Privacy notice

1. About this notice

This notice is issued by gifthappy, referred to below as "gifthappy", "we", "us", or "our". We are committed to protecting your privacy and handling your personal information in accordance with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). This notice explains what personal information we collect, how we use and disclose it, how we keep it secure, and the choices and rights you have. It applies to our website and the gifting services we provide through it.

By using gifthappy you agree to your personal information being handled as described here. If you do not agree, please do not use the service.

2. The information we collect

The personal information we collect depends on how you use gifthappy. It may include:

• Identity and contact details: your name, email address, and (if you create an account) your sign-in identifier and display name.
• Recipient details: the name and contact details of the person an order is for, and any personal message that goes with it.
• Delivery details: the delivery address for an order and any delivery instructions given with it.
• Order and transaction information: the gifts ordered, amounts, currency, GST, and order history. Card payments are processed by our payment provider; we do not collect or store full card numbers, expiry, or security codes.
• Basket information: items you add while using the site.
• Technical and usage information: your device and browser type, IP address, pages viewed, referring pages, and identifiers from cookies and similar technologies (see section 8).
• Communications: records of your correspondence with us, including support requests.

We do not seek to collect sensitive information (such as health, racial, or political information). Please do not include sensitive information in gift messages or correspondence.

3. How we collect it

We collect personal information:

• directly from you, when you browse, create an account, send a gift, or contact us;
• from other people involved in an order, such as its recipient;
• automatically, through cookies and similar technologies as you use the site; and
• from third parties that help us run the service, such as our identity, payment, and analytics providers.

Where it is reasonable and practicable, we collect personal information directly from the individual concerned. When you provide a recipient's details, you confirm you are entitled to share them with us for the purpose of sending the gift.

4. Why we use it

We use personal information to:

• process, fulfil, and deliver orders;
• take payment, manage authorisations and charges, and process refunds;
• create and manage your account;
• communicate with you and the recipient about an order, and respond to your enquiries;
• operate, secure, maintain, and improve the service, and measure how it is used;
• send you marketing about gifthappy where permitted (see section 7); and
• meet our legal and regulatory obligations and protect our and others' rights.

5. When we disclose it

We may disclose personal information to:

• Partner suppliers who fulfil a gift, so they can prepare and deliver the order (for example the recipient's name, delivery address, and the items ordered).
• Service providers who support the platform, including our payment processor, email delivery provider, cloud hosting and storage provider, identity provider, and analytics and advertising partners.
• Professional advisers such as our lawyers, accountants, and auditors.
• Authorities and others where required or authorised by law, or to protect the safety, rights, or property of any person.
• A successor in connection with a sale, merger, or other transfer of our business or assets, subject to this notice.

We do not sell your personal information.

6. Overseas disclosure

Some of our service providers store or process personal information outside Australia, including in the United States and the European Union. Where we disclose personal information overseas, we take reasonable steps to ensure it is handled consistently with the APPs, including through contractual protections with those providers.

7. Direct marketing

We may send you marketing communications about gifthappy where the law allows. You can opt out at any time by using the unsubscribe link in any marketing email or by contacting us. We will action your request within a reasonable time. We do not use a recipient's contact details, given to us so that an order can be completed, to send them our marketing.

8. Cookies, analytics, and advertising

We use strictly necessary cookies to keep the site working (for example sign-in, your basket, and security). We also use analytics and advertising cookies and similar technologies to understand how the site is used and to measure the performance of our advertising, including through third parties such as Google and Meta. These may set their own identifiers and, where enabled, support Google Consent Mode signals reflecting your choice.

While you wrap a gift, we keep an encrypted draft of your wrapping and message in your browser's local storage for up to 24 hours, so you don't lose it if you leave the page. It is removed once you add the gift to your basket or choose to start again.

You can turn analytics and marketing on or off at any time on our cookie preferences page, and you can also control cookies through your browser settings. Turning off non-essential cookies will not stop you from using the core gifting service.

9. How we keep it secure

We take reasonable steps to protect personal information from misuse, interference, and loss, and from unauthorised access, modification, or disclosure. These steps include encryption in transit, access controls, and using reputable providers for payment and hosting. No method of transmission or storage is completely secure, so we cannot guarantee absolute security.

10. How long we keep it

We keep personal information only for as long as we need it for the purposes described in this notice, including to provide the service, meet our legal, tax, and accounting obligations, and resolve disputes. When it is no longer needed, we take reasonable steps to destroy or de-identify it.

11. Accessing and correcting your information

You can ask us to access the personal information we hold about you, and to correct it if it is inaccurate, out of date, incomplete, irrelevant, or misleading. Contact us using the details in section 14. We will respond within a reasonable time. If we refuse, we will tell you why and how you can complain. We may need to verify your identity before acting on a request.

12. Complaints

If you have a concern about how we have handled your personal information, please contact us first using the details in section 14 so we can try to resolve it. If you are not satisfied with our response, you can contact the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

13. Children

gifthappy is intended for use by adults. We do not knowingly collect personal information from children. If you believe a child has provided us with personal information, please contact us and we will take reasonable steps to delete it.

14. Contact us

For any privacy question, request, or complaint, contact our privacy officer at admin@gifthappy.co. We will acknowledge your request and respond within a reasonable time.

15. Changes to this notice

We may update this notice from time to time to reflect changes in our practices or the law. The current version is always available on this page, and we will update the "Last updated" date above. Significant changes will be notified through the site or by email where appropriate.