Privacy
We collect what an invitation needs and nothing else. We never sell or share guest details, and we delete replies 90 days after your event.
1. Who we are
Invites by Najm is the trading name of Mohamed Kassim, a sole trader in England, who can be reached at 12 Parr Road, London E6 1QL. For anything about your data, email hello@invitesbynajm.co.uk.
2. What we collect
From couples and hosts: your email address, the details you put on your invitation (names, date, venue, photos, story), a recording of the invitation if you make one, and your guest list. Card payments go directly to Stripe. We see only the last four digits and the amount.
From guests: the name you reply under, how many are coming, dietary needs, any note or dua you leave, any photographs you share from the day, and your email address if you choose to give it. If the hosts use our door list on the day, their team records when your family arrives.
If you keep invitations or write a review: guests who sign in to keep invitations give us their email address, and we keep the list of invitations they saved, which only they can see. Couples who review Najm give us their review, which we show on our website only if they say so.
Dietary needs can reveal health or religious information. We collect them only so the host can cater for you, show them only to that host, and delete them with the rest of the replies.
3. Why we use it
We do not use your data for advertising, and we do not use advertising or tracking cookies. We store only what keeps you signed in and saves your draft.
4. Who else handles it
We use a small number of providers who process data only on our instructions: Cloudflare (hosting), Supabase (database), Stripe (payments), our email delivery provider, and Photon, built on OpenStreetMap, which receives the venue search terms you type. Where any of them process data outside the UK, they are covered by UK-approved safeguards.
5. How long we keep it
Guest replies, notes, duas and arrivals are deleted 90 days after the event date. Photographs guests add are deleted a year after the event, except those the hosts keep on their invitation. Invitation content and its recording are deleted when you close your account. Payment records are kept for six years, as UK tax law requires. You can ask us to delete anything sooner.
6. Your rights
You can ask to see, correct, download or delete your data, or object to how we use it. Guests can do this by editing their reply or by emailing us. We reply within one month. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office at ico.org.uk.