For our guests in Europe and the UK.
Maṅgalya is built in India and welcomes visitors internationally. Where the EU General Data Protection Regulation or UK GDPR applies to our processing, we aim to honour it — through consent-first tracking, real data rights, and minimal collection. This page is an overview, not legal advice, and it does not claim certification: there is no such thing as “GDPR certified”.
Last updated: 26 September 2026
Your rights, in practice
- Access and portability — download your data as structured JSON from Account → Privacy & Data.
- Rectification — correct account and invitation content directly, or file a correction request.
- Erasure — delete personal invitations, guests, RSVPs, photos, and your account through the audited deletion workflow.
- Objection and withdrawal — analytics runs on opt-in consent; withdraw anytime via Cookie settings and collection stops.
File any of these from Privacy & Data (signed in) or via the support address in our Privacy Policy. EU visitors may also complain to their local supervisory authority; UK visitors to the ICO.
Where data travels
Our providers operate across regions (see Subprocessors). Transfer mechanisms and data-processing agreements are under legal review — we list the actual vendors and mark what is still unconfirmed rather than asserting safeguards we haven't verified.
Exercise your rights from your account.
Access, export, correction, erasure, objection — file any of them signed in, and follow the status yourself.