Privacy Policy
Last updated: September 27, 2026
Momento(“Momento”, “we”, “us”) is an event planning and catering company based in Karachi, Sindh, Pakistan. This policy explains what personal data we collect through momento.pk, WhatsApp and email, why we collect it, and the choices you have. It applies to customers, people who send us enquiries, partner vendors and anyone who visits the website.
The short version
- We collect only what we need to quote for and deliver your event, run your account and keep the site secure.
- We share your event details only with the partner vendors needed for your event, and with the service providers that run our website and email.
- We never sell your data. We don't use analytics, tracking pixels or advertising cookies.
- You can ask to see, correct or delete your data at any time by emailing support@momento.pk.
1. What we collect and why
The table below lists everything we collect, why, and how long we keep it.
| What | When | Why we use it | How long we keep it |
|---|---|---|---|
| Name, email, WhatsApp/phone number | Enquiry, contact or corporate forms, WhatsApp, email | To reply, prepare a quote and plan your event (steps before and under a contract with you) | Up to 24 months after your last contact if you don't book; see “Bookings” if you do |
| Event details: type, date, area, guest count, budget band, services, notes | Enquiry forms and conversations | To design, price and deliver the event you ask for | As above |
| Bookings: contract, quotes, invoices, payment records | When you book with Momento | To perform our contract with you and meet tax and accounting law | As long as Pakistani tax and accounting law requires, generally 6 years after the tax year ends |
| Account details from Google sign-in: name, email, profile photo | When you sign in with Google | To create and secure your account. We never see your Google password | Until you ask us to delete your account |
| Planning tools: partner name, wedding date, budget items, checklist, registry, seating plan, guest list | When you use the planning tools in your account | Only to run those tools for you. We don't contact your guests | Until you delete the entry, or ask us to delete your account (which deletes all of it) |
| Reviews and review photos | When you write a review | To publish genuine feedback after moderation. Photos stay private until approved | While the review is published; unapproved photos are deleted |
| Newsletter email address | When you subscribe and confirm by email | To send updates you asked for (your consent) | Until you unsubscribe, using the link in every email |
| “Notify me” requests for other cities: city, email/phone, note | City interest form | To tell you when we start serving your city (your consent) | Until we launch there or you ask us to delete it |
| Partner vendor details: business name, contact, service areas, portfolio, Google Business Profile listing details you choose to import | Vendor applications and vendor accounts | To assess, contract and work with partner vendors, and to show approved vendor profiles | While you're a partner, then as required for our records |
| IP address and request details | Every request to the website | To stop spam and abuse (form rate limits) and keep the site secure (legitimate interest) | Rate-limit counters expire within 1 hour; server logs are kept by our host for a short period |
We don't collect sensitive data such as CNIC numbers, health information or religious beliefs through the website. Please don't include them in free-text notes.
3. WhatsApp, links and third-party content
- WhatsApp. Our WhatsApp buttons open WhatsApp (owned by Meta) with a pre-filled message. Nothing is sent until you press send. Messages you send are handled under WhatsApp's privacy policy as well as this one.
- Images.Photos on our pages, including stock photos, are delivered through our own server. Your browser doesn't connect to the photo libraries directly.
- Fonts. Our fonts are served from our own server, not from Google Fonts.
- Videos.Some event videos may play from the host where they're stored, which will see your IP address when the video loads.
- Links to other sites. Vendor Instagram, Facebook or TikTok links and similar take you to sites with their own privacy policies.
- We don't embed social media widgets, maps, chat widgets, analytics or advertising tags.
5. Where your data is stored
Our database is hosted by our hosting provider. Some of our service providers (for example Google and Resend) process data outside Pakistan. When that happens we use reputable providers that protect data with contractual and technical safeguards.
6. How we protect it
- Encrypted connections (HTTPS) across the website
- Google sign-in, so we never store passwords
- Staff access limited by role, and admin actions restricted to authorised team members
- Uploaded photos checked by file type and kept private until a moderator approves them
- Rate limits on forms to block spam and automated abuse
7. Your rights
You can ask us at any time to:
- give you a copy of the personal data we hold about you
- correct anything that's wrong
- delete your data, unless we must keep it (for example invoices under tax law)
- stop using your data for a particular purpose, or withdraw a consent you gave
- stop marketing emails. Every email has an unsubscribe link
Email support@momento.pk from the address we have on file. We reply within 30 days. There is no charge.
8. Guest lists and other people's data
If you add guests, family members or a partner to your planning tools, please make sure they're happy for you to do so. We use that information only to run your tools. We never message your guests; any invitation you send via WhatsApp is sent by you, from your own phone.
9. Children
Momento is for adults (18+) planning or providing event services. We don't knowingly collect data from children. If you think a child has given us personal data, contact us and we'll delete it.
10. Law that applies
We handle personal data in line with the laws of Pakistan, including the Prevention of Electronic Crimes Act, 2016 and the Electronic Transactions Ordinance, 2002. When a Pakistani personal data protection law applies to us, we will follow it and update this policy. If you're unhappy with how we've handled your data, please contact us first so we can put it right.
11. Changes to this policy
When we change this policy we update the date at the top. If a change affects how we use data you have already given us, we'll tell you by email or WhatsApp before it takes effect.
12. Contact
Momento, Karachi, Sindh, Pakistan. Email support@momento.pk, WhatsApp +92 334 222 6328, or use our contact page.
Questions about this page? Email support@momento.pk or WhatsApp +92 334 222 6328.