Privacy policy

1. Who we are

lovestruck is run by Lovestruck Weddings (Pty) Ltd (registration number 2026/772149/07), a South African company. For couples who sign up, we are the responsible party for your account information.

For the guest information couples add (guest lists, RSVPs and so on), the couple decides what to collect and why. In POPIA terms the couple is the responsible party for their guest list and lovestruck processes it on their behalf, as an operator. We still protect it as carefully as our own.

Our Information Officer is Kyle Botha. You can reach them at [email protected].

2. What we collect

From couples and the people they invite to help plan

• Your name and email address, and your partner's and collaborators' if you invite them.
• Your wedding details: date, venue, your story, schedule, photos and anything else you add to your site or planning tools.
• Plan and payment records: which plan you bought, the amount and the date. We never see or store card numbers; PayFast handles the payment itself.
• Basic technical information: sign-in records, your IP address and error logs, used to keep the service secure and working.

From couples who join our waitlist

• Your email address and, if you choose to give them, your names, wedding month and a rough guest count.
• Which page or link brought you to the waitlist, if it was an advert or another couple's site.

About guests (added by the couple, or by guests themselves)

• Name, email address, mobile number and postal address, if the couple adds them.
• RSVP answers: attendance, plus-ones, meal choices, dietary requirements, song requests and any notes.
• Photos, voice notes and messages guests choose to upload or send.
• A record of invitations and reminders sent, and whether a guest has opted out of messages.

Dietary or accessibility notes can reveal health or religious information, which POPIA treats as special personal information. We only store what a guest or couple chooses to enter, and use it only to show it to that couple for their wedding.

3. Why we use it

• To provide the service: building and hosting your site, collecting RSVPs, sending the invitations and reminders you ask us to send, and running the planning tools.
• To run the waitlist: inviting you to sign up and telling you when lovestruck opens. We use your wedding month to invite couples with the soonest weddings first. We don't send waitlist emails about anything else.
• To run your account: sign-in links, plan and payment records, receipts and support.
• To keep things secure: preventing abuse, fixing errors and protecting accounts.
• To meet legal obligations: for example keeping financial records.

We process information because it's needed to provide the service you signed up for, because the law requires it, or because of our legitimate interest in running a secure service. Where we rely on consent (for example, for optional messages to guests), you can withdraw it at any time.

We do not sell, rent or trade personal information. We don't use it for advertising, and we don't send guests marketing from lovestruck.

4. Messages to guests

Couples can send invitations, reminders and updates by email and, on paid plans, WhatsApp. Every broadcast email includes a one-click unsubscribe, and opt-outs are checked at the moment of sending. Essential messages a guest asked for, such as a sign-in link or an RSVP confirmation, are always delivered.

5. Who we share it with

We use a small number of trusted service providers (operators) to run lovestruck. Each only receives what it needs to do its job and is bound to keep it confidential and secure.

We may also disclose information if the law requires it, or to protect someone's safety or our legal rights.

6. Information stored outside South Africa

Some of the providers above store or process information outside South Africa, mainly in the United Kingdom, the European Union and the United States. We only use providers subject to data protection laws or binding agreements that give protection substantially similar to POPIA, as section 72 of POPIA requires.

7. How long we keep it

• Your site and guest information: for as long as your account exists. You can delete individual guests at any time, or your whole workspace from Settings, which permanently removes your site, guest list, content and uploaded media.
• Waitlist details: until you sign up or ask us to remove them. Email us at any time and we'll delete them.
• Payment records: kept for as long as tax and company law requires (currently up to seven years), even after an account is deleted.
• Logs and backups: security logs and database backups are kept for a limited period and then expire automatically, so deleted information disappears from them over time.

8. How we protect it

Information is encrypted in transit and at rest. Every couple's data is kept separate from every other couple's at the database level. Sign-in uses one-time email links rather than passwords. Access to production systems is limited to the people who need it. No system is perfectly secure, but if a breach ever affected your information, we would tell you and the Information Regulator as POPIA requires.

9. Cookies and browser storage

We use one essential cookie to keep you signed in to your portal. We also save a few preferences (like a collapsed panel) in your browser's local storage. On our public website, local storage also keeps, for 30 days, where you first came from (the referring site's name, any campaign tag in the link, and the first page you saw). It stays in your browser unless you join our waitlist, when it's saved with your entry so we know which channels work. We don't use advertising or tracking cookies, and we don't run third-party analytics.

10. Your rights

Under POPIA you can:

• ask whether we hold information about you, and for a copy of it;
• ask us to correct or delete it;
• object to how we process it, or withdraw consent you gave;
• opt out of messages at any time, using the unsubscribe link or by contacting us.

Couples can download everything at any time from Settings (a full ZIP export). If you're a guest, the quickest route is usually to ask the couple; you're also welcome to contact us directly at [email protected] and we'll help, or pass your request on to the couple.

If you're unhappy with how we've handled your information, please talk to us first. You also have the right to complain to the Information Regulator (South Africa): inforegulator.org.za, [email protected].

11. Children

lovestruck accounts are for adults. Couples may add children to a guest list (for example, as part of a family). The couple is responsible for having a parent or guardian's permission for that.

12. Changes to this policy

If we change this policy in a way that matters, we'll update the date at the top and let account holders know by email before it takes effect.

Questions? Email [email protected] or see our Terms of service.