Legal

Privacy Policy

Last updated: May 2026

1. Who We Are

OwambePal ("we", "us", "our") operates the celebration platform at owambepal.com. For data protection purposes, OwambePal is the data controller for information collected on the Platform.

2. Information We Collect

We collect the following categories of personal data:

Account data: name, email address, password (hashed).
Event data: event name, date, location, guest information you provide.
Payment data: payer name, email, phone, transaction amounts. Card details are handled directly by Stripe and are not stored on our servers.
Usage data: pages visited, device type, browser, IP address.

3. How We Use Your Information

To provide and operate the Platform.
To process payments and send receipts.
To notify you of event updates, your RSVP status, and order confirmations.
To detect and prevent fraud.
To comply with legal obligations.

4. Legal Basis for Processing (UK/EU)

We process personal data on the basis of: (a) performance of a contract (processing your payment, managing your event); (b) legitimate interests (fraud prevention, platform security); and (c) your consent where applicable.

5. Third-Party Services

We share data with the following third parties to operate the Platform:

Stripe — payment processing and connected payouts.
Supabase — database and authentication hosting.
MailerSend — transactional email delivery.
Vercel — platform hosting and edge delivery.

6. Data Retention

We retain personal data for as long as your account is active or as needed to provide the service. Payment records are retained for seven years for tax and legal compliance. You may request deletion of your account data at any time.

7. Your Rights

You have the right to: access your data; correct inaccurate data; request deletion; object to processing; and data portability. To exercise these rights, contact us.

8. Cookies

We use essential cookies for authentication and session management. We do not use advertising or tracking cookies.

9. Changes to This Policy

We may update this policy from time to time. We will notify registered users of material changes by email.

10. Contact

Data protection queries: Contact us.