Privacy Policy

Summary

We collect two different kinds of information, and treat them differently. Customer information — the name, email and phone number of the person who buys a card — we keep because we need to manage your account and your payment records. Guest information — the names and phone numbers of the people who reply to an invitation — is not ours; it belongs to whoever sent the invitation, and we only keep it on their behalf.

We do not sell personal information to anyone. We do not use it for advertising. We do not send marketing emails you did not ask for.

Who we are

E'Jemput is a digital invitation card service operated by the company named at the foot of this page. For any questions about this policy, or to exercise any of the rights listed below, contact us by the email or phone number shown there.

The information we collect

From customers

• When you pay: your full name, email address, phone number, and the payment method you choose. We never receive or keep your credit card number or banking details — all of that is entered directly on the payment gateway's page.
• Your account: your name, email, phone number, and password. The password is stored as a one-way hash, not as text — we cannot read it ourselves.
• Payment records: the payment reference, amount, method, invoice number, and the response from the payment gateway.
• Account activity: the date you last logged in, and the support tickets you send us.

The card content you fill in

Whatever you type into your card is kept so the card can be displayed: the names shown on the card, the parents' names, the date and time of the event, the venue's name and address, the programme, the doa, phone numbers to contact, gallery photos, and a QR code or bank account number if you choose to show one.

Please note: once a card is published, this content can be seen by anyone who has your card's link. The link is not indexed by search engines, but it is not password-protected either — anyone who receives it can forward it to others. Bear this in mind before putting a personal phone number or a bank account number on the card.

From event guests

• When a guest replies to an invitation: their name, phone number, whether they are attending, and how many people they are bringing.
• When a guest writes a wish: their name and the text of the wish.

Guests have no account with us and do not need to register. The phone number is used for identification so that the same guest can correct their reply later, rather than add a second one.

Technical information

• Cookies: we use a session cookie to keep you logged in, and a security cookie to protect forms from misuse. Both are needed for this site to work; we do not use third-party advertising or tracking cookies.
• Language choice: when you choose BM or EN, that choice is kept in the dj_lang cookie and in your browser's local storage, so this site keeps showing the same language on your next visit. If you are logged in, it is also kept on your account so our emails are written in the same language. It is used for nothing else.
• IP address: recorded temporarily to limit the rate of requests and prevent misuse of the RSVP and wishes forms.
• Server logs: record technical errors so we can fix them.
• Unpaid drafts: your browser keeps a token in local storage so you can come back and continue an unfinished card. It stays on your device only.

Why we collect it

• To create, display and update your invitation card.
• To process your payment and issue an invoice.
• To open your account and send you a temporary password.
• To send emails about your card — the receipt, a reminder a week before the event, and a reminder to download the guest list after the event.
• To collect RSVP replies and wishes and show them to whoever sent the invitation.
• To answer your support tickets.
• To meet our accounting and tax obligations.

Guest data — who is responsible

This is the part most often misunderstood, so we state it plainly.

When you publish a card and your guests reply to it, you are the one collecting that guest information, not us. We provide the tool and keep the data on your behalf. In the terms of the Personal Data Protection Act 2010, you are the data user for your guest list and we process it for you.

This means two things. First, you are responsible for how you use the guest list you download from us. Second, if a guest contacts us directly and asks for their information to be removed, we will let you know and remove it.

We do not use your guests' information for our own purposes. We do not contact your guests, do not market to them, and do not share one customer's guest list with another customer.

How long we keep it

Unpaid drafts

Deleted entirely 24 hours after the last edit if it has not been paid for, including every photo that was uploaded. The clock restarts each time you edit the card.

The public card link

Closed to guests on the day after the event. Anyone who opens an old link after that sees only the names on the card and the date — not the venue's address.

Your card and account

5 days after the event, the card is closed and your account is deactivated. After that date you can no longer log in. You do not need to do anything to keep your data: the day before the account closes, we send an email carrying your guest list and wishes as Excel files, so you have them without needing to log in at all. If you need anything else from that card after the account closes, contact us — we can still get it out for you.

Guests' names and phone numbers

Remain in our system after your account closes, and are anonymised 90 days after the event. Names are replaced with a generic label and phone numbers are removed entirely. The counts — how many replied, how many attended, how many wishes were received — are kept so we can understand how the service is used, but they no longer point to anyone. Between the day your account closes and that date, you can still ask us for a copy of your guest list. After 90 days, those names and numbers are gone and cannot be recovered by anyone.

Account and payment records

Kept for as long as your account exists. Payment records and invoices are kept for at least seven years after the relevant year of assessment, as Malaysian tax law requires, even after you ask for your account to be closed.

Photos you delete

Removed from our storage as soon as you delete them.

Who we share it with

We share information only with the parties needed to run this service:

• The payment gateway. When you pay, your name, email, phone number, the amount and your order reference are sent to our payment gateway provider so the transaction can be processed. They have their own privacy policy.
• The email provider. Receipt emails, temporary passwords and reminders are sent through a third-party email provider, which receives the email address and the content of the message.
• The hosting provider. Data is kept on servers rented from our hosting provider.
• Google Fonts. This site loads fonts from Google's servers. When a page loads, your browser makes a request to Google, which can see your IP address. We send them no other information.

We will also disclose information if the law requires it, or where necessary to protect our rights or the safety of others. We do not sell or rent personal information to anyone.

Security

Connections to this site are encrypted. Passwords are stored as a one-way hash and cannot be read back, by us or by anyone who gains access to the database. Access to the admin panel is limited to our staff only, and actions that touch accounts or payments are recorded.

But no system is completely secure, and we cannot guarantee absolute security. If a data breach affects your personal information, we will let you know.

Your rights

Under the Personal Data Protection Act 2010, you have the right to:

• Access the personal information we keep about you.
• Correct information that is inaccurate or incomplete.
• Withdraw your consent to processing, even though this means we can no longer provide the service.
• Limit how we process your information.
• Make a complaint to the Department of Personal Data Protection Malaysia.

To exercise any of these rights, contact us using the details below, or open a support ticket from your dashboard. We will reply within 21 days. We may ask you to confirm your identity first, so that we do not reveal your information to the wrong person.

If you are an event guest and want your reply or wish removed, contact us or whoever sent the invitation. Both we and they can remove it.

Children

This service is not aimed at children under 18 and we do not knowingly collect personal information from them. If you find that a child has given us information, contact us and we will remove it.

Changes to this policy

We will update this policy when the service changes. The date at the top of the page shows the latest version. If a change is significant — for example if we begin sharing data with a new party — we will let customers know by email before it takes effect.

Contact us

Any questions about this policy, or requests about your personal information, can be sent to the email address or phone number shown below.