Legal

Privacy notice

Draft wording for owner and legal review before launch, including retention periods and contact details.

What we collect

Your name and email as purchaser, and each recipient's name, email and optional message, so we can deliver gifts and send receipts. Card details are handled by Stripe and never reach our systems.

How we use it

Only to process your order, deliver gifts, answer questions and keep financial records. We don't sell your data or send marketing without your consent.

Who processes it

Stripe (payments), Resend (email delivery), Supabase (secure hosting of our database) and Vercel (website hosting), each under data processing terms.

How long we keep it

Order and redemption records are kept as long as needed for accounting and legal obligations. Personal details not needed for those records are removed after a defined retention period.

Your rights

Under UK GDPR you can ask to access, correct or delete your personal data, or object to its use. Contact us and we'll respond within one month.