Terms and Conditions, Privacy and Cookie Policy

Privacy and data protection are central to us. We keep it deliberately clear and human.

1. What does the platform do?

Geboortekaartje-online is a digital platform that allows parents to:

• share a completed birth or announcement card via a private link;
• collect contact information (such as address or email) from family and friends;
• manage and export this data for personal, private use.

We do not design, modify, or distribute cards ourselves and do not use contact information for our own purposes.

2. Who is responsible for what?

Parents (users)

The parent who shares a card or creates a contact list is the data controller for the collected contact information.

• the parent decides which data is requested;
• the parent decides how this data is used;
• the parent is responsible for correct and respectful use.

Platform

Geboortekaartje-online acts as a data processor:

• we process data solely on behalf of the parent;
• we do not use this data ourselves;
• we never sell or share this data for marketing or other purposes.

3. What data is processed?

3.1 Parent data (account information)

• Name
• Email address
• Login and account information
• Uploaded card files and public card images
• Created contact lists, private guest photo albums, uploaded photos, and settings

3.2 Recipient and guest data (via public forms and photo uploads)

Only when someone voluntarily fills out a form or uploads photos:

• Name
• Email address (optional)
• Postal address (only if one chooses a physical card)
• Optional uploader name, uploaded photos, and any additional fields set by the parent

Filling out a form or uploading photos is always voluntary.

4. What is data used for?

Data is used solely for:

• displaying shared cards and public card images;
• collecting and managing contact information and private guest photo album uploads for parents;
• exporting contact lists and showing private guest photo albums to the parent;
• security, stability, and abuse prevention of the platform;
• legal obligations, including minimum billing retention where applicable.

We do not use data for:

• advertising or marketing;
• profiling;
• reuse outside the context of the card.

5. Confirmation, access and deletion

After filling out a form or uploading photos, a recipient or guest can:

• view their data;
• request corrections;
• request deletion.

Data can be:

• deleted by the parent;
• or upon request via noreply@geboortekaartje-online.be.

6. Sharing of data

We do not share personal data with third parties, except:

• technical service providers necessary for the platform to function (hosting, storage, email, payments, privacy-friendly analytics);
• government agencies if legally required.

Appropriate agreements have been made with all service providers in accordance with GDPR.

7. Retention periods

• Account, card, and uploaded photo data remains stored as long as the account is active.
• Contact information and private guest photos remain stored until:
  • the parent deletes it;
  • or the account is closed.
• When an account is deleted, parent-owned product data is permanently deleted, including:
  • cards, card images, and private guest photo albums;
  • contact lists and related contacts;
  • public links and thank-you pages.

8. Security

We take appropriate technical and organizational measures to protect data, including:

• secure (HTTPS) connections and 30-day expiring upload links;
• access restrictions and signed URLs for private guest photos;
• monitoring against abuse and stripping metadata from uploaded images where possible.

No online platform can guarantee absolute security, but we do what can reasonably be expected.

9. Cookies and log data

When visiting the platform, we may process limited technical data, such as:

• IP address;
• device type and browser;
• pages visited;
• security and error logs.

We use:

• no advertising cookies;
• no trackers from Meta, Google, or similar parties;
• only functional and analytical cookies where necessary.

Where legally required, we ask for consent in advance.

10. Payments (if applicable)

For payments, we use external payment providers (Stripe).

We do not have access to complete payment information.

The privacy policy of the payment provider applies. We keep only the minimum billing records required by law.

11. Use by minors

The platform is intended for use by adults.

We do not knowingly collect data from minors.

Information or photos about a child on a public card or in a private guest album are provided by the parent or guest under their own responsibility.

12. Changes

We may adjust these terms in case of changes in legislation or functionality.

The most recent version is always available on our website.

13. Contact

For questions about privacy, data protection, or deletion: feedback@geboortekaartje-online.be