Privacy Policy

Effective Date: May 31, 2026

01. Introduction

Welcome to Celebrate Vows. We are committed to protecting your personal data and respecting your privacy. This Privacy Policy describes how we collect, use, process, and share your personal information in connection with your use of our website (celebratevows.com) and our premium digital wedding invitation services.

This Privacy Policy is designed to comply with the Philippine Data Privacy Act of 2012 (Republic Act No. 10173), its Implementing Rules and Regulations (IRR), and all other relevant circulars and advisories issued by the National Privacy Commission (NPC) of the Philippines.

02. Who We Are

Celebrate Vows is a premium digital wedding invitation platform operated in Mabalacat City, Pampanga, Philippines. For the purpose of the Data Privacy Act, Celebrate Vows acts as the Personal Information Controller (PIC) for the data collected directly from visitors and customers on our main website.

03. Personal Information We Collect

We collect personal information that you voluntarily provide to us when you submit an inquiry, book a consultation, or interact with our website. This includes:

Inquiry Details: Name, email address, telephone/mobile number.
Event Specifications: Target wedding date, wedding venue/location, estimated guest count.
Custom Content: Any custom message or instructions you provide in our contact form.
Security & Tech Data: Anonymized/hashed IP addresses (for rate-limiting) and browser session details.

Note on Client and Guest Data: When our contracted clients utilize our premium platform to manage their guest RSVPs, Celebrate Vows acts as a Personal Information Processor (PIP) on behalf of the client (the PIC). Guest data is processed strictly according to the client's instructions and is never sold, shared, or repurposed.

04. How We Use Your Information

We process your personal information based on your explicit consent, legitimate business interests, and the fulfillment of contract terms:

To respond to your inquiries, provide design quotes, and arrange wedding website demos.
To build, manage, and host your bespoke digital invitation platform once contracted.
To prevent automated spam, abuse, and brute-force attacks via rate-limiting mechanisms and security integrations.
To analyze website traffic, optimize page performance, and improve the user experience of our platform.

05. Lawful Basis for Processing

We process your personal information under the following legal frameworks established by RA 10173:

Consent: When you voluntarily submit forms on our website and tick the consent notice.
Contractual Necessity: To fulfill our obligations under your digital invitation package agreement.
Legitimate Interest: To maintain website security, prevent fraud, and audit system performance.

06. Web Analytics, Tracking, and Third-Party Services

We partner with select third-party services to ensure security, understand site performance, and manage tags. These services include:

Google Analytics: We use Google Analytics to collect standard internet log information and details of visitor behavior patterns. This data is processed in a way that does not identify anyone.
Google Tag Manager: Used to manage and deploy code snippets and tracking scripts efficiently across the website.
Google reCAPTCHA Enterprise: We implement reCAPTCHA Enterprise on our forms to combat spam and abuse. It works by analyzing hardware and software patterns (such as device and application data) to determine if a submission is made by a human or a bot. Use of this service is subject to the Google Privacy Policy and Terms of Service.

07. Data Retention Period

We retain your inquiry data (submitted via our contact form) for a maximum period of one (1) year from the date of submission, or as long as necessary to fulfill the purposes outlined in this policy or to resolve disputes. For contracted clients, we retain invitation site data and active dashboards until three (3) months after your wedding date to allow guest photo downloads, after which all project-related databases are securely archived or permanently deleted.

08. Technical & Organizational Security Measures

We implement a comprehensive suite of security controls to safeguard your personal data from unauthorized access, alteration, disclosure, or destruction:

Secure Communications: Complete HTTPS encryption for all data in transit.
Anti-Spam & Validation: Google reCAPTCHA Enterprise verification, client-side/server-side input sanitization, and hidden honeypot fields.
Database Security: SQL queries protected using prepared statements to prevent injection attacks.
Access Controls: Server-side PHP session verification and CSRF token protection for all state-changing operations.
Rate Limiting: IP-based access limits (using MD5-hashed IP storage to protect identity) to prevent brute-force abuse.
Security Headers: Deployment of secure HTTP headers including X-Frame-Options, X-Content-Type-Options, and Referrer-Policy.

09. Disclosure & Sharing of Information

Celebrate Vows does not sell, rent, or lease your personal information to third parties. We only share information with third-party service providers (such as hosting and database infrastructure services) who are bound by strict data processing agreements and confidentiality clauses to help us operate our platform. We may also disclose your information if required to do so by Philippine law or in response to valid requests by public authorities (e.g., the National Privacy Commission).

10. Your Rights as a Data Subject

Under the Philippine Data Privacy Act of 2012, you are entitled to the following rights, which we respect and uphold:

1. Right to be Informed You have the right to know whether your personal data is being processed, its source, and details of processing.

2. Right to Access You can request reasonable access to your personal data processed by our platform.

3. Right to Object You can object to the processing of your data, including processing for direct marketing.

4. Right to Erasure/Blocking You may request the suspension, withdrawal, blocking, or removal of your personal data.

5. Right to Rectification You have the right to dispute and request the correction of any inaccuracy in your data.

6. Right to Portability You can obtain a copy of your data in an electronic or structured format for your custom use.

7. Right to Damages You may claim compensation for any damages sustained due to inaccurate, incomplete, or unauthorized use of data.

8. Right to File a Complaint You have the right to lodge a complaint with the National Privacy Commission (NPC) if your rights are violated.

11. Contact Information (Data Protection Officer)

If you have any questions, feedback, or concerns regarding your privacy rights, or if you wish to exercise any of your data subject rights, please feel free to reach out to our Data Protection representative:

Celebrate Vows Data Privacy Desk

Mabalacat City, Pampanga, Philippines

hello@celebratevows.com

12. Changes to this Policy

We may update our Privacy Policy from time to time to reflect changes in our tech stack, service offerings, or legal requirements in the Philippines. Any updates will be posted directly on this page with an updated "Effective Date" at the top. We encourage you to review this page periodically to stay informed about how we protect your information.