Privacy policy
Last updated: September 30, 2025
About The Gift (“we”, “us”, “our”) operates this store and website, including all related information, content, features, tools, products and services (the “Services”). Our store is powered by Shopify, which enables us to provide the Services to you. This Privacy Policy describes how we collect, use, and disclose your personal information when you visit, use, or make a purchase or other transaction using the Services, or otherwise communicate with us. If there is a conflict between our Terms of Service and this Privacy Policy, this Privacy Policy controls with respect to the collection, processing, and disclosure of your personal information.
Please read this Privacy Policy carefully. By using and accessing any of the Services, you acknowledge that you have read this Privacy Policy and understand the collection, use, and disclosure of your information as described here.
Personal Information We Collect or Process
When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you or another person. Personal information does not include information that has been de-identified or aggregated. Depending on how you interact with the Services and as permitted by applicable law, we may collect or process:
Contact details: name, billing/shipping address (for orders), phone number, email address.
Financial information: payment card details and related transaction information (processed by our payment provider; we do not store full card numbers).
Account information: username, password, preferences and settings.
Transaction information: items viewed, added to cart/wishlist, purchased, returned, exchanged or cancelled, and your past transactions.
Communications: information you include in emails, messages or customer support inquiries.
Device/Usage information: device, browser, IP address, identifiers, and how you interact with our Services (pages, clicks, time on page), including cookies and similar technologies.
Gift Edit form (no postal address collected)
If you complete our Gift Edit questionnaire, we collect:
Your email address (for confirmations and to follow up with curation).
Details about gift recipients (e.g., first name, relationship to you, age range, style and interests, occasions/dates, preferences/no-gos, prior gifts, your descriptive notes).
We do not ask for or require recipient postal addresses within the Gift Edit form. (Delivery details, if needed later, are collected securely during order fulfilment.)
Personal Information Sources
Directly from you (account creation, checkout, Gift Edit, emails/support).
Automatically via cookies, pixels, and similar technologies when you use the Services.
Service providers that enable our Services (e.g., Shopify, payments, analytics, email).
Partners/third parties (e.g., marketing and advertising providers), as allowed by law.
How We Use Your Personal Information
Depending on how you interact with us, we may use your personal information to:
Provide, tailor, and improve the Services: operate the store, process payments, fulfil orders, manage returns/exchanges, remember preferences, recommend products, and enhance your experience.
Marketing and advertising: send promotional communications (you can unsubscribe at any time) and show relevant ads on our site or other sites.
Security and fraud prevention: authenticate accounts; detect, investigate and prevent fraud, abuse, or security incidents.
Communicate with you: customer support, service messages (e.g., order updates, account notices).
Legal obligations: comply with laws, respond to lawful requests, enforce our terms and policies.
Lawful bases (UK GDPR / EU GDPR)
Where applicable, we rely on:
Performance of a contract (e.g., processing your order).
Legitimate interests (e.g., improving the Services, customer support, fraud prevention, curated gifting workflow).
Consent (e.g., email marketing where required; you can withdraw at any time).
Legal obligation (e.g., tax/financial recordkeeping).
How We Disclose Personal Information
We may disclose personal information, as needed, to:
Shopify and service providers (e.g., hosting, payments, fulfilment/shipping, customer support, analytics, cloud storage, email delivery) who process data for us under appropriate terms.
Business and marketing partners for advertising and measurement in accordance with their privacy notices. Depending on where you reside, you may have rights to opt out of certain sharing.
Parties you direct us to disclose to (e.g., shipping carriers, gift recipients if you ask us to send something directly).
Affiliates within our group.
Legal/Business transfers (e.g., mergers, insolvency, or where required by law).
Relationship with Shopify
The Services are hosted by Shopify, which collects and processes personal information about your access to and use of the Services to provide and improve the Services. Information you submit may be transmitted to and shared with Shopify and other third parties (which may be located outside your country). We also use certain Shopify features that incorporate aggregated data across merchants. In these circumstances, Shopify is responsible for its own processing and for responding to rights requests related to such processing. For details, see the Shopify Consumer Privacy Policy and the Shopify Privacy Portal.
Gift Edit Submissions via FormSubmit
We use FormSubmit (formsubmit.co) to relay Gift Edit submissions directly to our inbox at cs@aboutthegift.co.uk.
What is sent: your email and the recipient profile details you provide (no postal addresses are collected in the Gift Edit).
Purpose: to curate and manage your gift subscription or order.
Legal bases: performance of a contract (or pre-contract steps at your request) and our legitimate interests in providing curated gifting and customer support; consent for marketing where required.
Who receives it: About The Gift (via our email service). FormSubmit acts as a service provider/processor to relay your submission.
Storage/retention: we retain Gift Edit submissions in our email and internal systems for up to 24 months from your last interaction for curation continuity and support, unless a longer period is required by law (e.g., finance/tax records) or you request deletion sooner (see Your Rights).
Security: submissions are transmitted over TLS where supported; access is limited to personnel who need it to provide the Services.
International transfers: FormSubmit and/or our email provider may process data on servers located outside the UK/EEA (e.g., the United States). Where applicable, we rely on appropriate safeguards (such as Standard Contractual Clauses) or other transfer mechanisms permitted by law.
Your choices: you may ask us to delete your Gift Edit submission and related personal information (subject to legal obligations) by contacting us (see Contact). You can also choose not to complete the Gift Edit; however, curation quality may be affected.
> Note: FormSubmit provides its own privacy practices. We recommend reviewing FormSubmit’s privacy information for more detail about its role as a relay service.
Cookies and Similar Technologies
We (and our partners, including Shopify) use cookies and similar technologies to operate the site, remember preferences, measure performance, prevent fraud, and personalise content/ads. You can manage cookies through your browser settings and, where available, site-level consent tools. Disabling certain cookies may affect site functionality.
Children’s Data
The Services are not intended for children, and we do not knowingly collect personal information from children under the age of majority in your jurisdiction. If you believe a child has provided personal information, please contact us to request deletion. We do not knowingly “sell” or “share” (as defined under certain laws) the personal information of individuals under 16.
Security and Retention of Your Information
We use administrative, technical and organisational measures designed to protect personal information. No security system is perfect, and we cannot guarantee absolute security. Avoid sending sensitive information over unsecure channels.
We retain personal information only as long as necessary: for example, to fulfil orders, provide support, comply with legal, tax and accounting obligations, resolve disputes, and enforce our agreements.
Orders/transactions: retained per statutory accounting/tax requirements.
Marketing data: retained until you opt out or it is no longer needed.
Gift Edit data: up to 24 months from last interaction, unless you request deletion sooner or we need to retain certain records by law.
Your Rights and Choices
Depending on where you live, you may have some or all of the following rights (subject to limitations and applicable law):
Access/Know the personal information we hold about you.
Delete personal information.
Correct inaccurate personal information.
Portability: receive a copy of your data and/or request we transfer it to a third party (where feasible).
Object/Restrict certain processing (e.g., for direct marketing).
Withdraw consent where processing is based on consent (e.g., marketing emails). Withdrawal does not affect prior lawful processing.
Manage marketing: opt out using the unsubscribe link in our emails.
If you reside in the UK or EEA, you may exercise these rights by contacting us (see Contact). We may need to verify your identity. You may also designate an authorised agent, subject to verification requirements. We will not discriminate against you for exercising your rights.
For data processed by Shopify in its capacity as a controller, please visit Shopify’s privacy pages and portals for rights requests.
International Transfers
We may transfer, store and process your personal information outside your country of residence, including to countries that may have different data protection laws (e.g., transfers to the US). Where we transfer personal information from the UK/EEA, we rely on recognised transfer mechanisms such as the European Commission’s Standard Contractual Clauses (and the UK’s approved equivalents), or other lawful bases.
Third-Party Websites and Links
Our Services may link to third-party sites or services. Their privacy and security practices are not controlled by us. Review their policies before providing personal information. Information you share on social platforms or public areas may be visible to others.
Changes to This Privacy Policy
We may update this Privacy Policy from time to time. We will post the revised policy on this page and update the “Last updated” date above. Where required by law, we will provide additional notice.
Contact
If you have questions about this Privacy Policy or our privacy practices, or wish to exercise your rights, please contact:
Email: grant@aboutthegift.co.uk (or cs@aboutthegift.co.uk for Gift Edit inbox)
Controller: About The Gift
If you are in the UK, you also have the right to lodge a complaint with the Information Commissioner’s Office (ICO). If you are in the EEA, you can contact your local supervisory authority.