Voway · PEACEFULPLAY
Privacy policy
This policy explains how Voway uses personal data for customers, invitation guests, and people who contact us.
Version 2026-08-22 · Effective 22 August 2026Controller
The controller is ΜΟΥΡΑΤ ΑΒΤΖΗ ΚΑΙ ΣΙΑ Ε.Ε., trading as PEACEFULPLAY, at Leukopetra, Xanthis, 67100, Greece. Privacy contact: legal@voway.eu.
Data we process
We process account and contact details, invitation and event details, uploaded media, order and payment references, consent records, support messages, RSVP-link configuration, security logs, and necessary device/session information. Stripe processes payment-card data; Voway does not store full card numbers or CVCs.
Purposes and legal bases
We use data to perform the customer contract, provide and secure invitations, send service messages, meet accounting and legal obligations, handle support and legal claims, and prevent misuse. The bases are contract, legal obligation, and legitimate interests; consent is used when legally required.
Guest invitations
Invitation pages are unlisted public pages. Guests do not need an account, but anyone with the URL can view the information the customer publishes. Customers should avoid publishing sensitive information and should regenerate or unpublish a link if it is shared too widely.
Processors and recipients
We use hosting and security infrastructure supplied through Sites/Cloudflare; Stripe/Link as merchant of record for payment, receipts, indirect tax, fraud, disputes, and transaction support; Resend for transactional email; DeepL for optional translation; Zoho for business mail; and professional accounting providers. They receive only the data needed for their role. We disclose data when required by law or to protect legal rights.
Retention
Invitation content is normally retained until twelve months after the wedding date, then unpublished and scheduled for deletion. Abandoned draft uploads are removed after seven days. Authentication tokens expire quickly; sessions last up to thirty days. Transaction, consent, tax, and accounting records are kept for the periods required by law.
Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability, or objection, and may complain to the Hellenic Data Protection Authority or your local supervisory authority. Contact legal@voway.eu. We may verify identity before acting.
Security and transfers
We use access controls, hashed authentication tokens, encrypted transport, restricted object keys, backups, and provider security measures. Some providers may process data outside Greece or the EEA under lawful transfer safeguards described in their policies.