address, phone number, wedding date and venue, invitation preferences and any notes you share.

Payment data

Payment is handled by Stripe in its own secure environment. We never receive or store your card number; we only receive payment confirmation and the order details.

Technical data

To protect the site against abuse (for example, to rate-limit requests), we temporarily process the connection’s IP address.

• To respond to your enquiries and contact requests.
• To manage the ordering, design and delivery of your invitation.
• To send you the necessary communications about your order.
• To comply with applicable legal and tax obligations.
• To keep the site secure and prevent fraudulent use.

• Consent, when you send the contact form.
• Performance of a contract, to manage your order and deliver the service.
• Compliance with legal obligations, in tax and accounting matters.
• Legitimate interest, for site security and fraud prevention.

We keep contact data while we handle your enquiry and, afterwards, for as long as needed to address any potential liabilities. Order data is kept for the applicable legal periods (in particular, tax and commercial ones). Technical security data is kept only for as long as strictly necessary.

We do not share your data with third parties except where legally required. To provide the service we rely on providers acting as data processors:

• Stripe — payment processing.
• Resend — email delivery.
• Netlify — website hosting.

International transfers: some of these providers may process data outside the European Economic Area. In those cases, transfers rely on the appropriate safeguards provided for by the GDPR (adequacy decisions or the European Commission’s standard contractual clauses).

The digital invitations we create may include features (such as RSVP) where the couple’s guests provide personal data: for example, their name, the number of companions, dietary restrictions or allergies, or a comment. This data is hosted on our servers as part of the service.

For that data, the contracting couple is the data controller and Invitalier acts solely as a data processor, on the couple’s behalf and following their instructions, in accordance with Article 28 of the GDPR.

Invitalier processes guests’ data solely to provide the contracted service (collecting and showing the responses to the couple), does not use it for its own purposes or share it with third parties, and deletes it when the invitation’s contracted hosting period ends, unless there is a legal obligation to retain it.

You may exercise your rights of access, rectification, erasure, objection, restriction of processing and portability at any time, as well as withdraw any consent given, by emailing valcrudoa@gmail.com.

If you believe your rights have not been properly addressed, you may lodge a complaint with the Spanish Data Protection Agency: www.aepd.es.

We apply reasonable technical and organisational measures to protect your data against unauthorised access, loss or alteration. Fonts are served from our own site, so browsing does not share data with third parties such as Google Fonts.

The site and services are intended for adults. We do not knowingly collect data from minors.

We may update this policy to reflect regulatory or service changes. The version in force will always be the one published on this page, with its last-updated date.