Privacy Policy

1. General provisions

1.1. This Privacy Policy (the “Policy”) describes what personal data Individual Entrepreneur Ivanytskyi Roman Rizvanovych (RNOKPP 3012411355), operating under the trademark BigDaySpace (the “Company,” “we”), collects and processes in connection with bigday.space (the “Service”), for what purposes, on what legal grounds, and what rights data subjects have.

1.2. The Company acts as the controller of Organizers’ personal data and as a processor of Guest personal data entered by Organizers (see Section 4).

1.3. By using the Service, you agree to this Policy. If you do not agree with it, please stop using the Service.

2. What data we collect

2.1. Organizer data: name, email address and/or phone number (depending on the registration method chosen), password (encrypted), Event Page data (title, date, location), payment information (excluding full card details), technical data (IP address, device type, cookies — see the Cookie Policy).

2.2. Guest data: name, optionally a plus-one’s name, RSVP status, and any other data the Organizer chooses to request through the RSVP form. This data is entered by the Organizer or by the Guest themselves, without creating an account.

2.3. The Company does not knowingly collect personal data of persons under 18, except where such data is entered by an Organizer (for example, a child’s name as a Guest’s plus-one) for the purpose of organizing the event.

3. Purposes and legal grounds for processing

3.1. We process personal data to: provide the Service’s functionality (Event Pages, RSVP, wishlist, map); process payments; communicate with the User (service notices, replies to inquiries); ensure security and prevent fraud; and comply with legal requirements (including tax record-keeping).

3.2. Legal grounds for processing: performance of a contract (the Terms of Service) with the Organizer; the Company’s legitimate interest in operating and securing the Service; consent — for analytics and advertising cookies; and compliance with legal obligations.

4. Guest data entered by the Organizer

4.1. Guest data is entered by the Organizer. The Organizer is solely responsible for having a lawful basis to collect and transfer Guest data to the Service, including informing the Guest that an Event Page has been created and that they may contact the Company to exercise their rights.

4.2. A Guest may contact bigdayspace@gmail.com to obtain information about their data, request its correction, or request its deletion. The Company reviews such requests and, where necessary, notifies the relevant Organizer.

5. Who we share data with

5.1. We share data with the following categories of recipients involved in providing the Service:

• WayForPay — payment processing (receives the data necessary to process a payment);
• Twilio Inc. (United States) — sending SMS messages (e.g., verification codes for phone-based registration, RSVP confirmations);
• Amazon Web Services, Inc. — hosting and database storage for the Service.

5.2. Because Twilio Inc. and Amazon Web Services, Inc. are US-based companies, processing may involve transferring data outside Ukraine. The Company takes reasonable steps to ensure such providers are bound by agreements that provide an adequate level of data protection (standard contractual clauses, participation in recognized data-protection frameworks).

5.3. We do not sell personal data to third parties and do not share it for third-party marketing purposes without the User’s separate consent.

6. Cookies

6.1. The Service uses cookies and similar technologies. A detailed list and how to manage them are described in a separate Cookie Policy.

7. Data retention

7.1. Organizer account data is retained for as long as the account is in use.

7.2. If an account is deleted, data is retained for 30 days (to allow recovery in case of accidental deletion), after which it is permanently deleted, except for data whose retention is required by law (for example, payment records, in accordance with Ukrainian tax law retention periods).

7.3. Guest data is deleted together with the corresponding Event Page under the same rules.

8. Data subject rights

8.1. Under the Law of Ukraine “On Personal Data Protection,” you have the right to: know the sources and location of your data; receive information about the purposes of processing; access your data; request correction of inaccurate data; withdraw consent to processing; request deletion of your data; and object to processing where you have lawful grounds to do so.

8.2. To exercise these rights, contact bigdayspace@gmail.com. We respond to requests within 30 days.

9. Data security

9.1. The Company implements organizational and technical measures to protect personal data against unauthorized access, loss, or destruction, including password encryption, restricted database access, and reliable infrastructure providers (AWS).

9.2. Despite these measures, no method of transmitting data over the internet is completely secure; the Company cannot guarantee absolute security.

10. Changes to this Policy

10.1. The Company may update this Policy. The current version is published on the website with its effective date. Users will be additionally notified of material changes.

11. Contact