Privacy Policy

This Privacy Policy explains how DTK Holdings (Pvt) Ltd collects, uses, and protects personal data when you use EventCraft. We are committed to handling your data responsibly and in line with Sri Lanka's Personal Data Protection Act, No. 9 of 2022.

1. Data we collect

• Account data: your name, email, phone number, and password (stored hashed).
• Event data: event details, tasks, budgets, and the guest information you add (names, emails, phone numbers).
• Vendor data: if you list a business, your profile, packages, and media.
• Payment data: billing records and invoices. Card details are handled by our payment providers — we never store full card numbers.
• Usage data: device, browser, and basic analytics to keep the service reliable.

2. How we use your data

• To provide the Platform — create events, manage guests, send invitations and reminders.
• To process payments and issue invoices.
• To send service messages (email/SMS) and respond to support requests.
• To improve and secure the Platform.

3. Guest data — your responsibility

When you upload a guest list you act as the controller of that data. Please only add contact details you are entitled to use, and tell your guests how their information will be used.

4. Sharing

We share data only with service providers that help us run EventCraft (hosting, email/SMS delivery, payment processing) under appropriate safeguards, and where required by law. We do not sell your personal data.

5. Cookies

We use essential and analytics cookies as described in our Cookie Policy.

6. Retention

We keep personal data only as long as needed to provide the service and to meet legal and accounting obligations. You can delete events and guests at any time.

7. Your rights

You may request access to, correction of, or deletion of your personal data, and object to certain processing. To exercise these rights, contact us using the details below.

8. Security

We use encryption in transit, hashed passwords, and role-based access controls. No system is perfectly secure, but we take reasonable steps to protect your data.

9. Contact

For privacy questions or to exercise your rights, email hello@dtkholdings.com. Postal: DTK Holdings (Pvt) Ltd, 166/B, Kommala, Bentota, 80500, Sri Lanka.