Privacy Policy

How Celavivo collects, uses, and protects your personal data

Innotevia Limited, trading as Celavivo

Last updated: 01/06/2026

This Privacy Policy explains how Innotevia Limited, trading as Celavivo (“Celavivo“, “we“, “us“, or “our“), collects, uses, stores, shares, and protects personal data when you visit or use the Celavivo website, platform, and related services.

Celavivo is an online marketplace connecting customers planning events with local event service providers and vendors, including photographers, venues, DJs, catering services, florists, makeup artists, and more. We are based in the Republic of Cyprus. Vendors registered on Celavivo are based in Greece and Cyprus, while customers may use the platform from any country. We process personal data in accordance with applicable data protection laws, including the EU General Data Protection Regulation (GDPR).

1. Who We Are

The data controller responsible for your personal data is:

Company	Innotevia Limited
Trading as	Celavivo
Jurisdiction	Republic of Cyprus
Registered address	20 Dimotikis Agoras, Larnaca, 6250, Cyprus
Email	[email protected]
Website	celavivo.com

2. Scope of This Privacy Policy

This Privacy Policy applies to personal data collected through the Celavivo website, platform, customer and vendor accounts, booking processes, messaging tools, support channels, dispute or complaint submissions, AI Smart Matching interactions, RSVP tools, and related communications.

Celavivo operates as an online marketplace platform connecting customers with independent vendors and event service providers. This Privacy Policy applies to the personal data that Celavivo processes in connection with operating that platform. It applies to:

• website visitors;
• customers who browse, make enquiries, place bookings, or create an optional account, regardless of their country of residence;
• vendors based in Greece or Cyprus who register, create profiles, and list services on the platform;
• event organisers who use RSVP or event management tools provided by the platform;
• users who contact us, submit a complaint or report, or otherwise interact with Celavivo through our communication channels.

3. Personal Data We Collect

3.1 Information you provide to us

We may collect personal data that you provide directly, including:

• name;
• email address;
• telephone number;
• billing and mailing addresses;
• account registration details and login credentials;
• booking information (event type, event date, venue or location, requirements, and notes);
• vendor profile, business, and listing information;
• content submitted to profiles, listings, forms, messages, support requests, complaints, or reports;
• information submitted through the AI Smart Matching feature (such as vendor preferences, budget, event details, and planning requirements);
• RSVP-related information submitted by event organisers or guests through event management tools;
• communications sent to us or through the platform.

3.2 Information collected automatically

When you use Celavivo, we may automatically collect certain technical and usage information, including:

• IP address;
• browser type and version;
• device type and operating system;
• pages viewed and actions taken on the website;
• date and time of visits;
• referring URLs and website interaction data;
• cookie and similar technology identifiers.

3.3 Vendor-related information

Vendors provide information directly to Celavivo for the purposes of onboarding, account setup, profile and listing creation, subscription management (where applicable), and operation of their presence on the platform. This includes business name, service category, listing descriptions, portfolio content, contact details, pricing information, and other profile content submitted during registration or account management.

For vendors on the subscription plan, billing details for recurring subscription payments are collected and processed directly by Stripe through Stripe Billing. Celavivo does not directly collect or store full payment card details. Where vendor payout accounts are used, bank account and payout-related information is collected directly by Stripe during Stripe’s hosted onboarding process. Stripe acts as an independent data controller for identity verification and KYC information it collects during vendor onboarding. Vendors should review Stripe’s Privacy Policy for full details of how Stripe processes that data.

Please note that certain vendor listing and profile information — such as service descriptions, portfolio images, service categories, and general location or region — is made publicly visible to customers browsing the platform. Exact vendor business addresses may not always be publicly displayed; the platform may show region or general location information instead.

3.4 Customer-related information

Customers may browse the platform and make enquiries or bookings with or without creating an account. We collect the information necessary to process bookings, facilitate vendor communications, provide support, maintain required records, and operate the platform.

4. How We Collect Personal Data

We collect personal data when:

• you visit and browse the Celavivo website;
• you create a customer or vendor account;
• you make a booking or submit an enquiry through the platform;
• you complete vendor onboarding, create a vendor profile or listing, or subscribe to a paid vendor plan;
• you contact us by email, form, support request, complaint, or report;
• you use the messaging system between customers and vendors;
• you use the AI Smart Matching feature;
• you use RSVP or event management tools provided by the platform;
• you interact with cookies, analytics tools, advertising pixels, and related technologies on our website.

5. How We Use Personal Data

We use personal data for the following purposes:

• to operate, maintain, and improve the Celavivo platform;
• to create and manage customer and vendor accounts;
• to facilitate and process bookings, the Booking Fee, vendor subscriptions, and related platform transactions;
• to onboard vendors and manage vendor profiles and listings;
• to share relevant booking and event details with the relevant vendor to enable fulfilment of the booked service;
• to generate and administer booking-related documentation, including digital contracts between customers and vendors where applicable;
• to provide customer support and respond to enquiries;
• to enable communication between customers and vendors;
• to review relevant platform communications, complaints, reports, or submissions where necessary for dispute handling, chargeback resolution, fraud prevention, abuse prevention, policy enforcement, or legal compliance;
• to send transactional, service-related, onboarding, and administrative communications;
• to operate RSVP and event management tools and share guest information with the relevant event organiser;
• to analyse usage and improve website performance and user experience;
• to serve and measure advertising on Meta platforms (Facebook and Instagram) in connection with our marketing activities;
• to protect the platform, users, and business against fraud, misuse, security risks, and unlawful activity;
• to comply with legal, accounting, tax, and regulatory obligations.

6. Legal Bases for Processing

Under the GDPR, we process personal data only where we have a valid legal basis. Depending on the context, this may include:

• Performance of a contract – where processing is necessary to provide our platform services, manage accounts, facilitate bookings, administer vendor subscriptions, or support vendor participation on the platform;
• Legal obligation – where processing is necessary to comply with applicable laws, regulations, tax rules, accounting obligations, or lawful requests from public authorities;
• Legitimate interests – where processing is necessary to operate and improve the platform, secure our services, prevent fraud, handle disputes and chargebacks, review complaints and reports, conduct marketing and platform growth activities, and protect our legal interests, provided such interests are not overridden by your rights and interests;
• Consent – where consent is required by law, including in certain cases involving cookies, tracking technologies, or optional marketing communications.

Where processing is based on consent, you may withdraw your consent at any time without affecting the lawfulness of processing carried out before the withdrawal. Where processing is based on legitimate interests, you have the right to object; please contact us at [email protected].

7. Customer Accounts, Guest Browsing, and Vendor Profiles

7.1 Customer accounts and guest browsing

Customers may browse vendor listings and submit enquiries or bookings through Celavivo with or without creating a registered account. Where available, customers may choose to register an account for easier access to booking history, communications, and account-related features.

We process the data necessary to facilitate bookings and vendor communications, provide support, maintain required transaction and booking records, and protect the platform against fraud or misuse.

7.2 Vendor accounts and profiles

Vendors are required to create accounts and profiles in order to list their services on Celavivo. Vendors may choose between a commission-based plan or a subscription-based plan. We process vendor information to manage onboarding, maintain listings and profiles, administer commercial and subscription arrangements, and support the functioning of the platform.

Vendor listing and profile information that vendors submit — including service descriptions, photos, portfolio content, service categories, pricing, and general location — is made visible to customers browsing the platform as part of the core marketplace functionality.

8. Bookings, Booking Fee, and Service Contracts

Celavivo offers vendors two operating models: a commission-based plan and a subscription-based plan. The data flows differ between the two.

Commission-based bookings. When a customer books a vendor on the commission plan, Celavivo collects a Booking Fee equal to 12% of the agreed service value (inclusive of applicable VAT) at the time of booking. The Booking Fee is Celavivo’s fee for confirming the booking and providing the digital contract. The remaining 88% is the vendor’s fee and is paid directly by the customer to the vendor outside the Celavivo platform.

Subscription-based bookings. When a customer books a vendor on the subscription plan, no payment passes through Celavivo. All payments — including any deposit and the final balance — are arranged and paid directly between the customer and the vendor outside the platform.

Following a booking, a digital service contract may be generated between the customer and the vendor through the platform. Celavivo may store booking details, event details, contract-related documentation, and (for commission-based bookings) Booking Fee transaction records, for the purposes of platform operation, support, dispute handling, chargeback resolution, legal compliance, and accounting.

When a booking is made, relevant customer information is shared with the relevant vendor to enable service delivery. This may include the customer’s name, email address, phone number (if provided), event type, event date, venue or location, booking requirements, and any notes or instructions submitted at the time of booking. Vendors receive only the information necessary to provide the booked service.

9. Payments and Payment Providers

Payments processed through Celavivo are handled by our third-party payment provider, Stripe:

• Booking Fee payments (commission plan): The 12% Booking Fee charged to customers at the time of booking is processed by Stripe. Payment card details are collected and processed directly by Stripe and are not stored by Celavivo. Stripe acts as our processor for this payment flow.
• Vendor subscription payments (subscription plan): Recurring subscription payments from vendors are processed by Stripe Billing. Payment card or bank details are collected and processed directly by Stripe and are not stored by Celavivo. Stripe acts as our processor for this payment flow.
• Vendor onboarding (where applicable): Where vendors are required to provide identity verification or payout information, Stripe collects this information through its hosted onboarding process. Stripe acts as an independent data controller for identity verification and KYC information.

Users and vendors should review Stripe’s Privacy Policy for full details of how Stripe processes their data.

No payment for vendor services (other than the Booking Fee on commission bookings) passes through Celavivo. Payments for the vendor’s services are arranged and made directly between the customer and the vendor.

10. Customer–Vendor Communications and Dispute Review

Celavivo provides messaging tools that allow customers and vendors to communicate regarding bookings and services. Messages exchanged through the platform may contain personal data.

Celavivo may also receive and process personal data submitted through complaints, reports, or dispute-related communications submitted by customers or vendors.

Celavivo reserves the right to access, review, preserve, and use message content and related submissions where reasonably necessary for:

• dispute resolution between customers and vendors;
• chargeback handling and resolution;
• fraud detection, prevention, or investigation;
• abuse prevention and platform safety;
• review of complaints or reports relating to listings, content, conduct, or suspected breaches of platform rules;
• enforcement of our policies, terms, or legal rights;
• compliance with legal obligations or lawful requests from authorities.

Such access is limited to authorised personnel and carried out only where necessary and proportionate to the stated purposes. Celavivo does not undertake to monitor messages routinely; the access right described in this section is exercised at Celavivo’s discretion.

11. Marketing Communications and Social Media

We may send service-related and operational communications (such as booking confirmations, account notifications, and security alerts) to users where necessary for platform use, account administration, bookings, onboarding, support, or security. These communications do not require consent and cannot be opted out of without closing the relevant account.

We may also send marketing communications about Celavivo services, vendor tools, promotions, platform updates, or other business-related information:

• To existing customers and vendors, on the basis of legitimate interests in promoting similar services, with a clear opt-out in every communication;
• To prospective users who have not yet transacted with Celavivo, on the basis of consent given at the point of sign-up or contact.

Recipients of marketing communications may opt out at any time by following the unsubscribe instructions in those communications or by contacting us at [email protected].

Celavivo maintains a presence on social media platforms, including Facebook and Instagram. If you interact with our social media pages, your data may also be processed by the relevant platform in accordance with its own privacy policy. Celavivo may also run advertising campaigns on Meta platforms using data such as advertising pixels, custom audiences, and analytics tools.

12. Cookies and Tracking Technologies

Celavivo uses cookies and similar technologies, including tools related to analytics, tag management, advertising measurement, and consent management.

We use Google Analytics 4 and Google Tag Manager to understand how users interact with our website and to improve our services. We also use the Meta Pixel in connection with our advertising activities on Facebook and Instagram, which may enable advertising measurement, retargeting, and audience-building features.

Full details about the cookies and similar technologies used on Celavivo, including their purposes and how users can manage preferences, are provided in our separate Cookie Policy.

13. AI Smart Matching

Celavivo offers an AI Smart Matching feature designed to help customers find suitable event service providers based on their requirements and preferences.

If you use the AI Smart Matching feature, you may submit information such as vendor names or links, event type and details, budget, preferences, and other planning information. This information is processed to generate personalised vendor comparisons and recommendations.

This feature is powered by OpenAI. Your inputs, outputs, and any personal information submitted when using this feature will be shared with and processed by OpenAI to generate responses. OpenAI may process this data in the United States or other non-EEA countries. You must not submit sensitive personal data through AI-powered features. You may review OpenAI’s privacy practices at openai.com/policies/privacy-policy.

If you do not wish to use the AI Smart Matching feature, you may simply choose not to use it.

14. RSVP and Event Management Tools

Celavivo offers a custom-built RSVP and event management tool that allows event organisers to generate RSVP links or forms and collect guest responses. The RSVP tool is operated entirely on Celavivo’s own platform infrastructure.

Guest responses submitted through the RSVP tool — such as name, attendance confirmation, dietary preferences, and any other details provided in the form — are made available to the event organiser for event-management purposes. In ordinary operation, Celavivo does not access individual guest responses; the event organiser is the primary user of that data.

Celavivo and the event organiser act as joint controllers for guest personal data submitted through the RSVP tool. Celavivo provides the technical infrastructure, determines security and retention parameters for the tool, and may technically access guest data in limited circumstances (for example, to investigate abuse, to comply with a legal obligation, or to address a technical issue). The event organiser determines what data to collect, communicates with guests, and uses the responses for their event.

Event organisers who use these tools are responsible for ensuring that guests are appropriately informed about how their information will be used, for obtaining any necessary consents, and for complying with applicable data protection obligations in respect of guest data, including where guests are minors.

15. How We Share Personal Data

We may share personal data where necessary with:

• Vendors and service providers on the platform, to enable fulfilment of booked services (limited to the booking and event details necessary for service delivery);
• Payment service providers, including Stripe and Stripe Billing, for Booking Fee processing, vendor subscription billing, and (where applicable) vendor onboarding;
• Email and communications service providers, for transactional, operational, and marketing communications;
• Hosting, analytics, tag management, and technical service providers, including providers operating under Google’s infrastructure (Google Analytics 4, Google Tag Manager);
• Advertising platforms, including Meta (Facebook and Instagram), in connection with advertising measurement and marketing activities;
• AI service providers, specifically OpenAI, in connection with AI Smart Matching feature interactions;
• Accounting and finance tools, including Zoho Books, for accounting and record-keeping in connection with Booking Fee transactions and vendor subscription billing;
• Professional advisers, auditors, insurers, and legal advisers;
• Regulators, public authorities, courts, or law enforcement where required by law or reasonably necessary to protect legal rights, platform safety, or compliance interests.

We do not sell personal data.

16. International Data Transfers

Some of our service providers may process personal data outside Cyprus or outside the European Economic Area (EEA). This includes providers such as Stripe, Google, OpenAI, and Meta, which may process data in the United States or other non-EEA countries.

Where personal data is transferred outside the EEA, we take steps to ensure that appropriate safeguards are in place in accordance with the GDPR. These safeguards may include:

• reliance on the European Commission’s adequacy decisions for transfers to countries deemed to provide adequate protection;
• Standard Contractual Clauses (SCCs) approved by the European Commission, where required for transfers to countries without an adequacy decision;
• other transfer mechanisms permitted under GDPR where applicable.

You may request further information about the transfer mechanisms we rely on by contacting us at [email protected].

17. Data Retention

We retain personal data only for as long as necessary for the purposes described in this Privacy Policy. The following indicative retention periods apply:

• Booking and transaction records, Booking Fee records, vendor subscription records, and accounting records: retained for at least the period required under applicable Cyprus tax, VAT, accounting, and legal obligations, generally not less than 7 years, and longer where necessary for legal, dispute, or compliance purposes;
• Digital contracts and booking documentation: retained for at least the period necessary to resolve potential disputes, enforce contractual rights, and meet legal obligations;
• Active vendor account data: retained for the duration of the vendor’s active account relationship with Celavivo, and for a reasonable period thereafter for dispute handling, legal, and compliance purposes;
• Active customer account data: retained for the duration of the customer’s active account, and for a reasonable period thereafter;
• Support, complaint, and dispute communications: retained for a reasonable period after resolution, generally up to 3 years, unless a longer period is required for legal proceedings or compliance;
• RSVP and event management data: retained for a reasonable period necessary to support the event organiser and fulfil the purposes for which it was collected;
• Website analytics and usage data: retained in accordance with the settings and policies of the relevant analytics provider.

When a customer or vendor closes their account, we delete or anonymise personal data that is not subject to legal retention obligations. Booking records, contracts, Booking Fee records, vendor subscription records, and accounting data may be retained for the retention periods stated above even after account closure, as required by law.

Where retention periods are driven by legal, tax, or regulatory obligations, those obligations take precedence over shorter internal retention periods. Data that is no longer required is deleted or anonymised in a secure manner.

18. Data Security

We take reasonable technical and organisational measures designed to protect personal data against unauthorised access, disclosure, alteration, loss, or destruction. However, no method of transmission over the internet or electronic storage can be guaranteed to be completely secure. You should only access the services within a secure environment.

19. Your Rights Under GDPR

As a resident of the European Economic Area (EEA) — which includes Cyprus and Greece — you have certain rights under the GDPR with respect to your personal data. These rights include:

• Right of access — to request a copy of the personal data we hold about you;
• Right to rectification — to request that we correct inaccurate or incomplete personal data about you;
• Right to erasure — to request that we delete your personal data in certain circumstances;
• Right to restriction of processing — to request that we restrict the processing of your personal data in certain circumstances;
• Right to data portability — to receive your personal data in a structured, commonly used, and machine-readable format and to transmit it to another controller, where applicable;
• Right to object — to object to processing based on legitimate interests;
• Right to withdraw consent — where we rely on consent to process your personal data, you may withdraw that consent at any time without affecting the lawfulness of prior processing;
• Right to lodge a complaint — with the competent supervisory authority.

To exercise any of these rights, please contact us at [email protected]. We will respond within the timeframe required by applicable law (generally within one month of receiving your request).

You also have the right to lodge a complaint with the competent supervisory authority:

• Cyprus: Office of the Commissioner for Personal Data Protection — www.dataprotection.gov.cy;
• Greece: Hellenic Data Protection Authority (Αρχή Προστασίας Δεδομένων Προσωπικού Χαρακτήρα) — www.dpa.gr;
• Or the supervisory authority in your country of residence within the EEA.

20. Children’s Privacy

Celavivo is intended for use by adults. Bookings, account registrations, and vendor subscriptions must be made by persons aged 18 or over. We do not knowingly collect personal data directly from children where doing so would breach applicable law.

Personal data about minors may be processed in connection with bookings where children are participants or guests of an event (for example, christenings, birthday parties, weddings with child guests, or RSVP responses listing minors). Such data is provided by the adult organising the event or the adult making the booking, who is responsible for ensuring they have appropriate authority to share that data and, where required, for obtaining parental or guardian consent.

If you believe a child has provided personal data to us improperly, please contact us so we can review the matter.

21. Third-Party Links and Services

Celavivo may contain links to third-party websites, platforms, or services. We are not responsible for the privacy practices of those third parties, and users should review their privacy policies separately.

22. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect legal, technical, or operational changes. Any changes will be posted on this page and the “Last updated” date will be revised accordingly. Where changes are material, we will take reasonable steps to notify users.

23. Contact Us

If you have any questions, concerns, or requests regarding this Privacy Policy or your personal data, please contact:

Company	Innotevia Limited, trading as Celavivo
Jurisdiction	Republic of Cyprus
Address	20 Dimotikis Agoras, Larnaca, 6250, Cyprus
Email	[email protected]