Giftora

Giftora respects your privacy. This Privacy Policy explains how Giftora collects, uses, discloses, stores and protects personal information.

"Personal information" means information about an identified individual, or an individual who is reasonably identifiable.

By using Giftora, creating an account, creating or managing a registry, accepting a contributor invite, viewing a public registry, marking a gift as purchased, contacting us or otherwise using our services, you agree to the collection, use and disclosure of personal information as described in this Privacy Policy.

Giftoradoes not sell users' or website visitors' personal information. We may disclose personal information where reasonably necessary to provide, operate, improve, secure or support our services, including to registry owners, contributors, payment providers, technology providers, professional advisers and other parties described in this Privacy Policy.

1. Who we are

Giftora provides online gift registry services for celebrations such as weddings, baby showers, birthdays and similar events. We provide the software and platform used to create, host and share registries and gift lists.

References to "Giftora", "we", "us" and "our" mean the operator of the Giftora website and services at giftora.co.za.

2. What personal information we collect

We may collect the following types of personal information:

name;
email address;
phone number;
account registration details, login details (including Google sign-in identifiers) and account preferences;
information about the services you have requested;
information from enquiries you have made;
communications between you and us;
registry and event details (including event type, name, date and guest notes);
gift list information (including product titles, links, images, prices and purchase status);
contributor email addresses and invite acceptance details;
guest activity on public registries (such as marking a gift as purchased and optional buyer notes);
payment status, transaction references, subscription plan and related billing records;
images you upload (such as custom registry banners);
information needed to help prevent fraud, misuse, unauthorised access or unlawful activity;
technical and usage information, including IP address, device information, browser information, operating system, log data, cookie identifiers, pages visited, referring websites and interactions with our website or services;
error and diagnostic information when monitoring is enabled (for example via an error-tracking provider).

We may also collect other information you choose to provide to us or upload to the service.

3. How we collect personal information

We collect personal information in a variety of ways, including when:

you create or update an account;
you sign in with Google or register with email and password;
you create, manage, view or contribute to a registry;
you add gifts, product URLs, images, descriptions or event details;
you invite contributors or accept a contributor invite;
a guest views a public registry or marks a gift as purchased;
you contact us for support or make an enquiry;
you start a subscription or purchase through our payment provider;
you access our website or interact with our emails, pages, forms or features;
third-party service providers provide information to us to help operate the service.

Where you provide personal information about another person (for example a contributor email address or event details about someone else), you must have authority to provide that information where required by law.

4. How we use personal information

We use personal information to:

provide, operate and improve Giftora;
create and manage accounts;
create, host and display registries and gift lists;
import product information from URLs you submit (via our product extraction provider);
send invite emails, confirmations, notifications and service messages;
help registry owners, contributors and guests use registries where relevant;
process subscriptions and one-time purchases, and support billing, refund and dispute processes;
provide customer support;
personalise and improve the user experience;
maintain the safety, security and integrity of our services;
detect, prevent and investigate fraud, misuse, unauthorised access, unlawful activity or breaches of our terms;
comply with legal, regulatory, tax, accounting and reporting obligations;
resolve disputes and enforce our rights;
notify you of features, services, updates or opportunities that may be relevant to you, where permitted by law.

5. Payments and payment providers

Giftora may allow payments for subscriptions and one-time purchases through third-party payment providers, including Stripe.

Where payments are made by credit card or other online payment methods, payment information may be collected and processed by the relevant payment provider. We may receive and store limited payment-related information, such as payment status, transaction identifiers, customer identifiers, plan details, amount, currency, refund status and related records. We do not usually receive or store full credit card numbers.

Payment providers process personal information in accordance with their own terms, privacy policies and legal obligations. You should review the relevant payment provider's privacy policy before using that payment method.

6. Information shared with registry owners, contributors and guests

When you contribute to a registry, accept an invite, mark a gift as purchased, leave a note or otherwise participate in a registry, we may share relevant personal information with the registry owner and accepted contributors.

This may include your name, email address, contribution or purchase-related details, gift messages or buyer notes, and communications relevant to the registry.

We share this information so that the relevant people can operate the registry, manage gifts, communicate about purchases and resolve issues.

Registry owners and contributors must only use personal information obtained through Giftora for purposes connected with the relevant registry, and must not use guest or contributor information for unrelated marketing unless they have a separate lawful basis and any required consent.

7. Public pages and information you choose to publish

Some parts of Giftora may be publicly accessible or accessible to people who have a link, including public registry pages, gift lists, event names, images, guest notes and purchase status.

You should not include personal information on public or shared pages unless you are comfortable for that information to be viewed by others who can access the page.

If you add information about another person, you must have permission to do so where required by law.

8. When we disclose personal information

We may disclose personal information to:

registry owners, accepted contributors and, where relevant, guests interacting with a public registry;
payment providers, including Stripe;
technology, hosting, cloud, authentication, storage, security, analytics, email, product-extraction, error-monitoring, support and other service providers (including providers such as Supabase, Firecrawl, Resend, Plausible and Sentry when configured);
professional advisers, including lawyers, accountants, auditors, insurers and consultants;
regulators, law enforcement, courts, tribunals, government agencies or other parties where required or permitted by law;
another entity in connection with a business sale, merger, restructure, financing, transfer or acquisition involving Giftora;
other parties with your consent or at your direction.

We may also disclose de-identified or aggregated information that does not reasonably identify an individual.

9. Overseas disclosure and international transfers

Using the Internet to collect, process and store information may involve the transmission of data internationally.

We may disclose or transfer personal information outside your country of residence, including to countries where we or our service providers, cloud providers, payment providers or other business partners operate.

The privacy laws of those countries may not be the same as the laws in your country of residence (including South Africa).

10. Security of personal information

We take reasonable steps to protect personal information from misuse, interference, loss, unauthorised access, modification and disclosure.

However, no method of transmission over the Internet or electronic storage is completely secure. We cannot guarantee the security of information transmitted to or stored by us, and you provide information to us at your own risk.

You are responsible for keeping your account login details secure and for any activity that occurs through your account.

11. How long we keep personal information

We keep personal information for as long as reasonably necessary for the purposes described in this Privacy Policy, including to provide our services, maintain business records, comply with legal and tax obligations, prevent fraud, resolve disputes, enforce our terms and support users.

We may retain some information after an account or registry is closed or deleted where required for legitimate business, legal, tax, accounting, security, fraud-prevention or dispute-resolution purposes.

12. Accessing and updating your personal information

You can access and update some of your personal information through your Account settings, and you can delete your account from that page.

You may also contact us to request access to, or correction of, personal information we hold about you. We may need to verify your identity before responding to your request.

13. Marketing communications

We may use your contact details to send you service updates, feature announcements, offers or other information about Giftora that may be relevant to you, where permitted by law.

You can unsubscribe from marketing communications using the unsubscribe link in the relevant email (where provided) or by contacting us. We may still send you transactional, administrative, security, billing, invite or account-related messages where needed to provide the service.

14. Cookies and similar technologies

We use cookies and similar technologies on our website. Cookies are small files that help us identify your browser, remember your preferences, keep you logged in, understand how people use the service, improve performance, support security and provide a better user experience.

When configured, we may use privacy-friendly analytics (such as Plausible) to measure page views. We do not use advertising cookies to sell your personal information.

15. Third-party websites and services

Our website and services may contain links to third-party websites (including product pages on retailer sites) or integrate with third-party services. We are not responsible for the privacy practices, content or security of third-party websites or services.

Third-party services, including payment providers and retailers, may collect, use and disclose personal information under their own privacy policies and terms.

16. Complaints about privacy

If you have any questions or complaints about our privacy practices, please contact us at support@giftora.co.za.

Please include enough detail for us to understand and respond to your question or complaint. We take privacy complaints seriously and will respond within a reasonable period after receiving your complaint.

17. Changes to this Privacy Policy

We may update this Privacy Policy from time to time. The updated version will be posted on our website and will take effect from the date it is posted, unless otherwise stated.

You should check this page from time to time to make sure you are aware of the current version.