Personvernerklæring

hapigift is operated by Santiagao Ltd, a company registered in England and Wales (company number 17188667) with its registered office at 66 Paul Street, London, EC2A 4NA. For the personal data we handle through the service, Santiagao Ltd is the data controller.

This policy explains what information we collect, how and why we use it, who we share it with, and the rights you have. We aim to collect only what we need to run the service well.

We sell across the countries listed at checkout, so we handle personal data in line with the UK GDPR and the Data Protection Act 2018 and, where you are in the European Economic Area, the EU GDPR. Wherever you are, the rights and safeguards set out below apply to you.

Information you give us: your name, email address and date of birth when you create an account or check out; your billing address and phone number where you provide them; and anything you send us when you contact support.

We do not use passwords, so we never collect or store one. You sign in by entering your email address and confirming a one-time code we send to it. We use your date of birth only to check that you meet the minimum age in our terms.

Information collected automatically: technical and usage data your device shares, such as IP address, browser and device type, and how you interact with the site, gathered through cookies and similar technologies.

Payment information: card payments are processed by our third-party payment provider through a hosted checkout. We receive confirmation of payment and limited transaction details, but we do not collect or store your full card number.

To provide the service (performing our contract with you): to process orders, deliver gift cards, manage your account, and provide customer support.

For our legitimate interests: to prevent and detect fraud, keep the platform secure, understand how it is used, and improve our products, balanced against your rights.

With your consent: to send you marketing or product updates by email, where you have opted in. You can withdraw consent at any time.

To meet legal obligations: for example accounting, tax and record-keeping requirements.

We use cookies and similar technologies (including local storage in your browser) in three groups. Essential: needed for the site to work at all, such as keeping you signed in, holding your basket, remembering your language and storing your cookie choice itself. These are always active and do not need your consent.

Analytics: help us see how the service is used, which pages are visited and where people run into trouble, so we can improve it. Marketing: let us measure and tailor our advertising. Both are optional and are only set once you turn them on.

We ask for your choice the first time you visit, and nothing optional is set before you make it. You can change or withdraw your choice at any time using the 'Cookie settings' link in the footer of every page, or by clearing site data in your browser. Turning a group off stops us setting new cookies in that group.

We share data only as needed to run the service: with our payment provider to take payment; with the brands and gift-card suppliers whose cards you buy, to fulfil and deliver your order; and with technology providers who host our platform and send transactional email on our behalf.

We may also share data with professional advisers, or with authorities and other parties where we are required to do so by law, or to protect our rights, users or the platform. We do not sell your personal information.

Some of our providers may process data outside the United Kingdom or the European Economic Area. Where we transfer personal data out of either, we rely on appropriate safeguards, such as an adequacy decision or standard contractual clauses (with the UK addendum where the UK GDPR applies), so that your data stays protected to the same standard. You can ask us for details of the safeguards used.

We keep your information for as long as your account is active or as needed to provide the service, and afterwards only as long as necessary to comply with legal obligations (for example tax and accounting record-keeping), resolve disputes and enforce our agreements. When data is no longer needed, we delete or anonymise it.

We use encryption in transit, access controls and other measures to protect your data. Card payments are handled by a payment provider on a secure hosted checkout, and full card details are never stored on our servers. No method of transmission or storage is completely secure, but we work to protect your information and to respond appropriately if a problem occurs.

Depending on your circumstances, you may have the right to access your data, correct it, have it deleted, restrict or object to how we use it, request a copy in a portable format, and withdraw consent where our use relies on it. To exercise any of these rights, contact us using the details below.

If you have a concern about how we handle your data, you can complain to a data protection authority: the Information Commissioner's Office (ICO) in the UK, or the supervisory authority in the EEA country where you live or work. We'd appreciate the chance to put things right first.

Orders pass through automated fraud and risk checks, run by us and by our payment provider, which can decline a payment or hold an order for review. These checks are necessary to enter into and perform our contract with you and to prevent fraud. If an order of yours is declined by an automated check, you can contact us and ask a person to look at it.

We only send marketing emails where you have opted in. You can unsubscribe at any time using the link in any marketing email, or by contacting us. Opting out of marketing does not stop essential service messages, such as order confirmations.

hapigift is intended for adults and is not directed at children under 18. We do not knowingly collect personal information from children. If you believe a child has provided us with personal data, please contact us and we will delete it.

We may update this policy from time to time. We'll post changes on this page with a new effective date, and where changes are significant we will take reasonable steps to let you know.

For any question about this policy, or to exercise any of the rights above, email us at hello@hapigift.net or write to Santiagao Ltd, 66 Paul Street, London, EC2A 4NA, United Kingdom.

Questions about your privacy? Reach us through the contact page.