Privacy Policy

Introduction

At Gifts Direct 2U Ltd, we are committed to protecting your privacy and ensuring the security of your personal information. This privacy policy, together with our terms and conditions, outlines how we handle the personal data you provide or that we collect from you. Please take a moment to read this policy to understand our practices and how we manage your personal data.

The processing of personal data is governed by the General Data Protection Regulation (GDPR).

1. Definitions

• Data Controller: The entity that determines the purposes and means of processing personal data.
• Data Processor: The entity that processes personal data on behalf of the controller.
• Data Subject: Any individual whose personal data is being processed.
• Categories of Data:
  • Personal Data: Information relating to an identifiable individual, such as a name, address, email, IP address, etc.
  • Special Categories of Personal Data: Sensitive information such as genetic data, biometric data, health information, racial or ethnic origin, sexual orientation, religious or philosophical beliefs, and political opinions.
• Processing: Any operation performed on personal data, including collection, recording, storage, use, and deletion.
• Third Party: Any entity other than the data subject, controller, or processor involved in the processing of personal data.

2. Who We Are

Gifts Direct 2U Ltd is the data controller, meaning we determine the purposes and methods of processing your personal data.

3. Purpose of Processing Your Personal Data

We process your personal data for the following reasons:

• To process and fulfill orders
• To address any issues or complaints
• To inform you about new products and offers

4. Categories of Personal Data We Process

We process the following personal data:

• Name
• Address
• Telephone number
• Email address

5. Legal Basis for Processing Your Personal Data

Our legal grounds for processing your personal data under GDPR (Article 6) are:

1. Processing is necessary for the performance of a contract with you or to take steps to enter into a contract.
2. Processing is necessary for our legitimate interests or those of a third party, except where such interests are overridden by your rights and freedoms.

6. Sharing Your Personal Data

Your personal data is treated as confidential and will only be shared with our third-party suppliers for the purpose of processing your order or resolving a query or complaint. We ensure all our suppliers comply with GDPR.

To protect your information during online transactions, we use 128-bit Secure Socket Layer (SSL) encryption provided by GlobalSign. This encryption secures your personal data, including credit card details, from unauthorized access.

Gifts Direct 2U Ltd processes credit card payments in real-time using Stripe, an industry-approved transaction handler. Once payment is processed, your card information is deleted from our system.

7. Data Retention

We retain your personal data only as long as necessary to address any issues, such as legal claims or complaints.

8. Your Rights Regarding Your Personal Data

Under GDPR, you have the following rights concerning your personal data:

• The right to request a copy of the personal data we hold about you.
• The right to request corrections to your personal data if it is inaccurate or outdated.
• The right to request the erasure of your personal data when it is no longer needed.
• The right to request that we transfer your data to another data controller where possible (data portability).
• The right to request restrictions on the processing of your data in certain circumstances.
• The right to object to the processing of your personal data where applicable, such as for direct marketing or research purposes.

9. Automated Decision-Making

We do not use automated decision-making processes.

10. Further Processing

If we need to use your personal data for a new purpose not covered by this privacy notice, we will inform you and provide the relevant details before starting any new processing.

11. Changes to Our Privacy Policy

Any changes to this privacy policy will be posted on this page, and where appropriate, notified to you by email. Please check this page regularly for updates.

12. Cookie Policy

Our website uses cookies to distinguish you from other users, enhancing your browsing experience and helping us improve our site. By using our website, you agree to our use of cookies.

A cookie is a small file stored on your browser or device, containing information about your visit to our site. We use the following types of cookies:

• Strictly necessary cookies: Required for site operation, such as enabling secure login and e-billing services.
• Analytical/performance cookies: Help us understand how visitors use our site, allowing us to improve its functionality.
• Functionality cookies: Remember your preferences, like language or region, when you return to our site.
• Targeting cookies: Track your visits and interactions on our site to tailor our content and advertising to your interests.

You can block cookies via your browser settings, but this may limit your access to certain site features.

13. Data Protection Officer (DPO)

• Role of the DPO: The Company will appoint a Data Protection Officer (Jason Buckle) to oversee data protection compliance, monitor processing activities, provide advice, and act as a point of contact for data subjects and supervisory authorities.
• Contact Information: The DPO can be contacted at [email protected].

14. How to Make a Complaint

If you have any questions, concerns, or complaints regarding your personal data, please contact us at [email protected]. If you are not satisfied with our response, you can lodge a complaint with the Information Commissioner’s Office (ICO) via phone at 0303 123 1113, email at https://ico.org.uk/global/contact-us/email/, or by post at Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF, England.