Privacy Policy

Cordially (“Cordially”, “we”, “us” or “our”) is operated by CV. Arundaya Karya Abadi, Jl. Raya Gading Indah Blok NB-5 No. 38C, Kel. Kelapa Gading Timur, Kec. Kelapa Gading, Jakarta Utara 14240, Indonesia. We are responsible for the personal data described in this policy.

This policy covers our website, its subdomains, every invitation page we host, and the Cordially dashboard (together, the “Service”). By using the Service you agree to this policy and to our Terms and Conditions.

Information you give us

• Your account — your name, email address and password. Passwords are stored only as a secure one-way hash; we never see or store the password itself. If you sign in with Google, we receive the name, email address and profile picture on that Google account.
• Your wedding — the details you put on your invitation, such as your names, event dates, venues and times, your story, photos, videos, music, dress code, and any bank or e-wallet accounts you choose to show for digital gifts.
• Messages to us — anything you send our support team.

Information about your guests

When you build a guest list, you give us your guests’ names and, where you add them, their phone numbers, group, side, invitation quota and the names of people coming with them. You should only add people you are genuinely inviting, and you are responsible for having the right to share their details with us.

Information guests give us

When guests open an invitation they may reply to the RSVP, name who is attending, choose a meal, leave a wish, and check in with their QR code on the day.

Information collected automatically

Like most websites, our servers record technical information when the Service is used: IP address, browser and device type, operating system, language, pages requested and the time of each request. We use it to keep the Service running, secure and free of abuse.

We use personal data only to:

• create and host your invitation, and show each guest their own personalised version;
• collect and organise RSVPs, wishes, seating and check-ins for you;
• send service emails such as verification codes, password resets and important account notices;
• keep the Service secure, prevent fraud and fix problems;
• answer your questions and provide support;
• meet our legal obligations.

We do not sell personal data, and we do not use your guests’ details to market to them.

We process guest information on your behalf and only to run your event. Your guests are not Cordially customers, and we will never contact them for any reason other than your invitation.

Anyone with a link to your invitation can open it, unless you make it a private, invite-only invitation. Wishes and other content you choose to display may be visible to everyone who opens it.

If one of your guests asks us about their data, we may refer them to you or act on their request directly where the law requires.

We share personal data only with providers who help us run the Service, under contracts that limit them to doing so:

• hosting, database and file-storage providers;
• our email delivery provider, for verification codes and account emails;
• Google, if you choose to sign in with Google;
• payment providers, when you buy a package. Card details go directly to them and are never stored by Cordially.

When you send an invitation manually, it opens in your own WhatsApp, and the message is sent by you under WhatsApp’s own terms and privacy policy.

We may also disclose information if the law requires it, to protect the rights and safety of our users or the public, or as part of a merger, acquisition or sale of our business — in which case the buyer must continue to honour this policy.

We use a small number of essential cookies to keep you signed in and to protect your account, and your browser’s local storage to remember preferences such as your language. We do not use advertising cookies.

You can block or delete cookies in your browser settings, but if you do, you will not be able to sign in to the dashboard.

Your invitation stays online for the active period of your package. We keep your account and event data for as long as your account exists, and for no longer than six years.

If you delete your account, we delete or anonymise your data, including your guest list, within 60 days — except where the law requires us to keep certain records, such as payment records, for longer.

Data is sent over encrypted connections, passwords are hashed, and access to personal data is limited to the people and systems that need it. No system is perfectly secure, but we work to protect your information and review our safeguards regularly.

If a breach affects your personal data, we will notify you and the relevant authorities as required by law.

Under Indonesia’s Personal Data Protection Law (Law No. 27 of 2022), and similar laws elsewhere, you have the right to:

• know what personal data we hold about you;
• access it and receive a copy;
• correct or update it;
• have it deleted;
• withdraw your consent, or ask us to stop or limit processing it.

You can view and edit most of your information yourself in the dashboard. For anything else, email us at support@cordially.events. We may need to verify your identity before acting on a request.

If you live in the European Economic Area or the United Kingdom, you also have rights under the GDPR, including the right to complain to your local data protection authority.

Some of our service providers store or process data outside Indonesia. When that happens, we make sure the data is protected to the standard Indonesian law requires.

Cordially accounts are for adults. Guest lists may include children’s names and whether a guest is an adult or a child, added by the hosts so the event can be planned. We use this only for the event it was added to. If you believe a child has given us personal data without a parent’s or guardian’s consent, contact us and we will remove it.

Invitations and our website may link to services we do not run, such as Google Maps, WhatsApp or a couple’s chosen music or gift platforms. Their own privacy policies apply once you leave Cordially.

We may update this policy as the Service changes. When we make significant changes, we will let you know through the Service or by email before they take effect. The date at the top of this page shows when it was last updated.

This policy is governed by the laws of the Republic of Indonesia.

Questions about this policy or your data? We are happy to help.

CV. Arundaya Karya Abadi
Jl. Raya Gading Indah Blok NB-5 No. 38C, Kel. Kelapa Gading Timur, Kec. Kelapa Gading, Jakarta Utara 14240, Indonesia
support@cordially.events

Back to Cordially