Privacy policy
We collect only what a party needs, keep it for as short a time as possible, and never sell it.
Who we are
Little Envelope is run by Amelia Hershman-Jones, trading as Little Envelope. We are the data controller for the information described here. Contact us at hello@littleenvelope.com.
What we collect
From hosts: your email address and sign-in details, the name you show to guests, an optional mobile number, the party details you enter, your guest list (guests' first names and how to reach their grown-ups), and whether you've chosen to get marketing emails from us.
From guests' grown-ups: your email address or mobile if the host adds it, your reply, how many grown-ups and siblings are coming, any dietary needs you choose to share, an optional message, and your name, mobile or email if you give them for reminders.
Payments: handled by Stripe. We never see or store your card details.
Feedback: if you rate us or send feedback, we keep your rating and comments, which page or email it came from, and your email address if you're signed in, gave it in your reply or added it for a reply. We use it only to improve Little Envelope and to reply to you.
How we use it, and why
Running your parties (hosts). To create your invites, collect replies, run the present list, take payment and email you about your own parties. If you're signed in, we also keep the invite you're part-way through making, so you can finish it on any device and we can remind you to. It's deleted as soon as you save the party. Our lawful basis is our contract with you. You can turn off party update emails in your account settings.
Invites and reminders (guests' grown-ups). When a host adds your email address, we send you their invite and, if they have a Party Pass, reminders and updates about that party. Our lawful basis is our legitimate interest, and the host's, in getting the invite to you. These emails are only about the party. Every one has an unsubscribe link, and if you use it we won't email you again, whichever host invites you.
News and offers. We only send these to hosts who tick the box to get them, which is never ticked for you. You can change your mind at any time in your account or with the unsubscribe link in each email. We keep a record of when you agreed, as the law requires.
Dietary information is shared only because you choose to give it for the party, and only the host sees it.
Children's data
Little Envelope is used by parents and carers, not children. We collect guests' first names, and only the details needed for the party. We never ask for a photo of a child. Guest links are private and unguessable, and party pages are hidden from search engines. The full address and the host's number show only after a guest replies.
Keeping it safe
Everything is encrypted in transit and at rest. Our database can only be reached by our own servers, never directly from a browser. Guest links are long random codes. Our emails come from a verified sending domain, so they're harder to fake.
Who we share it with
The host sees replies to their own party. We use trusted processors to run the service, under contracts that protect your data: Google Firebase and Google Cloud (website, database and sign-in), Stripe (payments) and Resend (sending emails). We do not sell personal data, or share it for anyone else's marketing.
Some of these providers process data in the United States. Where they do, the transfer is protected by the UK-US data bridge or the UK's approved contract clauses.
How long we keep it
Party pages, guest lists and replies are deleted automatically 30 days after the party. Host accounts are kept until you delete them, which you can do yourself at any time from your account. Payment records are kept for as long as the law requires. If you unsubscribe, we keep a one-way coded version of your email address (not the address itself) so we can make sure we never email you again.
Your rights
You can ask to see, correct or delete your data, to restrict or object to how we use it, or for a copy to take elsewhere. You can withdraw consent to marketing at any time. Email hello@littleenvelope.com and we'll reply within one month. Hosts can also delete their account themselves.
Complaints
If you're unhappy with how we've handled your personal data, please email hello@littleenvelope.com first. We'll acknowledge your complaint within 30 days, look into it, and tell you what we've done. You can also complain to the Information Commissioner's Office at ico.org.uk.
Cookies
We use the cookies and local storage needed to keep you signed in, save your draft invite and remember your cookie choice. These are always on because the site needs them.
When you reply to an invite, your name, email, mobile and your child's dietary needs are also kept in local storage on that phone or computer (not on our servers), so they're filled in for you next time. Tap “Not you? Clear” on the reply form to remove them.
With your permission, we also use an analytics cookie from PostHog (names starting ph_), which lets us count returning visitors. It lasts up to a year. You can change your mind at any time with “Cookie settings” at the bottom of every page; saying no deletes it.
Visitor statistics
To see how people use the site and where we can make it easier, we count page visits and steps in making an invite (for example, choosing a design, saving a party or paying) using PostHog, hosted in the EU. If you have an account, your visits are linked by a scrambled code made from your account, never your name or email address, so we can see that a visit on your phone and a payment on your laptop were the same person.
Guests' invite and reply pages are not tracked in the browser. For each party we only count, anonymously, how many invites were opened, how many replies came in (yes, no or maybe) and how many presents were claimed, with no names, contact details or what was chosen.
Unless you accept the analytics cookie, nothing is stored on your device for this. We never send names, email addresses, phone numbers or party details. If your browser sends a “Do Not Track” signal, nothing is counted in your browser at all.