PRIVACY POLICY

Effective Date: November 24, 2025
Company: MemoireBox (“we,” “us,” “our”)
Services: Digital invitations, RSVP management, and digital albums

1. Introduction

MemoireBox provides tools for creating digital invitations, managing event RSVPs, and hosting digital albums. We take privacy seriously and are committed to protecting the personal information of clients and event guests.

This Privacy Policy explains how we collect, store, use, and share personal information in accordance with global privacy regulations including GDPR, CCPA/CPRA, the Australian Privacy Principles (APPs), and the Philippine Data Privacy Act.

By using MemoireBox, you consent to the practices described in this Policy.

2. Information We Collect

2.1 Information Provided by Clients (Account Holders)

When creating an account or using MemoireBox, we collect:

Full name

Email address

Phone number

Login credentials

Event details (titles, locations, dates)

Payment-related information (processed via third-party providers)

2.2 Information Provided by Event Guests

When guests respond to digital invitations or RSVP forms:

Name

Email address or mobile number

RSVP responses

Dietary preferences (optional)

Guest messages or notes

Any other fields added by the event organizer

2.3 Media & User-Generated Content

Clients may upload:

Photos, videos, and audio

Event branding assets or artwork

Text and custom designs

Ownership: Clients retain full ownership of uploaded content.

License: MemoireBox is granted a limited license to host and display content solely for delivering the service.

2.4 Technical & Usage Data

We automatically collect:

IP address

Browser and device information

Interaction logs

Cookies and analytics data

WordPress page activity (if applicable)

2.5 Children’s Data

Only adult clients (18+) may create accounts.

Event guests under the age of 18 may appear in uploaded media or RSVP responses only with parental/guardian consent obtained by the client.

MemoireBox does not knowingly collect personal information directly from minors.

3. How We Use Personal Information

We use data to:

Provide invitations, RSVP forms, and digital album hosting

Manage client accounts

Process uploaded media

Communicate notifications (email/SMS)

Improve services and user experience

Provide customer support

Ensure security and detect misuse

Comply with legal obligations

We do not sell personal information.

4. Sharing of Information

4.1 GoHighLevel (Primary CRM & Data Processor)

MemoireBox uses GoHighLevel to store and process:

Client information

Guest RSVP submissions

Contact records

Automated communications

Usage analytics

GoHighLevel acts as a data processor and is contractually required to protect all personal data under applicable laws.

4.2 WordPress (Website Platform)

WordPress is used to deliver landing pages and forms.
It may process:

Cookies

Device data

Technical visitor logs

Form integrations

Media hosted through the website

We ensure plugins or integrations that process personal data are privacy-compliant.

4.3 Cloud Hosting Providers

Infrastructure used by our service providers may include:

AWS

Google Cloud

Cloudflare

WP Engine / SiteGround / equivalent WordPress hosts

4.4 Legal Requirements

We may disclose information when required:

By Law

By court order

To meet regulatory compliance obligations

4.5 Event Owners

Guest RSVP data is shared only with the event owner who created the event.

5. Cookies & Tracking

We use cookies for:

Authentication

Session management

Analytics

Performance monitoring

Users can adjust cookie settings in their browser.
Some functionality may be limited if cookies are disabled.

6. Data Retention

We retain data only as necessary:

RSVP submissions: up to 24 months after the event unless deleted earlier

Media files: retained until client deletes them or account is removed

Analytics logs: 12–24 months

Backups by hosting providers: up to 90 days

When an account is deleted, personal data is removed from GoHighLevel and related WordPress pages, and from backups after their retention cycles.

7. Data Security

MemoireBox uses a combination of GoHighLevel, WordPress, and secure hosting providers to protect data.

7.1 Security Provided by GoHighLevel

Includes:

Encrypted data transmission

Encrypted data storage

Firewalls & intrusion detection

Redundancy and automated backups

Access restrictions

Monitoring and audits

7.2 Security Provided by WordPress & Hosting Providers

Includes:

HTTPS/TLS

Hardened hosting environments

Security plugins and firewalls

Regular updates

Login protection and brute-force mitigation

7.3 Security Practices by MemoireBox

We implement:

Access controls for staff

Strong password requirements

Limited internal access

Confidentiality obligations

7.4 Disclaimer

While we use reputable service providers, no system is fully secure.
MemoireBox is not responsible for breaches originating from:

GoHighLevel

WordPress

Third-party plugin vulnerabilities

User negligence or improper access sharing

8. International Data Transfers

Personal data may be transferred to regions where GoHighLevel or WordPress hosting servers operate, including the United States.

We rely on:

Standard Contractual Clauses (SCCs)

Contractual obligations of service providers

Equivalent global safeguards

9. User Privacy Rights

Depending on jurisdiction, users have:

Right to access data

Right to update data

Right to delete data

Right to restrict processing

Right to withdraw consent

Right to data portability

Right to lodge complaints

Requests may be sent to team@mail.memoirebox.com

10. Third-Party Links

Our website may include external links.
We are not responsible for their privacy practices.

11. Changes to this Policy

We may update this policy periodically.
Material changes will be communicated through email or platform notifications.

12. Contact Information

Email: team@mail.memoirebox.com