Start your order

Privacy

This page explains what we collect when you order, why we need it, who helps us handle it, and your rights under UK data protection law (UK GDPR).

1. Who is responsible for your data

Shahzad Haider, trading as Kindly Join Us, 25 Hood Close, Croydon, CR0 3SN, United Kingdom, is responsible for your personal data (the “controller”). Contact: hello@kindlyjoinus.com.

2. What we collect

  • The order form: your name, email, WhatsApp number, package, the events you choose, the date of your first event, the add-ons you choose, the currency you chose, and the invitation that sent you to us, if any, and that you asked us to start straight away.
  • The Custom form: your name, email, WhatsApp number, the date of your first event if you give it, your idea, the currency you chose, and the invitation that sent you to us, if any.
  • Your guests’ details: if you choose an add-on that needs your guests’ names, your guests’ names, and any family or group, number of seats, email addresses and phone numbers you send us.
  • Your details page: names, events, venues, photos, the words you choose and your story. Before a photo leaves your device, the page makes it smaller and removes hidden details such as where it was taken. Anyone with your private link can see and change it, so please keep it to yourself.
  • Payment: Stripe handles card payments. We never see your card number. Stripe tells us when you have paid.
  • Messages: anything you send us on WhatsApp, Instagram or by email.
  • Our notes: short notes we keep about your order, such as what we agreed with you on WhatsApp.

3. Why we use it

  • To make and deliver your invitation. The legal basis is our contract with you.
  • To answer your questions. The legal basis is our legitimate interest in replying to you.
  • To keep business records. The legal basis is our legal obligation.
  • To show you prices in pounds or US dollars. When you open our home page, Cloudflare, our host, works out which country your visit comes from (from your internet address), and we use that only to choose which prices to show first. We don’t keep it or link it to you. You can switch between pounds and dollars at any time. The legal basis is our legitimate interest in showing prices in a currency you know.
  • With your consent, to count visits and see which posts and ads bring couples to us. The legal basis is your consent. You can withdraw it at any time with “Cookie settings” at the bottom of every page.
  • To do the add-ons you choose that need your guests’ details. You decide who to invite and give us their details, and we use them only to make and send your invitation for you. In data-protection terms, you are the controller and we are your processor.

4. Who helps us handle it

  • Cloudflare, which hosts this site and the invitations, and runs our order system: it stores your order, your details page, your photos and your guests’ replies.
  • Stripe, which takes payments.
  • Google, which keeps our list of orders in a Google Sheet: your name, email, WhatsApp number, the date of your first event, what you ordered and paid, and how far your order has got.
  • Telegram, which tells us when an order comes in, is paid or needs us. These alerts include at most your first name, order number, what you ordered and paid, and the date of your first event. They never include your email or phone number.
  • WhatsApp (Meta), when you message us there.
  • Resend, which emails you your private link and sends us order alerts.
  • Kie.ai, which makes your AI painting from the photo you send us (AI painting orders only).
  • Anthropic, whose AI assistant (Claude) helps us look up and manage orders: it sees the order we are looking at, such as your name, email and WhatsApp number.
  • Google (Google Analytics), if you allow visit counting.
  • Meta (the Meta Pixel), if you allow ads cookies. Meta also uses this data under its own privacy policy.
  • Some of these services store data outside the UK, mostly in the United States. US companies signed up to the UK–US data bridge are covered by it. For the others, we use the UK’s standard contract terms where the service offers them. Telegram and Kie.ai may keep data in other countries without those terms. So we send them only what they need: Telegram gets at most your first name and order details, and Kie.ai gets only the photo for your painting.

5. Your guests

Your invitation keeps what your guests type into the reply form: their name, their answer, how many are coming to each event, any note, any other answers on the form, and when they sent it. It also keeps a random code from their browser, in scrambled form. A reply never includes their phone number. Their IP address is used only briefly to stop spam and is never stored with the reply. Each reply also opens WhatsApp, so it reaches you straight away. Invitations use no cookies and no analytics. The reply card keeps the guest’s last reply, any unsent draft and that code on their own device, so they can change their reply later. The opening keeps one small note for that browser session, so it does not replay. Our host keeps standard request logs, such as IP address and time, for up to 7 days.

If you choose an add-on that needs your guests’ names, you send us your guests’ names and, for some add-ons, their contact details. We use them for that job only.

If you are a guest and you reply, we keep your reply for the couple and delete it 30 days after the invitation closes. If you are a guest: we hold your name, and any email or phone number the couple gives us, only to make and send their invitation. Questions: hello@kindlyjoinus.com.

6. Cookies on this site

The first time you visit, we ask before using any cookie that the site doesn’t need. Nothing below is stored or sent until you say yes, and you can change your mind at any time with “Cookie settings” at the bottom of every page.

Always on: one small note in your browser, called kju_consent, that remembers your choice for 6 months. It holds no personal details.

If you allow “Count visits” (Google Analytics): Google sets cookies called _ga and _ga_VG54XTX91C. They tell us how many people visit, which parts they read and where they came from, such as Instagram or a search. They last up to 13 months. We have turned off Google’s advertising features and data sharing.

If you allow “Ads” (Meta Pixel): Meta sets a cookie called _fbp, and _fbc if you came from one of our ads. They last 90 days. They tell Meta when you visit, start an order or pay, so we can see which ads work and show our ads to people who have visited. We never send Meta your name, email or phone number.

Your private details page never uses these. Invitations your guests open use no cookies and no analytics.

7. How long we keep it

  • Your details page answers and photos, our notes about your order, and any copies you sent us on WhatsApp or by email: deleted 7 days after your last event. If you never send your details, we delete them a year after you paid. If your order is cancelled or refunded after you paid, we delete them 7 days later. Your invitation shows its own copies until it closes, 10 days after your last event, and we delete its replies and your guests’ details 30 days after it closes. Before we do, we email you the list of replies. If we can’t confirm that email reached you, we keep the list up to 7 more days, then delete it.
  • Your invitation’s link name (like emma-james): we keep a scrambled copy for as long as we run Kindly Join Us, so no one else can ever use it.
  • Orders that were never paid: deleted after 30 days.
  • Records of paid orders (what you bought, when, what you paid, your name and email): 6 years from the end of the tax year, because tax law asks us to keep them.
  • The copies in our email and Telegram alerts: deleted within 3 months after the invitation closes.
  • Visit records in Google Analytics: 14 months. Meta keeps Pixel data under its own policy.

8. Your rights

You can ask to see the data we hold about you, to correct it, to delete it, to limit how we use it, to object to how we use it, and to get a copy to take elsewhere. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ICO) at ico.org.uk.

9. Contact

For anything about your data, write to hello@kindlyjoinus.com.