Last updated 14 October 2026
Privacy policy
YayWish is a birthday party invite with one shared gift. We keep as little about you as we can, we never sell it, and we never show anyone how much a guest gave except the parent who made the party.
Who we are
YayWish is run by Ted Clark, a sole trader based in Canterbury, Kent, UK. For anything about your information, email hello@yaywish.com. We are the “controller” of the information described here under UK data protection law (UK GDPR and the Data Protection Act 2018). We are registered with the Information Commissioner's Office, registration number ZC275206.
What we collect
If you make a party (parents)
- Your email address, so you can sign in.
- The party details you type in: your child's first name and age, the date, time and venue, your invite message, the gift and any photos you add.
- Your Stripe account ID, so guests' gifts go to you. Stripe collects your ID and bank details on its own pages. We never see or store them.
If you're a guest
- Your RSVP: your name, whether you're coming, how many children and any note.
- If you chip in: your name (or “A friend”), the amount, your message and any photo you add.
- Your card details go straight to Stripe. We never see or store them.
Small technical things
- A sign-in cookie for parents, and a small note in your browser after you RSVP so the page remembers your reply. These are needed for the site to work, so we don't ask about them. We don't use advertising cookies or trackers in the app.
Who sees what
- Anyone with the party link sees the invite (including the date, time and venue), the gift, and guests' names and messages. Never amounts, or who has chipped in. So only share the link with people you'd invite.
- Only the parent sees who gave what, guest photos and private names (“keep my name private” hides your name from other guests, not from the parent).
Why we use it (our lawful basis)
- To run the service you asked for (contract): making the party page, taking RSVPs, passing gifts and messages to the parent.
- Legitimate interests: keeping YayWish safe, stopping fraud and fixing problems.
- Legal obligation: keeping payment records where the law requires it.
We only email you about your party or your sign-in. No marketing unless you ask for it.
Children
YayWish is for adults. Parents and guests must be 18 or over. A parent may add their child's first name, age and photo to the invite. Please only add what you're happy for the people you share the link with to see, and don't add a child's surname or school.
Who we share it with
Only the companies that help us run YayWish, and only what they need:
- Stripe: payments, and parents' payment accounts.
- Supabase: our database and photo storage, hosted in London.
- Vercel: runs the app.
- Resend: sends sign-in emails, and tells us when a new party is made (first name, age and party date only).
Some of these companies may handle information outside the UK. When they do, they use the legal safeguards UK law requires. We never sell your information. We'd only share it otherwise if the law made us.
How long we keep it
We keep party pages, RSVPs, messages and photos while the parent's account is open, so they can look back at them and print the keepsake card. A parent can ask us to delete a party or their whole account at any time. Payment records are kept by Stripe, and by us where needed, for as long as the law requires (usually 6 years in the UK).
Your rights
You can ask to see the information we hold about you, correct it, delete it, limit how we use it, object to how we use it, or get a copy to take elsewhere. Just email hello@yaywish.com. We'll reply within a month. If you're a guest and want a message or photo removed, email us with the party link and we'll sort it.
If you're not happy with how we've handled your information, you can complain to the Information Commissioner's Office at ico.org.uk. We'd like the chance to put it right first, though.
Changes
If we change this policy, we'll update the date at the top. Big changes, we'll tell parents by email.