This policy explains what personal data the site luxorainvites.com (Luxora Invites) collects, why we collect it, how long we keep it and what rights you have. The service is provided from Serbia, a country outside the European Union, so your data is processed there. The policy follows the Serbian Personal Data Protection Act.
Last updated: 22 September 2026
1. Who controls the data
The data controller is [IME I PREZIME], [GRAD], Serbia. For any question about your data write to us at info@luxorainvites.com. info@luxorainvites.com.
2. What data we collect
When you create an account and request an invitation: your name, your email address, your password (kept only in encrypted form, we cannot see it), the package you chose, the type and date of the celebration and any message you send us.
When you edit an invitation: everything you enter yourself, for example the names of the hosts or the couple, the date, time and place of the celebration, a contact phone number, texts, photos, music, video clips and YouTube links.
When a guest replies: the name of the guest, whether they are coming, the number of people, special meal requests (for example a fasting meal or an allergy), a message for the host, and for corporate events also the company name and job title. The guest gives the information about an allergy voluntarily, only so the host can prepare.
Technical data: to protect the RSVP form from misuse we keep an encrypted record of the IP address for a short time (up to 10 minutes). The site uses only necessary cookies, for logging in and for the shopping cart. We do not use cookies for advertising or for tracking visitors.
3. Why we use the data and on what basis
- To provide the service: we run your account, process requests, show your invitation to guests and send you emails about the account, the invitation and the guest replies. The basis is the performance of the service you asked for.
- So the host knows who is coming: only the owner of the invitation sees the guest replies. The basis is the consent of the guest, given by sending the reply.
- For security: protecting the site from misuse and unwanted messages. The basis is our legitimate interest.
We do not sell or rent your data and we do not use it for advertising.
4. Who else has access to the data
- Guests: anyone who receives the link can see the content of the invitation. Invitations are hidden from search engines, but you share the link yourself, so be careful who you send it to.
- The hosting provider whose servers the site runs on, and the email service through which we send emails. They process the data only on our instructions.
- Google: if the invitation has a map or a YouTube video, the browser of the guest loads content from Google services (Google Maps and YouTube), which may then process technical data about the visit under their own privacy rules, including in countries outside Serbia. We embed YouTube video in the mode without cookies until the guest presses play.
5. How long we keep the data
- Account: until you delete it or ask us to delete it.
- Invitations, photos, clips and guest replies: until the owner deletes them, and no longer than 12 months after the date of the celebration, after which we delete them.
- Requests and correspondence: as long as they are needed to provide the service, and no longer than 12 months.
6. Data about children
Only adults can create an account. Invitations for childrens celebrations and christenings may contain the name and photo of a child. That data is entered by a parent or guardian, who decides what goes on the invitation and who receives it.
7. Your rights
At any time you can ask for access to your data, for its correction or deletion, for the processing to be limited, for your data to be transferred, you can object to the processing or withdraw your consent. You can change or delete most of the data yourself in your account. For anything else write to us at info@luxorainvites.com info@luxorainvites.com, and we will reply within 30 days at the latest.
If you believe that we process your data contrary to the law, you have the right to complain to the Serbian Commissioner for Information of Public Importance and Personal Data Protectionwww.poverenik.rs).
8. Security
The site uses an encrypted connection (HTTPS), passwords are stored encrypted, and only authorised people have access to the administration. No system is completely secure, but we take reasonable measures to protect your data.
9. Changes to this policy
We will update this policy when the service changes, for example when we introduce payments. The valid version is always on this page, with the date of the last change, and we inform users by email about important changes.