Privacy Policy

Timeless Vows — Digital Wedding Invitations Platform

Effective Date: April 7, 2026

Last Updated: April 7, 2026

Timeless Vows ("we", "us", "our") operates the website www.timelessvows.co.tz and associated digital services. This Privacy Policy explains how we collect, use, store, and protect personal data in accordance with the Tanzania Personal Data Protection Act, 2022 and applicable East African data protection standards.

1. Data We Collect

1.1 Information Provided by Couples (Invitation Creators)

Full names of the couple
Wedding date, time, and venue details
Contact information (email address, phone number)
Photos and images uploaded for the invitation
Guest list details (names, phone numbers, email addresses)
Account credentials (email and encrypted password)
Payment information (processed securely by our third-party payment provider)

1.2 Information Collected from Guests

Name and contact details submitted via RSVP forms
RSVP response (attending / not attending / number of guests)
Dietary preferences or special requests (if provided)
Messages or wishes submitted through the invitation

1.3 Automatically Collected Information

Device type, browser type, and operating system
IP address and approximate location
Pages visited and interaction data on our platform
Cookies essential for platform functionality (session management)

2. How We Use Your Data

We process personal data strictly for the following purposes:

Creating, customizing, and distributing digital wedding invitations
Managing RSVP responses and guest communications
Processing payments for premium invitation features
Sending service-related notifications (e.g., RSVP updates, account alerts)
Improving our platform and user experience
Complying with legal obligations under Tanzanian law

We do not sell, rent, or trade your personal data to any third party for marketing purposes.

3. Legal Basis for Processing

Under the Tanzania Personal Data Protection Act, 2022, we process data based on:

Consent — You provide explicit consent when creating an account, setting up an invitation, or submitting an RSVP.
Contractual necessity — Processing is necessary to deliver the digital invitation service you requested.
Legitimate interest — We may process data to improve our services, prevent fraud, and ensure platform security.
Legal obligation — We may process data to comply with applicable laws and regulations.

4. Data Sharing

We share personal data only with the following categories of recipients:

The couple (invitation creators) — Guest RSVP responses and messages are shared directly with the couple who created the invitation.
Hosting provider (Vercel Inc.) — Our platform is hosted on Vercel’s infrastructure. Data may be processed in Vercel’s data centers.
Payment processor — Payment data is handled by our third-party payment provider. We do not store full credit/debit card details.
Legal authorities — We may disclose data if required by Tanzanian law or a valid court order.

We do not share data with advertisers, data brokers, or any unrelated third parties.

5. Data Retention

We retain personal data only for as long as necessary:

Active invitations — Data is retained while the invitation is active on our platform.
Post-wedding archival — 90 days after the wedding date, invitation data is archived and made inaccessible to the public.
Full deletion — 12 months after the wedding date, all personal data associated with the invitation is permanently deleted from our systems.
Account data — If you delete your account, all associated data is removed within 30 days.
Early deletion — You may request immediate deletion of your data at any time by contacting us.

6. Your Rights

Under the Tanzania Personal Data Protection Act, 2022, you have the right to:

Access — Request a copy of the personal data we hold about you.
Correction — Request correction of inaccurate or incomplete data.
Deletion — Request deletion of your personal data.
Withdraw consent — Withdraw your consent to data processing at any time.
Object — Object to data processing based on legitimate interest.
Data portability — Request your data in a structured, machine-readable format.

To exercise any of these rights, contact us at privacy@timelessvows.co.tz.

7. Data Security

We implement appropriate technical and organizational measures to protect your data:

All data is transmitted over encrypted connections (HTTPS/TLS).
Passwords are hashed using industry-standard algorithms and never stored in plain text.
Access to personal data is restricted to authorized personnel only.
We conduct regular security reviews of our infrastructure.

While we take all reasonable precautions, no method of electronic transmission or storage is 100% secure. We encourage users to use strong passwords and protect their account credentials.

8. Children’s Privacy

Our services are not directed at individuals under the age of 18. We do not knowingly collect personal data from children. If we become aware that we have collected data from a minor without appropriate parental consent, we will take steps to delete it promptly.

9. Cookies

We use only essential cookies required for the platform to function (e.g., session authentication). We do not use tracking cookies or third-party advertising cookies. If we introduce analytics cookies in the future, we will update this policy and implement a cookie consent mechanism.

10. Changes to This Policy

We may update this Privacy Policy from time to time. When we make material changes, we will notify users via email or a prominent notice on our platform. The "Last Updated" date at the top of this policy reflects the most recent revision. Continued use of our services after changes constitutes acceptance of the updated policy.

11. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact us:

Email: privacy@timelessvows.co.tz
Website: www.timelessvows.co.tz
Address: Dar es Salaam, Tanzania