Privacy policy
gift.cards handles your data carefully. This page describes what we collect when you request a proposal, book a demo or download a cheatsheet, what we use it for and what rights you have under UK GDPR / EU GDPR.
Controller
gift.cards is the controller for personal data submitted via our forms.
What we collect
Name, work email, company name, country, estimated volume, use case, contact preference and any free-text notes. For analytics: anonymised UTM parameters and page URL.
Purpose
We use your data only to contact you about your enquiry and to send a proposal, demo invite or cheatsheet. No resale; no ad profiling.
Legal basis
Consent (Art. 6(1)(a) GDPR) via form submission and/or legitimate interest for B2B follow-up on a specific request.
Retention
Leads: 24 months after last contact. Invoices and tax records: 7 years (statutory). Cookies and analytics: 26 months max.
Processors
Hosting inside the EU. Webhook intake and email delivery via vetted partners under a Data Processing Agreement.
Error monitoring via Sentry (EU region, Functional Software Inc., under a Data Processing Agreement). Sent: error message, technical stack trace, browser type and the page URL without its query string. Redemption and choice paths are not sent, and tokens in stored URL fields are redacted. Not sent: form data and session replays. Performance monitoring stays off until you accept cookies.
Your rights
Access, rectification, erasure, restriction, objection and portability. Complaints via your national data-protection authority.
Contact
Questions or requests: email privacy@gift.cards.