Data Processing Terms

These Data Processing Terms form part of the Beta Terms when you act as a controller of personal data and use Ilovite to process that data on your behalf.

Roles

When you determine the purposes and means of processing guest personal data and use Ilovite to process that data for you, you are the controller and Ilovite is the processor.

Subject matter, nature, duration and purpose

The nature of the processing is the collection, storage, organisation, retrieval, transmission and deletion of guest data as necessary to provide the Ilovite service. We process personal data to provide the Ilovite service — including invitation hosting, guest list management, RSVP collection and related communications — for as long as you use the service, or until the data is deleted as described below and in the Privacy Policy.

Categories of data and people

Data subjects include event guests and other people whose details you enter or upload. Personal data may include names, contact details, RSVP responses, dietary information and other guest fields you configure.

Instructions

We process personal data only on your documented instructions, including instructions arising from these terms and how you use the product, and including in relation to international transfers, unless applicable law requires otherwise. Where legally permitted, we will inform you before carrying out processing required by law. We will also inform you if we believe an instruction infringes applicable data protection law. You are responsible for the lawfulness of your instructions and for informing data subjects as required by law.

Confidentiality

People authorised to process personal data on our behalf are bound by appropriate confidentiality obligations.

Security

We implement technical and organisational measures appropriate to the nature of the processing. In the current service those measures include:

• encrypted connections (HTTPS), including HTTP Strict Transport Security in production
• account authentication
• application access controls so users can only access event data they are authorised to manage

Subprocessors

You authorise us to use the subprocessors listed on our Service providers and subprocessors page. We will provide reasonable advance notice of new or replacement subprocessors by email or an in-product notice. You may object on reasonable data-protection grounds by emailing privacy@ilovite.com within 14 days of notice. If we cannot reasonably accommodate a valid objection, you may stop using the affected features or close your account.

We require subprocessors to protect personal data under obligations substantially equivalent to those applicable to Ilovite under these terms. Ilovite remains responsible to you for the performance of its subprocessors' data-processing obligations.

Assistance

Taking into account the nature of the processing, we will assist you with reasonable requests related to data subject rights, security obligations, personal data breaches, data protection impact assessments and prior consultation, as required by applicable law.

Personal data breaches

If we become aware of a personal data breach affecting personal data processed on your behalf, we will notify you without undue delay and provide information reasonably available to us to help you meet your legal obligations.

Deletion and return

When processing ends, at your choice we will delete or return the personal data processed on your behalf and delete remaining copies, unless applicable law requires retention. You may also delete or export data using available product features or contact us for reasonable assistance. Retention and deletion are described further in the Privacy Policy.

Information and audits

We will make available information reasonably necessary to demonstrate compliance with these terms. Where reasonably necessary, we will allow audits or inspections by you or an independent auditor acting on your behalf. Audits must, where practicable, be arranged in advance, limited to matters relevant to the processing covered by these terms, respect confidentiality and security requirements, and avoid unreasonable disruption to the service.

Contact

Questions about these Data Processing Terms can be sent to privacy@ilovite.com.