Privacy Policy

1. Information We Collect

Couples (account holders)

• Account details: your names and email address
• Wedding information: wedding date, venue, event names, and your story
• Site content: photos, FAQs, travel info, registry items, and any other content you add
• Payment gateway credentials: the connection tokens or API keys needed to link your Paystack, Yoco, PayFast, or iKhokha account (stored encrypted; we do not store card details)
• Billing: payment reference for your publish fee (card details are handled by the payment gateway, not by us)

Guests (people who visit your wedding site)

• RSVP information: name, email address, attendance decision, meal choice, and dietary requirements (collected only when a guest submits an RSVP)
• Gift information: name and amount when a guest submits a cash gift (payment processing is handled entirely by the couple's own gateway; we do not hold card data)

Automatically collected

• Login timestamps and last-seen activity for account security purposes

2. How We Use Your Information

We use personal information to:

• Create and operate your wedding site
• Process and display RSVP responses for your guest list
• Send RSVP confirmation emails to guests on your behalf
• Facilitate cash gift payments via your connected gateway
• Send broadcast emails from couples to their guests
• Provide account support and respond to enquiries
• Detect and prevent fraud or abuse
• Improve the Service

3. How Cash Gifts Work

Our Big Yes does not process cash gift payments directly. When a guest makes a cash contribution, the payment goes through the couple's own South African payment gateway (Paystack, Yoco, PayFast, or iKhokha). Tora Technologies is not a party to those payment transactions and does not hold, receive, or process card data. The gateway's own privacy policy and terms apply to the payment transaction.

4. Legal Basis for Processing

Under POPIA, we process personal information on the following grounds:

• Contract: Processing necessary to provide the Service you signed up for
• Legitimate interest: Account security, fraud prevention, and service improvement
• Consent: Guest RSVP information is collected with the guest's active participation
• Legal obligation: Where required by South African law

5. How We Protect Your Information

• All data is transmitted over HTTPS
• We use passwordless email login. You sign in with a one-time code (OTP) sent to your email address, so there is no password to store or recover
• Payment gateway credentials are stored encrypted
• Card details are never stored by Our Big Yes
• Access to personal data is restricted to authorised personnel

6. Sharing of Information

We do not sell personal information. We share information only where necessary to operate the Service:

• Payment gateways: The couple's own gateway receives payment data when a guest makes a cash gift
• Email delivery: We use a transactional email provider to send RSVP confirmations and broadcast messages
• Cloud infrastructure: Our servers run on Google Cloud Platform, with data stored in South Africa or the European Union
• Legal compliance: We may disclose information if required by law or a lawful authority

7. Your POPIA Rights

Under POPIA, you have the right to:

• Know what personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information, subject to legal retention obligations
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at hello@ourbigyes.com.

8. Retention

For published accounts, your wedding site, photos, guest lists and gift records are kept until three months after your wedding date, after which they are removed. For accounts that never publish, we keep your data while you are active and remove it after six months of inactivity; we will always email a warning before this happens. You can download everything on your account, at any time, from the Download page in your settings. If you delete your account yourself, we will delete your personal information within 30 days unless we are required by law to retain it for longer. Guest RSVP data is associated with your wedding site and will be deleted when your account is deleted.

9. Cookies

Our Big Yes uses session cookies to keep you logged in to your account. We do not use advertising or third-party tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to account holders by email at least 14 days before they take effect. The current version is always available at ourbigyes.com/legal/privacy/.

11. Contact

For privacy-related questions or to exercise your POPIA rights, contact us at: