Privacy policy

Occasionally lets people create a page for an event or a person they are remembering, share a programme, collect tributes and RSVPs, and accept donations. This page explains what we keep, who sees it and how to have it removed.

What we collect

• From the person who creates a page: email address, optional name, the page content (names, dates, obituary, photos, services, timeline, family and favourites), the programme PDF you upload, your event orders (plan, amount, payment reference and dates), and a mobile money payout account if donations are turned on.
• From visitors who take part: a tribute (name, optional email, message, optional photo), an RSVP (name, optional email and phone, a note, guest count) or a donation (optional name, email, amount).
• Scan and download counts: we count how many times an event’s QR code is scanned and its programme is downloaded. The counts are anonymous and include no visitor identifiers. They include link previews and crawlers.
• From everyone: an anonymous random identifier stored in a cookie so a like is counted once, and your IP address, which we use only to limit abuse and do not store with your content.

Who sees it

• The programme PDF can be downloaded by anyone who has the QR code or the page address.
• Published page content, and tributes the page owner approves, are public.
• RSVPs, donor details and unapproved tributes are visible only to the page owner.
• Paystack processes donations and the payment for an event (mobile money or card). It receives the donor or payer email and the amount. When an owner saves a payout number it also receives that mobile money number, to look up the name registered to it. We pay donations out to owners ourselves, by mobile money. Their policy applies to the data they receive.
• Our email provider delivers sign-in links, and the reminder and receipt emails we send to the event owner before an event ends and after a payment.
• An error-monitoring service (Sentry) receives technical reports when something breaks: the error, the page address without its query string, and the browser type. We remove form contents, cookies, e-mail addresses and phone numbers before they are sent.
• We do not sell data or use it for advertising.

How long we keep it

• Page content and guest responses stay until the owner deletes the page or their account, or until 90 days after the event’s paid period ends if it is not renewed, whichever comes first. The date of that deletion is given in the deletion warning emails we send the owner.
• After an event ends and is not renewed, we keep its content for 90 days, then delete the page content and the programme file.
• Sign-in sessions expire automatically.
• Donation records (donor name and email, amount, reference, page name) and event orders (plan, amount, reference, dates) are payment records, and so is the record of each payout we make to an owner (amount, date, the mobile money number and registered name it was sent to). We keep them for 6 years even after the page or account is deleted, for audit and dispute handling, and then delete them.

Your choices

• Page owners can download all their data and delete their account from the dashboard under Account. Deleting removes your pages, photos, programme files, tributes, RSVPs and payout details immediately, once any donations still waiting to be paid out to you have been paid.
• Guests who posted a tribute, RSVP or donation can ask the page owner to remove it, or write to us at the address below.
• You may ask us to correct or delete personal data we hold about you, and to tell you what we hold.

Security

Connections are encrypted, sign-in uses one-time email links, uploads are checked and stored privately, and we limit repeated requests. No system is perfectly secure, so we ask you not to put anything on a page you would not want shared.

Contact

Questions or requests: privacy@occasionally.example.