Privacy Policy
Who we are
[Registered business name] (registration number [Registration number]), trading as Just Invites (“we” or “us”), runs justinvites.co.za. We design, send and manage digital invitations and RSVPs. Our address is [Physical address], South Africa.
This policy explains how we handle personal information under the Protection of Personal Information Act 4 of 2013 (POPIA). It covers three groups: people who contact us, our clients (the hosts of an event) and the guests who receive an invitation link.
Our role depends on whose information it is. For enquiries and client details, we decide why and how the information is used, so we are the responsible party. For guest information, the host decides who to invite and what to ask, so the host is the responsible party and we are their operator. We process guest information only on the host’s instructions, to run their invitation.
Our Information Officer is [Name of Information Officer], reachable at hello@justinvites.co.za.
What we collect
When you contact us or book
- Your name, and your cell number or email address.
- Event type, date, approximate number of guests and your message.
- Booking and billing details.
About guests
Supplied by the host, or entered by the guest when they reply:
- Name, and email address and/or cell number.
- Number of seats and the guest’s RSVP answer.
- Meal choices, dietary requirements and accommodation requests, where the host has asked for them.
- Any message the guest sends to the host, and the time they replied.
Dietary requirements can reveal health or religious information. We only collect them where the host needs them for catering, we use them only for that purpose, and they are deleted with the rest of the guest information.
Technical information
- IP address, browser and device type, and the pages visited and when. We keep server logs for security and troubleshooting.
- If you accept analytics cookies on our website, Google Analytics data about how the site is used. See our Cookie Policy.
We do not sell personal information, and we do not use guest information for advertising.
Why we use it
- To answer enquiries and give quotes. You give us this information when you contact us, and we use it to respond.
- To deliver the service. We design the invitation, create each guest’s link, send invitations and reminders by email and SMS on the host’s behalf, record replies, email the host each time a guest confirms or declines, and give the host a live guest list and guest reports on request.
- To bill and keep records. We keep financial records because the law requires it.
- To keep the service secure. We prevent abuse, fix faults and protect guests’ links.
- To understand how our website is used. Only if you accept analytics cookies.
We only message guests about the event they were invited to. We do not send guests marketing.
How guest links work
Each guest gets a long, random link on their event’s own address, for example thandi-sipho.justinvites.co.za. Opening the link shows that guest’s invitation and lets them reply. There is no login, no app and no password.
This means anyone who holds a guest’s link can view and update that invitation, so guests should not share it. If a link is shared by mistake, tell us and we will replace it. The old link stops working straight away. An event’s address on its own shows no event details.
Transfers outside South Africa
Some providers, such as Google Analytics and certain email delivery services, may process information outside South Africa. Where that happens, we make sure the information stays protected by law, binding agreements or similar safeguards that give an adequate level of protection, as POPIA requires.
How long we keep it
- Guest information: deleted or anonymised 30 days after the event, unless the host asks us to delete it sooner or the law requires us to keep it longer.
- Enquiries that do not become bookings: 12 months.
- Financial records: as long as the law requires, generally five years.
- Server logs: a short period, for security and troubleshooting.
Security
We use HTTPS, limit access to guest information to the people who need it to run the service, and give each guest a long random link that cannot be guessed. If there is a security breach that affects personal information, we will notify the Information Regulator and the people affected, as POPIA requires.
Your rights
Under POPIA you can:
- ask what personal information we hold about you and get a copy;
- ask us to correct information that is wrong or out of date;
- ask us to delete information we no longer need;
- object to us using your information, or withdraw consent you gave (this does not affect what we did before you withdrew it); and
- complain to the Information Regulator at inforegulator.org.za.
To use these rights, email hello@justinvites.co.za. We may need to confirm who you are first. If you are a guest, your request may concern information the host controls, so we may pass it to the host or help them respond.
Children
Our website is not aimed at people under 18. A host may include children on a guest list (for example, for a family invitation). Hosts must have the consent of a parent or guardian before giving us a child’s information.
Changes
We may update this policy. The effective date at the top shows when it last changed. If we make a significant change, we will tell our clients directly.
Contact us
Just Invites
[Physical address], South Africa
Email: hello@justinvites.co.za
Phone: [Phone number]
Information Officer: [Name of Information Officer]