Privacy policy

Cordially Invited is a product of Ulendo Creative Media, based in Zambia. We make digital invitations for our clients and host the replies their guests send.

For the information our clients give us, we decide how it is used. For the information guests give when they reply to an invitation, the client who sent the invitation decides what is asked and what is done with the answers, and we hold and process them on the client’s behalf.

From clients

• Your name, email address and phone number, and the password you choose (stored only in scrambled form).
• The details of your event you give us on the form: names, dates, venues, programme, contact numbers, photographs, logos and music, and the country and town of your event.
• How you heard about us, if you tell us.
• Your order: the package, add-ons and what you have paid for.

From helpers

• The name and email address the client gives us when adding you, and the password you set.

From guests

• What the invitation asks: usually your title, name, WhatsApp number, whether you can come and, for some events, which side of the family you are from. A host may ask other questions.
• Your reply’s status (pending, approved or declined), your reference number, and whether you have been checked in on the day.
• Notes the host keeps about you on their guest list, such as a table number.

From everyone who visits

• When an access code is entered, the internet address it came from, which we keep for one day to stop codes from being guessed.

• To make, host and change your invitation, and to show your guests’ replies to you and your helpers.
• To send guests their WhatsApp confirmation and reference number, reminders if the host has ordered them, and the invitation itself if the host has asked us to send it.
• To email clients about new replies, and to send sign-in and password-reset emails.
• To answer questions and give support.
• To keep our records of orders and payments, and to understand in total how our service is used.
• To keep the service secure.

We do not sell personal information, and we do not use it for advertising.

A guest’s reply is seen by the client who sent the invitation and the helpers they add. Beyond that, we share information only with the services that run the platform for us, and only what each one needs:

• Supabase: our database and file storage, hosted in the European Union.
• Vercel: the hosting that serves our website and invitations.
• Meta (WhatsApp): to deliver confirmations, reminders and invitations to guests’ WhatsApp numbers.
• Our email provider: to deliver the emails described above.

We may also disclose information where the law requires it.

The services above store and process information outside Zambia, mainly in the European Union. We use providers that protect information to a recognised standard, and we limit what each one receives.

• Invitations stay online until 30 days after the event. The photographs and files on them are then deleted.
• Guest lists are deleted 6 months after the event, with the messages we sent about them. A client can ask us to delete theirs sooner.
• An event a client asks us to remove is deleted completely, guest list and all, within 30 days.
• Client accounts and order records are kept while you are a client and for as long as we need them for our accounts and the law. You can ask us to close your account.
• Internet addresses from access-code attempts are kept for one day.

We use only what the service needs to work. When you sign in, a cookie keeps you signed in. If you choose a language with the language picker, a cookie remembers it, so the site opens in that language when you come back. While you fill in the event form, your answers are saved in your own browser so that you can stop and come back; your password is never saved there.

We do not use advertising or tracking cookies, and we do not run analytics services that follow you around the web.

Under Zambia’s Data Protection Act of 2021, you may ask to see the information we hold about you, to have it corrected, or to have it deleted, and you may object to how it is used. Email info@ulendodigital.com and we will reply within a reasonable time.

If you are a guest, the host who invited you decides what happens to your reply, so it is usually quickest to ask them. You can also ask us, and we will pass your request on or deal with it ourselves.

If you are unhappy with how we have handled your information, you may complain to the Office of the Data Protection Commissioner in Zambia.

Information is sent over encrypted connections. A guest list can be seen only by its client, the helpers they add, and our staff. Passwords are never stored in readable form. No system is perfectly secure, and if something goes wrong that affects your information, we will tell you.

Our service is for adults organising events. Invitations to children’s parties are replied to by a parent or guardian, and hosts should not ask guests for more information about children than the event needs.

We will update this policy when what we do changes. The new version is posted on this page with its date.

Ulendo Creative Media, trading as Cordially Invited. Email info@ulendodigital.com with any question about your information.