Privacy Policy

Last updated: 5 November 2026

1. Introduction

GIFTERNA (“we”, “our” or “us”) operates the website gifterna.com. We provide digital products and personalised digital gifting experiences.

We respect your privacy and are committed to handling your personal information responsibly. This Privacy Policy explains what information we collect, how we use it, when we may share it and the rights you may have under applicable data protection laws, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

For the purposes of data protection law, the organisation or individual legally responsible for your personal information is the data controller. The full legal name and contact details of the data controller should be confirmed and added here before this policy is treated as final.

2. Information We Collect

We may collect the following types of personal information when you visit our website, place an order or contact us:

Personal and contact information

Your name.
Email address.
Telephone number, where provided.
Billing and other order-related information.

Order and payment information

Products purchased and order details.
Transaction references and payment status.
Information needed to manage orders, refunds and customer support.

Payments are handled through the payment methods made available at checkout. We do not intend to collect or store full payment card details ourselves where these are processed directly by a payment provider.

Customer-submitted content

When you order a personalised digital product, you may provide:

Photographs and images.
Videos and audio recordings.
Names, messages and written content.
Other information or files needed to create your requested product.

Please only submit content that you have the right and permission to share. If your content includes information or images relating to another person, you should make sure you are entitled to provide it to us.

Technical information

When you use our website, we may collect basic technical information, such as:

IP address.
Browser type and device information.
Website usage and interaction information.
Cookie and similar technology information, where applicable.

3. How We Use Your Information

We use personal information for purposes such as:

Processing and managing customer orders.
Creating and delivering personalised digital products.
Sending order confirmations and service-related emails.
Responding to questions and customer support requests.
Managing customer accounts and order records.
Processing refunds and handling payment-related enquiries.
Protecting our website, preventing fraud and maintaining security.
Improving our website, products and customer experience.
Meeting applicable legal and accounting obligations.

Lawful Basis for Processing

We must have a valid lawful basis for using personal information. Depending on the activity and circumstances, the relevant basis may include:

Contract: Where processing is necessary to fulfil an order or provide a service you have requested.
Legal obligation: Where we need to keep records or provide information to meet legal requirements.
Legitimate interests: Where processing is necessary for appropriate business purposes, such as website security, fraud prevention and service improvement, provided your rights and interests do not override those interests.
Consent: Where you have freely agreed to a particular use of your information, such as optional marketing communications or certain non-essential cookies.

We will identify and apply the appropriate lawful basis for each processing activity.

4. Sharing Your Information

We do not sell your personal information.

We may share information with service providers where necessary to operate GIFTERNA and provide our services. These may include:

Website hosting and technical service providers.
Payment processing providers.
Email and communication service providers.
Website security and maintenance providers.
Other service providers involved in fulfilling your order.

These providers should only process personal information as permitted by their agreements with us, our instructions and applicable data protection law.

We may also disclose information where required by law or where reasonably necessary to protect our rights, customers, website or business.

The specific providers used by GIFTERNA should be identified and reviewed before this policy is finalised.

5. Customer-Submitted Digital Content

We use photographs, videos, audio recordings, messages and other files you submit only as necessary to provide the personalised digital product or service you request, manage your order and provide customer support.

We do not use your submitted content for advertising or promotional purposes unless you have given permission or another valid lawful basis applies.

Access to submitted content should be limited to people and service providers who need it to complete the requested service or provide necessary support.

We retain submitted content only for as long as reasonably necessary for the purposes explained in this policy, subject to applicable legal requirements.

6. How Long We Keep Your Information

We keep personal information only for as long as necessary for the purposes for which it was collected.

Retention periods may depend on:

The type of information.
Whether it relates to an order or customer enquiry.
The time needed to provide support or resolve a dispute.
Applicable legal, tax and accounting requirements.
Security and fraud-prevention needs.

When information is no longer required, we will take appropriate steps to delete it or securely dispose of it, subject to any legal requirement to retain it.

The specific retention periods for order records, customer-submitted content and support communications should be confirmed by GIFTERNA.

7. Your Data Protection Rights

Depending on the circumstances and applicable law, you may have the right to:

Access: Request a copy of the personal information we hold about you.
Rectification: Ask us to correct inaccurate or incomplete information.
Erasure: Request deletion of your personal information where the legal conditions are met.
Restriction: Ask us to restrict how we use your information in certain circumstances.
Data portability: Request your information in a portable format where this right applies.
Object: Object to certain types of processing, including processing based on legitimate interests.
Withdraw consent: Where we rely on co