Privacy Policy - Svetki.com

This privacy policy explains how the Svetki.com platform collects, uses, stores, and protects your personal data in accordance with the General Data Protection Regulation (EU) 2016/679 (GDPR) and the laws of the Republic of Latvia.

Last updated: 3 June 2026

1. Data Controller

The controller of your personal data is the Svetki.com platform. For data protection inquiries, please use the email address below.

Email: [email protected]

For any questions regarding the processing of personal data, you can contact us at [email protected].

2. What Data We Collect

Depending on how you use the platform, we may process the following categories of personal data:

2.1. Account and profile data

First and last name
Email address
Password (stored in encrypted form)
Profile picture and additional profile information (if provided)
Authentication data if you sign in with a Google account

2.2. Service provider data

Business or service name and description
Contact information (phone, email, address, location)
Service descriptions, prices, photos, and other content
Subscription and payment history

2.3. Communication and transaction data

Inquiries and correspondence between customers and service providers
Reviews and ratings
Messages you send through contact forms
Event planning data (events, budget, selected services)

2.4. Event guest and invitation data

If you use the event planning tools, you as the event organizer may enter your guests' data. You are responsible for having the right to share this data with us.

Guest names and email addresses entered by the event organizer
RSVP responses (status, party size, message to the organizer)
Invitation open statistics (time and number of opens)
Gift registry claims (name, email, message) provided by guests on the invitation page

2.5. Payment data

Payments are processed by our payment service provider Stripe. We do not store your full payment card details on our servers. We only retain payment identifiers, subscription status, and invoice history.

2.6. Technical and usage data

IP address and approximate location
Browser type, device, and operating system information
Pages visited, search queries, and interactions with the platform (first-party analytics)
Cookies and similar technologies (see our Cookie Policy)

3. Purposes and Legal Basis for Processing

Purpose	Legal basis (GDPR)
Account creation and provision of platform services	Performance of a contract (Art. 6(1)(b))
Connecting customers and service providers, handling inquiries	Performance of a contract
Processing payments and subscriptions	Performance of a contract and legal obligation
Accounting and tax compliance	Legal obligation (Art. 6(1)(c))
Platform improvement, security, and fraud prevention	Legitimate interests (Art. 6(1)(f))
Usage statistics (cookieless, anonymized first-party analytics)	Legitimate interests (Art. 6(1)(f))
Marketing communications	Your consent (Art. 6(1)(a))

4. Recipients and Disclosure of Data

We may share your data with the following categories of recipients, only to the extent necessary for the purposes described above:

Service providers on the platform — when you send an inquiry, your contact information and message content are made available to the relevant service provider.
Event organizers and invitation visitors — if you are an event guest, your RSVP response and gift claims are visible to the event organizer; gift claimers' names may be visible to other visitors of the invitation page unless the organizer has disabled this.
Payment service providers — Stripe (for payment processing).
Technology service providers — cloud hosting, email delivery, and error and performance monitoring providers.
Authentication services — Google (if you choose to sign in with a Google account).
Public authorities — where required by law or court order.

We do not sell your personal data to third parties.

5. Transfers Outside the EU/EEA

Some of our service providers (e.g. Stripe, Google) may process data outside the European Economic Area. In such cases, transfers are safeguarded by appropriate measures, such as Standard Contractual Clauses approved by the European Commission.

6. Data Retention

Account data — for as long as your account is active, and up to 12 months after deletion.
Transaction and accounting data — up to 5 years (or longer where required by law).
Communication data — for as long as necessary to provide the service and resolve disputes.
Cookies — according to the periods specified in the Cookie Policy.

7. Your Rights

Under the GDPR, you have the following rights:

Right of access — to obtain confirmation and a copy of the data we process about you.
Right to rectification — to correct inaccurate or incomplete data.
Right to erasure ("right to be forgotten") — to request deletion of your data.
Right to restriction of processing.
Right to data portability — to receive your data in a structured, machine-readable format.
Right to object to processing based on legitimate interests.
Right to withdraw consent at any time (without affecting the lawfulness of prior processing).

To exercise these rights, write to [email protected]. We will respond within one month.

8. Right to Lodge a Complaint

If you believe that the processing of your data infringes the GDPR, you have the right to lodge a complaint with the supervisory authority — the Data State Inspectorate of the Republic of Latvia (www.dvi.gov.lv).

9. Data Security

We use industry-standard technical and organizational measures, including data encryption, secure access controls, and regular system monitoring, to protect your personal data against unauthorized access, disclosure, or loss.

10. Children's Privacy

The platform is not intended for persons under the age of 16. We do not knowingly collect data about children. If we learn that we have collected such data without parental consent, we will delete it.

11. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of significant changes on the platform or by email. The current version is always available on this page.

12. Contact Information

For questions about privacy and personal data processing: [email protected]