Privacy Policy
1. Who we are
Mornva Studio is run by Cyrus Moise, a sole trader in England. For anything to do with your data, email info@mornva.com or write to us at: [business address].
We are registered with the Information Commissioner's Office (ICO) under number [ICO number].
2. Two roles we play
- For our customers and website visitors, we decide how your data is used (we are the "controller").
- For your guests, we handle their RSVP details on your behalf and only as you instruct (we are your "processor"). You, the couple or host, are responsible for inviting them and for the guest list you give us. See section 7.
3. What we collect and why
| Information | Why | Legal basis |
|---|---|---|
| Enquiry details: names, WhatsApp number, email, event dates, your message | To reply, quote and arrange your invitation | Steps before a contract / legitimate interests |
| Order and client details: contact details, events, venues, wording, photos and music you send us, payment status | To make, deliver and support your invitation | Contract |
| Payment records | Accounting and tax | Legal obligation |
| Waitlist and partner requests: name, contact, message | To tell you about the planner or a partnership, as you asked | Legitimate interests (you can opt out any time) |
| Security data: a scrambled (hashed) version of your IP address, kept up to 24 hours | To stop spam and password guessing | Legitimate interests |
| Optional visit statistics, only if you accept them | To see which pages help people | Consent |
4. Who we share it with
Only the services that help us run Mornva Studio, under contracts that protect your data:
- IONOS: website hosting, our database and email (data centres in the UK/EU).
- Payment provider (for example Stripe), when you pay online. We never see or store your full card details.
- WhatsApp (Meta), when you message us there or we send invitations through it on your behalf.
- Design tools we use to build your invitation, for the content that appears on it.
We never sell your data or share it for advertising.
5. How long we keep it
- Enquiries that don't go ahead: up to 12 months.
- Guest lists and RSVP replies: deleted on the date agreed with you (by default 3 months after your last event).
- Customer and payment records: 6 years, as UK tax rules require.
- Backups: overwritten within 14 days.
6. Your rights
You can ask to see, correct, delete, restrict or move your data, object to how we use it, or withdraw consent. Email info@mornva.com and we'll reply within one month. If you're unhappy with our answer you can complain to the ICO at ico.org.uk or 0303 123 1113.
7. Your guests' data
When you use our guest list and RSVP tools, we store your guests' names, phone numbers, seats, which events they're invited to and their replies (including any dietary needs or song requests they choose to share). We use this only to run your RSVPs, keep it secure, let only you and the people you choose see it, and delete it on the agreed date. Dietary needs can reveal health or religious information, so guests share them only if they want to. Guests can contact us at any time and we'll pass their request to you.
8. Security
Our site uses encryption (HTTPS). Passwords are stored scrambled, access to client data needs a login, and we keep backups. No system is perfect, so if we ever have a data breach that affects you, we'll tell you and the ICO as the law requires.
9. Cookies
See our Cookie Policy. You can change your choice any time: .
10. Changes
If we change this policy we'll update the date at the top. Significant changes will be highlighted on the site.