Privacy Policy

We collect limited information to provide and improve our services:

• Email address — provided voluntarily when verifying premium access.
• Brand / company name — entered by you when creating a greeting card.
• Uploaded logo images — processed locally in your browser; not stored on our servers.
• Usage data — anonymous data such as pages visited and time spent, collected via browser analytics.
• Device & browser info — type, operating system, and screen resolution, used solely for compatibility improvements.

We use the information we collect for the following purposes:

• To verify premium access and activate paid features.
• To generate personalised shareable QR codes and links.
• To remember your preferences within the current session.
• To improve site performance, fix bugs, and enhance user experience.
• To respond to support requests sent through WhatsApp or email.

We will never use your data for unsolicited marketing or sell it to third parties.

We do not sell, rent, or trade your personal information. We may share limited data only in these circumstances:

• Service providers: Trusted third parties (such as hosting providers) who help us operate the platform, bound by confidentiality agreements.
• Legal requirements: If required by Sri Lankan law or a valid court order.
• Business transfer: In the unlikely event of a merger or acquisition, under the same privacy protections.

SecureVesak uses minimal cookies for essential functionality only:

• Session cookies — temporary cookies that expire when you close your browser, used to maintain your design session.
• Analytics cookies — anonymous, aggregated data to understand how visitors use the site. No personally identifiable information is tracked.

You may disable cookies in your browser settings; however, some features may not function correctly without them.

We take reasonable technical and organisational measures to protect your data, including:

• HTTPS encryption for all data transmitted between your browser and our servers.
• Restricted access to any stored email addresses (premium verification only).
• Regular security reviews of our platform.

No method of transmission over the internet is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

You have the right to:

• Access — request a copy of any personal data we hold about you.
• Correction — ask us to correct inaccurate information.
• Deletion — request that we delete your data (right to be forgotten).
• Withdrawal — withdraw consent to data processing at any time.
• Portability — receive your data in a commonly used, machine-readable format.

To exercise any of these rights, contact us via WhatsApp or the email address below.

FestivalCards is not directed at children under the age of 13. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will promptly delete it.

For any privacy-related questions, requests, or concerns, please reach out to us:

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated revision date. Continued use of FestivalCards after changes constitutes acceptance of the updated policy.