This is a summary of our guest-data processing arrangements, not an executed Article 28 data processing addendum. Where you need a signed DPA, contact [email protected] before uploading guest data. QuantRoads, Inc. is the processor; the couple is the controller where data-protection law applies.
The service stores and organises guest details and RSVPs to support a wedding. Data subjects are invited guests and household members. Data can include names, optional emails, attendance, party size, event selections, meal choices and notes. Processing lasts while the wedding is hosted and through the relevant export and deletion period.
The couple determines why guest information is collected, what to request and who receives exports. We process it to provide storage, display replies to the account owner and support exports and deletion. We do not use guest lists for advertising or our own unrelated purposes.
The couple must provide required privacy information, establish a lawful basis, minimise the data requested and secure downloaded exports. Avoid collecting sensitive information unless essential and legally justified. Access to guest information is restricted to authorised service operations.
Infrastructure providers may help us deliver and store information. A formal DPA should identify the applicable subprocessor arrangements, notice and objection process, confidentiality duties, security measures and any international-transfer mechanism. Ask us for the current provider and location details; this summary is not a claim that all such contractual arrangements have been executed.
Direct guest requests to the couple who collected the information. We assist with service information and available access, export, correction and deletion tools. If a personal-data breach affects guest information, we will notify the controller without undue delay after becoming aware and provide available information needed to meet legal duties.
A formal DPA should cover assistance with rights requests, security, impact assessments, regulatory consultation and reasonable compliance information or audit arrangements. Contact [email protected] to discuss these needs before relying on the service for regulated processing.
Couples can export guest replies from their invitation guest list. After hosting expiry, the 60-day grace period and export-notification condition apply before scheduled deletion of wedding data. Account deletion can remove associated information earlier. Keep exports secure and delete them when no longer needed.
Limited records may be retained where law requires. For detailed retention and rights information see our Privacy Policy. For a binding DPA or a question about processing instructions, contact [email protected].