Privacy Policy

1. Introduction

VOWS ("we", "us" or "our") respects your privacy. This policy explains how we collect, use, store and protect personal information when you use our wedding planning platform at thevows.co.za and related services ("VOWS"), in line with the Protection of Personal Information Act 4 of 2013 ("POPIA").

2. Responsible party

The responsible party for personal information processed through VOWS is ZonkePay (Pty) Ltd, registration number 2025/518450/07, with its physical address at 179 Buitengracht Street, Cape Town, 8001, South Africa.

3. Information Officer

Our Information Officer can be contacted at privacy@thevows.co.za for any questions, requests or complaints about how we process personal information.

4. Information we collect

We collect information you provide directly, including your name, email address, wedding date, venue and guest details. We also collect information automatically, such as device type, browser, IP address and usage data, to help us operate and improve the platform.

5. Lawful basis for processing

We process personal information only where POPIA allows it, including: to perform our contract with you (providing your account, wedding website, RSVPs and planning tools); with your consent; to comply with legal obligations (such as tax and accounting records); and for our legitimate interests in operating, securing and improving VOWS, provided these do not override your rights.

6. How we use your information

We use your information to provide and improve VOWS, manage your account, process RSVPs, process payments, send service-related updates, respond to support requests and protect the security of our platform.

7. Guest data

When couples add guest names, emails or RSVP details to VOWS, the couple is the responsible party for that guest information and VOWS acts as an operator, processing it only on the couple's instructions to provide the service. Couples must ensure they have a lawful basis to share their guests' information with us. Guests with questions about their data should contact the couple, or email privacy@thevows.co.za and we will assist.

8. Third-party processors

We do not sell your personal information. We share data only with trusted service providers who process it on our behalf under appropriate safeguards:

• Lovable Cloud (built on Supabase) for hosting, database storage and authentication.
• Paystack, our payment processor, which processes your payment details. VOWS never sees or stores your full card details.
• Google AI models, which generate seating suggestions and invitation text from the details you submit to those tools.

We may also disclose information when required by law or to protect our rights.

9. Cross-border transfers

Some of our service providers store or process data outside South Africa, including in the European Union and the United States. Where personal information is transferred outside South Africa, we do so only as permitted by section 72 of POPIA, for example where the recipient is subject to laws, binding agreements or policies that provide an adequate level of protection, or where the transfer is necessary to perform our contract with you.

10. Data retention

We keep personal information only for as long as needed to provide our services or as required by law. Account and wedding data is kept while your account is active and deleted within a reasonable period after you ask us to close your account. Payment and transaction records are kept for as long as tax and accounting laws require (generally five years). Usage logs are kept for a limited period for security purposes.

11. Security

We use industry-standard security measures, including encryption and access controls, to protect your data. No online service can be completely secure, so we encourage you to use a strong password and keep it confidential. If we become aware of a security compromise affecting your personal information, we will notify you and the Information Regulator as POPIA requires.

12. Cookies and analytics

VOWS uses cookies and similar technologies to keep you signed in, remember your preferences and understand how the platform is used. You can manage cookie preferences through your browser settings.

13. Your rights under POPIA

As a data subject, you have the right to:

• ask whether we hold personal information about you and request access to it;
• request correction or deletion of inaccurate, irrelevant, excessive or unlawfully obtained information;
• object to the processing of your personal information, including for direct marketing;
• withdraw consent where processing is based on consent;
• lodge a complaint with the Information Regulator of South Africa at inforegulator.org.za.

To exercise these rights, email privacy@thevows.co.za. We will respond within a reasonable timeframe.

14. Children's privacy

VOWS is not intended for children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us.

15. Changes to this policy

We may update this privacy policy from time to time. We will notify you of material changes by posting the updated policy on our website and updating the effective date.

16. Contact us

If you have questions about this privacy policy or how we handle your data, please email our Information Officer at privacy@thevows.co.za.