Effective date: 1 January 2025 · Last updated: 1 June 2025
GiftRefills ("we", "our", "us") is committed to protecting your privacy. This Policy explains what personal data we collect when you use GiftRefills, why we collect it, and the rights you have over it.
1. Data We Collect
Account & transaction data: email address, payment method type (crypto wallet address), and order details.
Technical data: IP address, browser type, device identifiers, and pages visited.
Communication data: messages you send us via email or contact forms.
2. How We Use Your Data
To process and fulfill your gift card orders and send delivery confirmations.
To detect fraud, prevent abuse, and comply with applicable laws.
To improve our platform, analyze usage trends, and send transactional communications.
3. Cookies & Tracking
We use essential cookies to keep your session active and your cart intact.
Analytics cookies (e.g., aggregate page-view counters) help us understand site performance — no personal profiling.
You can manage or disable non-essential cookies via your browser settings or our Cookie Preferences panel.
4. Third-Party Sharing
We share data only with service providers necessary to operate GiftRefills (payment processors, cloud hosting, email delivery).
We do not sell, rent, or trade your personal data to advertisers or data brokers.
Third parties are contractually bound to use your data solely for the services they provide to us.
5. Your Rights (GDPR & CCPA)
Access, correct, or delete your personal data at any time by contacting privacy@giftrefills.com.
EU/EEA residents may lodge a complaint with their local Data Protection Authority.
California residents may opt out of any future sale of personal information (we do not currently sell data) and request disclosure of categories collected.
6. Data Retention
We retain transaction records for up to 5 years to meet legal and tax obligations. Account data is deleted within 30 days of a verified account-closure request. Anonymised analytics data may be kept indefinitely.
7. Security
All data is encrypted in transit (TLS 1.3) and at rest (AES-256). Access to personal data is restricted to authorised personnel on a need-to-know basis. We conduct periodic security audits and vulnerability assessments.
8. Children's Privacy
GiftRefills is not directed at children under 13 (or 16 in the EU). We do not knowingly collect personal data from minors. If you believe a child has submitted data to us, contact us immediately and we will delete it.
9. Changes to This Policy
We may update this Privacy Policy to reflect changes in law or our practices. We will notify you by posting the revised policy on this page with an updated effective date. Continued use of GiftRefills after the effective date constitutes acceptance.
This Privacy Policy applies solely to data processed by GiftRefills. It does not cover third-party platforms (e.g., Amazon, Steam, Netflix) that may be accessed via gift card codes you purchase. Please review each platform's own privacy policy before use.