Legal

Privacy Policy

Last updated: 21 October 2026

Everwoven ("we", "us") is operated by Clark Developments, Pretoria, South Africa. We make digital wedding save the dates and invitations. This policy explains what personal information we process, why, and your rights under the Protection of Personal Information Act, 2013 (POPIA). We are the responsible party for information about our customers. For guest information that couples add, the couple decides what is collected and we process it on their behalf.

1. Information we collect

Account details: your name, email address and a securely stored password (or your Google sign-in).
Your designs: names, wedding date, time and venue, wording, photos you upload, your story, schedule and gift links.
Guest list: names, email addresses and party sizes you add.
RSVPs: what guests submit: name, email, attendance, number of guests, dietary requirements, song requests and notes. Dietary requirements may reveal health or religious information. Guests provide these voluntarily and only the couple sees them.
Enquiries: what you send through our contact form.
Payments: handled by our payment provider. We receive confirmation of payment, not your card details.
Usage information: anonymous counts of invite views (device type and referring site, no names), and, if you accept cookies, Google Analytics data about how the website is used.

2. How we use it

To provide the service: hosting your design, sending your invitation emails, collecting RSVPs and notifying you of replies (performance of our contract with you).
To respond to enquiries and support requests (your request and our legitimate interest).
To secure the service, prevent abuse and keep records required by law (legal obligation and legitimate interest).
To improve our designs using aggregated, anonymous statistics (legitimate interest, or your consent for analytics cookies).

We do not sell personal information and we do not send marketing without your consent. You can opt out of any marketing at any time.

3. Guest information

When a couple adds guests or receives RSVPs, we process that information on the couple's instructions, only to deliver their invitation and replies. Couples must have a lawful reason to add guests' details (for example, the guests are their invited friends and family) and should only collect what they need. Guests can ask the couple, or us, to correct or delete their information. Published invites are hidden from search engines and can only be found by people who have the link.

We use trusted operators who process information for us under written terms:

Google Firebase / Google Cloud for hosting, sign-in, database, file storage and server functions.
Brevo for sending invitation and notification emails.
Web3Forms for delivering contact form messages to our inbox.
Our payment provider (for example Payfast or Yoco) for processing payments.
Google Analytics, only if you accept analytics cookies.

We may disclose information if required by law or to protect our rights, our users or the public.

5. Cross-border transfers

Some of our operators store or process information outside South Africa (for example in the European Union or the United States). We only use providers bound by data protection laws or agreements that give a level of protection substantially similar to POPIA, as section 72 requires.

6. How long we keep it

Invites, photos, guest lists and RSVPs: while your invite is active. Invites switch off the day after the wedding (or at the end of your package), and everything is permanently deleted 30 days later unless you have paid to keep it online. You can delete a design yourself at any time.
Account: until you ask us to close it.
Enquiries: up to 24 months.
Payment records: 5 years, as tax law requires.

7. Security

We use encryption in transit (HTTPS), access controls so that only the couple can see their guest list and replies, and access limited to authorised administrators. No system is perfectly secure. If a breach affects your personal information, we will notify you and the Information Regulator as POPIA requires.

8. Cookies and analytics

Our website uses only essential storage (to keep you signed in and remember your choices) unless you accept analytics cookies. If you accept, Google Analytics sets cookies that help us understand which pages and designs are popular. IP addresses are anonymised and we do not use advertising cookies. You can change your choice at any time with "Cookie settings" in the footer. Invite pages your guests open do not use analytics cookies.

9. Your rights

Under POPIA you may ask to access the personal information we hold about you, ask us to correct or delete it, object to processing, and withdraw consent where processing relies on consent. Email us and we will respond within a reasonable time (usually within 30 days). We may need to verify your identity first.

10. Children

Everwoven is intended for adults. We do not knowingly collect information from children except where a couple lists a child as a guest, which the couple is responsible for.

11. Changes

We may update this policy. We will post the new version here and, for significant changes, email account holders.

12. Contact and complaints

Information Officer: Jared Clark
Email: support.everwoven@gmail.com
Address: Pretoria, Gauteng, South Africa

If you are unhappy with how we have handled your information, you may complain to the Information Regulator (South Africa): inforegulator.org.za, POPIAComplaints@inforegulator.org.za.