URTHLY APPS · THE DETAILS

Privacy policy

Last updated: 4 September 2026

Your enquiry belongs to you. Your guests’ information is not an advertising list.

Who is responsible

Urthly Ltd operates Urthly Apps and is the controller for information collected through urthly.app. Company number 14521952; registered office: 63 Diamond Road, Watford, England, WD24 5EN. Contact hello@urthly.app for privacy questions or requests.

Enquiries and service information

We collect the name, email address, selected service/example and message you submit, plus relevant order, personalisation, support and payment-status information when providing a service. Do not put guest lists, health details or card information in the public enquiry form. We use your enquiry to respond and take steps you request before a contract, and use service information to perform our agreement. Security, administration and proportionate records of correspondence may rely on legitimate interests; accounting and other required records rely on legal obligations.

We may retain campaign labels and referral information to understand where enquiries came from. Analytics session identifiers and optional advertising storage require your choice. An enquiry is not consent to a newsletter, customer-list upload or unrelated advertising emails.

Public examples

The demos use fictional event information. Sample replies and choices can be stored in your browser to make the example work and can be removed with its reset controls or your browser settings. They are not sent as real RSVPs, orders or reservations. Optional first-party/PostHog measurement records allowlisted screen names and actions rather than guest names or message contents. We do not enable session replay on this showcase.

Advertising measurement

With your advertising consent, the collection homepage uses OpenAI’s measurement pixel to attribute visits, selected examples, interactions and successful enquiries to ads in ChatGPT. It can read an OpenAI click reference (oppref), store a first-party __oppref cookie and process event, browser and device information. Automatic advanced matching can detect supported contact information entered on this homepage, normalise it and hash it in your browser for conversion matching. Those hashes remain personal data; raw contact details are not sent by this matching feature.

Our integration does not forward free-form enquiry messages and opts events out of future user-level personalisation. We do not upload guest lists. The OpenAI pixel is not installed in full demos, guest RSVP forms or private/customer apps. Google Ads and Meta attribution may also run where configured and consented. Rejecting optional tracking does not prevent an enquiry or use of the examples.

Use Cookie preferences at the foot of any public page to change your choice. Withdrawal stops future tracking and cannot recall events already sent. See our cookie policy and the providers’ information: OpenAI, Google, Meta and PostHog.

Service providers and hosting

Urthly Apps runs on Cloudflare for hosting, security, databases, file storage and service email delivery. PostHog and Google Analytics provide optional usage analytics where configured. OpenAI, Google and Meta provide optional advertising measurement as described above. A payment provider identified before payment, such as Stripe, handles card processing; we do not store full card details. Our contact mailbox and business administration providers may handle correspondence.

These providers may process information outside the UK or your country. Applicable processing agreements and transfer safeguards must cover the service involved, such as adequacy arrangements or approved contractual safeguards. Providers’ own notices explain their processing and retention. We limit access to people and services that need it for the relevant purpose.

Actual event and guest data

A commissioned invitation or app may collect replies, messages, photos, preferences and other information described in that event’s notice. The organiser’s and Urthly’s responsibilities are agreed for that service; for organisational clients we generally process guest information on their behalf. We do not treat real event data as demo data or use it for our own marketing. Sensitive information, such as dietary/health details, needs particular care and an appropriate basis before collection.

One-off event hosting continues until 30 days after the agreed event date. At completion we provide the authorised customer with an export of event data and files we hold, subject to access rights and legal restrictions. The handover specifies how to receive the export securely and the deletion timetable; the live link stops when hosting ends. Contact us if you are a guest and need help identifying the organiser responsible for your data.

Retention and choices

Enquiries are normally retained for up to 24 months unless a continuing service or justified requirement needs longer. Billing/accounting records may need to be kept for up to seven years. First-party analytics are normally retained for up to 13 months. Consent choices are renewed within 395 days and when this consent notice changes. Event-data retention is set out in the event agreement and handover, rather than an indefinite hosting promise.

Your rights

Depending on the circumstances, you can request access, correction, erasure, restriction or portability, object to processing based on legitimate interests, and withdraw consent. Some records must be retained by law. We may need to verify your identity before disclosure. Contact hello@urthly.app. You can complain to the Information Commissioner’s Office or the applicable authority where you live.

Updates

We keep this notice under review. A new purpose requiring consent will not be enabled using an old, uninformed preference.