Privacy notice

1. Who is responsible for your information?

sendgifts.uk is responsible for the personal information described in this notice. For privacy questions or to exercise your rights, email team@sendgifts.uk.

2. Information we collect

Depending on how you use the service, we may collect:

• your name, email address and telephone number;
• account and sign-in information, including securely hashed session and magic-link tokens;
• the names, relationships, occasions and dates you choose to save;
• order details, gift choices, messages, customisation and delivery instructions;
• a recipient’s name, email address, telephone number and delivery address where needed to fulfil a gift;
• payment references, payment status, card brand and last four digits supplied by Stripe—we do not receive or store full card numbers;
• communications, complaints and customer-service records; and
• technical and security information, including a hashed version of an IP address used to prevent abuse of signup forms.

Please only give us another person’s information where you are entitled to do so. If you send a gift, we use the recipient’s details only for the gift, delivery and related support unless they separately ask to hear from us.

3. How we use information and our lawful bases

• To provide the service and fulfil orders: to create an account, take payment, arrange delivery, send confirmations, manage saved occasions and provide support. We rely on performance of a contract or steps requested before entering one.
• To operate and protect the service: to prevent fraud and misuse, keep records, troubleshoot and defend legal claims. We rely on our legitimate interests and, where applicable, legal obligations.
• To meet legal and financial duties: including accounting, tax, consumer-protection and fraud-prevention requirements. We rely on legal obligations.
• To send marketing: to send the welcome offer and occasional gift ideas where you have asked for them. We rely on consent where required. You can unsubscribe at any time without affecting earlier processing.

4. Who receives information?

We share only what is reasonably necessary with service providers and partners that help us run the service, including:

• Cloudflare, for website delivery, security and database hosting;
• Stripe, for payment processing and fraud prevention;
• Brevo, for transactional and opted-in marketing email;
• the supplier or fulfilment partner responsible for the selected gift; and
• professional advisers, regulators, courts or law-enforcement bodies where required by law or necessary to protect legal rights.

The product page or order journey will identify the relevant fulfilment partner where appropriate. We do not sell personal information.

5. International transfers

Some providers may process information outside the UK. Where that happens, we require an appropriate safeguard, such as UK adequacy regulations or approved contractual protections, unless another lawful exception applies. Contact us if you would like more information about the safeguard used for a particular transfer.

6. How long we keep information

We keep information only for as long as reasonably needed for the purpose collected, including to fulfil orders, maintain your account and saved occasions, meet tax and accounting duties, resolve disputes and prevent fraud. Retention depends on the type of record and the applicable legal requirement.

Magic sign-in links expire after 20 minutes and account sessions after 30 days. Expiry prevents further use of those credentials; limited security records may remain for the period needed to protect the service. You may ask us to delete information that we no longer need, subject to legal and operational requirements.

7. Email and marketing choices

Transactional messages about an order, account or requested reminder are part of the service. Marketing messages include an unsubscribe link. You may also email us to withdraw marketing consent. Unsubscribing from marketing does not stop essential service messages.

8. Cookies and similar technology

We use essential technology needed to keep the website and account secure, including a secure sign-in cookie. The current site does not use advertising cookies or third-party behavioural analytics. If that changes, this notice and any required cookie choices will be updated before those technologies are used.

9. Your rights

UK data-protection law may give you rights to access, correct or erase your information; restrict or object to its use; receive certain information in a portable format; and withdraw consent. These rights can depend on the circumstances and may have lawful exceptions.

Email team@sendgifts.uk to make a request. We may need to verify your identity. You also have the right to complain to the Information Commissioner’s Office, although we would appreciate the opportunity to address your concern first.

10. Children

The service is intended for adults purchasing or planning gifts. It is not directed at children, and we do not knowingly ask children to create accounts or submit personal information.

11. Security

We use proportionate technical and organisational measures designed to protect personal information. No online service can guarantee absolute security, so please contact us promptly if you believe your account or information has been compromised.

12. Changes to this notice

We may update this notice when the service or legal requirements change. We will publish the revised date here and provide additional notice where a change materially affects how we use personal information.