Privacy Policy

We collect only what we need to provide the service, in two groups:

1.1 From people who make a card (customers)

We may collect:

• Account details: the name, email and profile picture from the LINE or Google account you sign in with. We keep an email only when that provider gives us one.
• What goes in the invitation: the couple's names, parents' names, the invitation wording, the ceremonies, dates and times, venues, the colours or theme of the day, card photos, photo albums, and the QR code for the digital gift envelope.
• Order and payment details: the package chosen, the amount paid, the image of your transfer slip, the phone number you give with it, and what checking the slip found, such as the payment reference, amount and transfer date.
• What you send our admins: the messages or details you give them when you ask for help making or changing your card.

1.2 From guests who visit a card

Guests can visit and use a card without signing up. We may keep:

• Your nickname and your reply to the invitation, such as attending or not and how many are coming, for each ceremony or part of the day
• Your wish, a profile picture if you attach one, and proof of your digital gift if you attach it
• Your nickname and score in activities or games during the wedding
• A random device ID kept in a cookie, so you can come back to change your reply or wish and your nickname is remembered. It is not used to identify you directly.

1.3 Cookies

We use only the cookies needed for signing in and for the device ID above. We use no advertising cookies and no tracking tools for advertising.

1.4 Visit statistics

To learn how much interest the site and each template draw, we count visits to our own pages and openings of published cards. We record only the page, the time, the previous page on our site, the site or app that sent you, and the kind of device (phone, tablet or computer). This counting uses no cookie and does not keep your IP address. To count visitors each day, it keeps only a short code made from your IP address and type of browser, which changes every day and cannot be turned back into the address. It is used to see how the business is doing, never to identify you or follow you from one day to the next, and is not shared with anyone. While you have a page of our site open, your browser also tells us from time to time that it is still open, so we can see how many people are on the site at that moment, using the same short code. This is not saved anywhere, and is gone within a few minutes of your closing the page.

We use the personal data we collect to:

• Make the invitation and show it to guests as its maker has set it up
• Show wishes and related content on the screen at the wedding, as the card's maker chooses
• Let the card's maker and the people they allow to edit it see replies, wishes and proof of digital gifts
• Check and confirm payments, and switch on packages, upgrades and options
• Help make, change or improve a card when a customer asks us to
• Keep the service safe, prevent misuse and keep the system stable
• Keep and delete data on the schedule set out in this policy

Legal bases for processing

We collect and use personal data on these legal bases:

• Performing a contract, to provide the service a customer asks for
• Consent, where it is needed, such as for wishes and some other data guests send
• Legitimate interests, to keep the service safe, prevent misuse and keep the system secure

We do not sell or trade our users' personal data to anyone.

Access is limited to what the service needs. These people and organisations may see data:

Anyone with the card's link

They can see the card's content and the wishes its maker has chosen to show. The card's maker can hide any wish.

Anyone with an album's link

A card's maker can share the link to a photo album, or to the page of all the card's albums. Anyone with such a link can see the album's photos, and download them if the card's maker allows it, without signing in. The card's maker decides for each album whether it is shown on the card or open only to people with its link, and whether its photos can be downloaded.

An album open only to people with its link is not shown on the card or on the page of all albums, but it is not protected by a password: anyone who is passed the link can open it too. We do not let search engines index album pages.

Photos already downloaded stay with the people who downloaded them. Deleting an album, turning off downloads or changing who can see it afterwards does not affect copies already downloaded.

The card's maker and co-editors

They can see replies, wishes and digital gift details as the system allows them. Guests can never see anyone else's proof of a digital gift.

The admins of ตลอดกาล (TLORD KARN)

Admins may see the data they need to confirm payments, help make or change cards, and support customers. Every change an admin makes to a card is recorded so it can be checked.

Outside service providers

We may use outside providers to run the service, such as:

• LINE, for signing in and for sending notifications
• Google, for signing in
• Cloudflare, for storing and serving photos
• EasySlip, for checking payment slips with the banks; the slip image is sent to it for checking
• Resend, for sending notification emails
• The infrastructure and server providers the service needs

Some providers may process or store data outside Thailand. We take appropriate measures to protect personal data as the law requires.

We keep personal data only as long as the service needs it, or as long as the law requires:

• An unpaid draft card is deleted automatically once it is more than 1 day old
• A paid card stays available with no end date, unless the customer deletes it or the law requires otherwise
• A card's link is reserved while the card exists, and for a set time after it is deleted, so nobody else can take the same link straight away
• Orders, payments and the record of admins' changes may be kept after a card is deleted, for accounting, audit and legal reasons
• Guests' nicknames and answers in the wedding's Games are deleted automatically 30 days after the round ends; the card keeps only how many took part and the top 5 of that round
• A customer's account is kept until they ask us to delete it, or until there is no longer a reason to keep it

Downloading your data

Before a card is deleted, its customer can download all of its photos as a ZIP file from the card's editor.

Under the Personal Data Protection Act B.E. 2562, you may have the right to:

• See your personal data and get a copy of it
• Have it corrected and brought up to date
• Have it deleted or destroyed
• Have its use suspended
• Object to its processing, where the law allows
• Have it moved to someone else, where the law allows
• Withdraw a consent you gave, without affecting processing done before you withdrew it
• Complain to the Office of the Personal Data Protection Committee (PDPC) if you believe your data has not been handled lawfully

Guests' rights over what they send

Guests can change or delete their own wish within 24 hours of sending it. After that, contact the card's maker or ตลอดกาล (TLORD KARN) to change or delete it.

Customers' right to change their card

Customers can change their card's content and details themselves for as long as the card is live.

We take the security of personal data seriously and have appropriate measures against unauthorised access, use, disclosure, alteration or destruction. They include:

• Sending data only over encrypted connections
• Checking the right to see or change data on every request
• Storing proof of digital gifts separately, open only to those allowed to see it
• Recording every change admins make, so it can be checked afterwards

No transfer over the internet can be guaranteed completely safe, so we keep our security measures appropriate and up to date with the risks.

We may update or amend this Privacy Policy from time to time, to keep it in line with changes to the service, technology or the law.

When it changes, the date of the latest update is shown at the top of this page, so you can check which version is current.