Memilove Privacy Policy

This Privacy Policy is prepared in accordance with Regulation (EU) 2016/679 of the European Parliament and of the Council on the protection of natural persons with regard to the processing of personal data (GDPR), the Law on Legal Protection of Personal Data of the Republic of Lithuania, and other applicable laws.

The Privacy Policy applies to all individuals visiting memilove.com, creating or purchasing a digital guestbook, managing an event portal, or leaving greetings via a QR code link.

We process only personal data strictly necessary for proper service provision, contract performance, and compliance with statutory obligations:

• Client and organizer data: email address, organizer's name, celebrants' names or event title, event date and duration, company billing details (if an invoice is requested). Legal basis: contract performance (GDPR Art. 6(1)(b)).

• Payments and accounting data: order amount, payment status, transaction ID, invoice details. Payments are securely processed by Paysera LT, UAB for Lithuania or Stripe for Ireland. We never see, store, or process your banking credentials or card numbers directly. Legal basis: legal obligation under accounting regulations (GDPR Art. 6(1)(c)).

• Event guests' audio recordings and photos: audio files (up to 120s), uploaded photos, and guest names provided. Access is granted solely to the organizer via secure authentication tokens. Legal basis: contract performance and user consent (GDPR Art. 6(1)(a) and (b)).

• Technical and browsing data: IP address, access date and time, browser user-agent, terms consent timestamps. These records are necessary for security, fraud prevention, and electronic contracting evidence. Legal basis: legitimate interest and legal obligation (GDPR Art. 6(1)(c) and (f)).

Personal data is retained no longer than necessary for the processing purposes:

• Accounting and financial records (invoices, transaction logs): retained for 10 years in compliance with statutory archivist regulations.

• Event audio recordings and photos: stored in private storage for 60 calendar days following the event date so the organizer can download the complete ZIP collection. After 60 days, all media files are permanently and automatically deleted.

• Greetings gallery sharing: the organizer may choose to create a link that lets other people (e.g. the celebration guests) see and hear the event greetings. The link is valid for the period set by the organizer, never longer than the media retention period, and the organizer can switch it off at any time.

• Order history and consent logs: retained for 3 years from contract completion for general limitation period requirements.

We do not sell personal data. We share data with partners needed to provide our services, and for advertising measurement only after separate consent to marketing cookies, as described below.

• Paysera LT, UAB (Lithuania) and Stripe (Ireland) — for secure payment processing and collection;

• IT infrastructure, cloud hosting, and transactional email providers operating servers located within the European Union (EU/EEA);

• Public authorities and law enforcement — strictly upon lawful requests under mandatory legal provisions.

Under the GDPR, you have the following rights:

• Right of access: obtain confirmation whether personal data is processed and access your data;

• Right to rectification: request correction of inaccurate data or completion of incomplete data;

• Right to erasure ('right to be forgotten'): request deletion of data that is no longer needed;

• Right to restriction of processing and right to data portability;

• Right to object to processing and right to withdraw consent at any time.

To exercise your rights, contact us at hi@memilove.com or by phone at +37064568844. We will respond within 30 calendar days. You also have the right to lodge a complaint with the State Data Protection Inspectorate (L. Sapiegos g. 17, Vilnius, email: ada@ada.lt, vdai.lrv.lt).

We use essential technical cookies for platform operation, secure organizer authentication, session continuity and language preferences. Optional analytics and marketing cookies are used only with your separate consent.

No third-party tracking or advertising cookies are deployed without explicit prior consent.

We reserve the right to update this Privacy Policy. The latest version is always available on this page with the updated revision date.

For privacy inquiries, contact: Panevio, MB, Islandijos pl. 69-60, Kaunas, Lithuania, phone: +37064568844, email: hi@memilove.com.

If you explicitly subscribe, we process your email address, preferred language, subscription categories and consent history to send Memilove news, celebration ideas and special offers. The legal basis is your consent. A subscription becomes active only after confirmation using the email sent to your address.

You can withdraw consent for each category at any time, free of charge and without logging in, using the unsubscribe link. Segment membership or an order does not constitute marketing consent. Order and partnership administration messages are handled separately. We do not store your IP address or browser details in the newsletter contact or consent history. For abuse prevention we temporarily store keyed hashes of the address and network identifier, for up to one hour.

We also use your email and order history to provide the confirmed subscription’s first-order discount, check its one-time use and record when a subscriber becomes a customer. Linking an order or assigning a customer segment does not change marketing consent. Unsubscribing from marketing does not cancel a discount code already issued under its original terms.

With your analytics consent, we use Metricool to measure visits to public website pages. Metricool does not set cookies. It receives the public page URL, a public referring URL where available, viewport size, and the IP address and browser information sent with the connection. We do not track private pages, guest invitations, greetings, galleries, the organizer portal or administration. Visits with private URLs or unrecognized URL parameters are skipped. You can stop future measurement in cookie settings.

Only with your consent to marketing cookies, we use Meta Pixel and Conversions API to measure Facebook and Instagram advertising. We send Meta a random purchase identifier, the paid amount, currency, purchased service types, IP address, browser information, and _fbp and _fbc advertising cookie values where available. We do not send celebration names, recordings, photos, email addresses or private access links.

You can withdraw consent in cookie settings. Withdrawal stops future browser events and cancels this browser’s server events that have not yet been sent. Temporary advertising matching data is deleted after delivery or within 7 days. Meta processes data under its privacy policy; processing may take place outside the EEA.