Privacy Policy

1. Information We Collect

Couples (account holders)

• Account details: your names and email address
• Wedding information: wedding date, venue, event names, and your story
• Site content: photos, FAQs, travel info, registry items, and any other content you add
• Payment gateway credentials: the connection tokens or API keys needed to link your Stripe, Paystack, Yoco, PayFast, or iKhokha account (stored encrypted; we do not store card details)
• Billing: payment reference for your publish fee. Outside South Africa the fee is sold and fulfilled by Paddle.com Market Ltd, our authorised reseller and Merchant of Record. In South Africa the fee is processed by Paystack. Either way the card details are handled by them, not by us

Guests (people who visit your wedding site)

• RSVP information: name, email address, attendance decision, meal choice, and dietary requirements (collected only when a guest submits an RSVP)
• Gift information: name and amount when a guest submits a cash gift (payment processing is handled entirely by the couple's own gateway; we do not hold card data)

Automatically collected

• Login timestamps and last-seen activity for account security purposes

2. How We Use Your Information

We use personal information to:

• Create and operate your wedding site
• Process and display RSVP responses for your guest list
• Send RSVP confirmation emails to guests on your behalf
• Facilitate cash gift payments via your connected gateway
• Send broadcast emails from couples to their guests
• Provide account support and respond to enquiries
• Detect and prevent fraud or abuse
• Improve the Service

3. How Cash Gifts Work

Our Big Yes does not process cash gift payments directly. When a guest makes a cash contribution, the payment goes through the couple's own payment gateway (Stripe, Paystack, Yoco, PayFast, or iKhokha). Tora Technologies is not a party to those payment transactions and does not hold, receive, or process card data. The gateway's own privacy policy and terms apply to the payment transaction.

4. Legal Basis for Processing

Under POPIA, we process personal information on the following grounds:

• Contract: Processing necessary to provide the Service you signed up for
• Legitimate interest: Account security, fraud prevention, and service improvement
• Consent: Guest RSVP information is collected with the guest's active participation
• Legal obligation: Where required by South African law

5. How We Protect Your Information

• All data is transmitted over HTTPS
• We use passwordless email login. You sign in with a one-time code (OTP) sent to your email address, so there is no password to store or recover
• Payment gateway credentials are stored encrypted
• Card details are never stored by Our Big Yes
• Access to personal data is restricted to authorised personnel

6. Sharing of Information

We do not sell personal information. We share information only where necessary to operate the Service:

• Payment gateways: The couple's own gateway receives payment data when a guest makes a cash gift
• Publish fee processors: Paddle.com Market Ltd, our reseller and Merchant of Record, receives your billing details when you pay the publish fee outside South Africa. Paystack receives them for payments in South Africa. Each processes that payment under its own privacy policy
• Email delivery: We use a transactional email provider to send RSVP confirmations and broadcast messages
• Cloud infrastructure: Our servers run on Google Cloud Platform, with data stored in South Africa or the European Union
• Legal compliance: We may disclose information if required by law or a lawful authority

Some of these providers operate outside South Africa, so paying the publish fee or receiving a cash gift can involve your information being processed in another country. Where that happens we rely on the provider's own safeguards and privacy terms, and we only share what the payment needs.

7. Your POPIA Rights

Under POPIA, you have the right to:

• Know what personal information we hold about you
• Request correction of inaccurate information
• Request deletion of your personal information, subject to legal retention obligations
• Object to the processing of your personal information
• Lodge a complaint with the Information Regulator of South Africa

To exercise any of these rights, email us at hello@ourbigyes.com.

8. Retention

We keep your wedding site, photos, guest lists and gift records while your account is in use. If an account is left unused, we eventually delete it, and we always email you a warning before we do. How long you have depends on the account:

• Paid account with a wedding date: a first warning two months after your wedding date, a final warning one week before deletion, and deletion of your account and your site three months after your wedding date
• Paid account with no wedding date set: a warning after 11 months without a sign-in, and deletion after 12 months without a sign-in
• Account where the publish fee was never paid: a warning after 5 months without a sign-in, and deletion after 6 months without a sign-in

We never delete an account less than seven days after the final warning email. Signing in resets the clock, and changing your wedding date moves the wedding date timeline with it.

You can download everything on your account, at any time, from the Download page in your settings. If you delete your account yourself, we will delete your personal information within 30 days unless we are required by law to retain it for longer. Guest RSVP data is associated with your wedding site and will be deleted when your account is deleted.

9. Cookies

Our Big Yes uses session cookies to keep you logged in to your account. We do not use advertising or third-party tracking cookies.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Material changes will be notified to account holders by email at least 14 days before they take effect. The current version is always available at ourbigyes.com/legal/privacy/.

11. Contact

For privacy-related questions or to exercise your POPIA rights, contact us at: