Privacy Notice

Introduction

At , we are committed to protecting the privacy of our website visitors and customers. The purpose of this Privacy Notice is to outline how we collect and use any personal information about you (which is known as "personal data" under data protection legislation).

You have the right to object to us processing your personal data for direct marketing and also to processing which is carried out for the purposes of our legitimate interests. For more information, see the below Notice.

Changes in Data Protection Law

Data protection law in the EU was updated with the General Data Protection Regulation (GDPR), which came into effect on 25 May 2018. This Privacy Notice reflects those requirements and your rights under the law. This Privacy Notice has been updated to reflect your rights under GDPR and to explain how we process customer personal data.

Read through this to fully understand the basis upon which we collect, use and store your personal data and to whom it is disclosed. You may wish also to read our Cookie Policy.

will always keep your data safe and comply with applicable data protection legislation. This Notice will continue to evolve as we implement tools that allow you to access and download your personal data automatically, along with other improvements.

Who we are

Bright Gift Ideas Ltd.,
Block O2 Ballymount Drive
Dublin 12
D12 DT6K
Ireland

(Registered company number in Ireland: 320530)

The above lists the Owner, Operator and Data Controller (within the meaning of data protection laws applicable) of this website. References in this notice to "we" or "us" are to the above.

Your rights

By law, you have a number of rights when it comes to your personal data. Further information and advice about your rights can be obtained from the data protection regulator in your country (within Republic of Ireland, visit the Data Protection Commission (DPC)). You also have the right to lodge a complaint with the Data Protection Commission if you are unhappy with how we process your data.

Rights	Explanation
to be informed	You have the right to know what personal data is being collected, our identity and your data protection rights (as per this Privacy Notice).
subject access	You have the right to request and obtain access to your personal data.
to have inaccuracies corrected	If your personal data is inaccurate or incomplete, you have the right to have the data rectified, by the controller, without undue delay.
to have information erased	This is also known as the 'right to be forgotten', you have the right to have your data erased, without undue delay.
data portability	This right only applies where processing of personal data is carried out by automated means. You have rights to obtain and reuse your personal data for your own purposes across different services. For example, if you decide to switch to a new provider, this enables you to move, copy or transfer your information easily between our IT systems and theirs safely and securely, without affecting its usability.
to object to direct marketing	You have the right to object to direct marketing processing (which we do only with your consent) of your personal data where the processing relates to direct marketing.
to restrict the processing of your information, including automated decision-making	You have a limited right of restriction of processing of your personal data by a data controller. You have the right to not to be subject to a decision based solely on automated processing.

Please see the section titled "Making A Request" to us below, for more information on how we will handle your requests to us.

What personal data do we collect

The term "personal data" means any information relating to a living person who is identified or identifiable (such a person is referred to as a "data subject").

We collect the personal data you provide to us during the registration and order checkout processes and any further personal data you provide to update your registration details from time to time. This personal data includes:

• your contact/billing details (name, address, email address, telephone numbers)
• your shipping contact details (name, address, telephone numbers), occasionally this can be a third-party gift recipient
• personalised text & images that you provide if related to a custom made item (e.g. a personalised gift)
• your order greeting message
• payment details (credit/debit card details are not stored by us and are passed securely and directly to our payments partners (such as Stripe and PayPal) for immediate processing. We do not store your full card details.

Such information is only collected from you if you voluntarily submit it to us.

Non-Personally Identifiable Information

Like most websites, we also gather statistical and other analytical information collected on an aggregate basis from website visitors to our website. This data comprises information that cannot be used to identify or contact you, such as for example, user browser types and other anonymous statistical data involving the use of our website. We use this data in an aggregate form to get a better understanding of where our visitors come from and to help us better design, organise and market our website. This may include the use of cookies, pixels and similar technologies (see our Cookie Policy for more detail).

The purpose for which we hold your information

We process your Personal Data for the following purposes:

.1 To fulfil your order

• To fulfil your order (i.e. to facilitate the provision of ordered goods and services)
• To contact you or your recipient if required in connection with your order or to respond to any communications you might send to us;
• To allow you to view your order and order history
• So you can keep a history of the products you have ordered from us
• So you can request us to re-print artwork for future orders
• So you can track deliveries

Lawful basis for processing your Personal Data for the above purpose:

• Performance of Contract - To fulfil your order and provide the services you request.

.2 To send you marketing communications

• To communicate to you information about new products & services and special offers we think you will find valuable.

Lawful basis for processing your Personal Data for the above purpose:

• Consent - After obtaining your consent (opt-in).

.3 To better understand our customer base and improve our service offering

Lawful basis for processing your Personal Data for the above purpose:

• Our legitimate interest to do so - having carefully considered whether your interests, rights and freedoms override this type of processing.

All the personal data we process is handled by our staff in Ireland however for the purposes of IT hosting and maintenance this information is located on servers within the European Union. Where we transfer or allow access to your data outside the European Economic Area (EEA) — for example when using cloud hosting, email, or analytics providers — we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the European Commission.

How long we keep your personal data for

We will not keep your personal data for any purpose for longer than is necessary and we will only retain the relevant personal information that is necessary in relation to the purpose.

We will retain the personal data you provided on registering an account on our website so long as that account remains in existence. If you tell us, at any time, that you no longer want to have an account, then we will delete your personal data from our records.

In the case of any contact you may have with our customer services department, we will retain those details for as long as necessary to resolve your query and for a reasonable period afterwards for record-keeping.

Who we share your personal data with

For the purposes set out above, we may also provide your personal data to our suppliers and processors who perform certain business services for us. We share your personal data with third parties who:

• Deliver orders (i.e. we disclose your contact details to the shipping companies so they can deliver)
• Gift Recipient (we disclose the sender's contact details so the recipient knows who the sender is, see "Disclosure of Sender" section below)
• Facilitate the storage of enquiry email (support tickets)
• Facilitate live chat
• Store and generate personalised artwork imagery
• Process payment (i.e. our Payments Processors such as Stripe Payments & PayPal)
• Capture feedback reviews

We may also share data with trusted service providers who assist us with IT hosting, analytics, advertising, and customer communications. These providers are bound by contract to keep your information secure and to process it only on our instructions.

All third-party providers are required to keep your information secure and only process it on our instructions.

In addition, we may disclose your personal data:

• if we are under a duty to disclose or share your personal data in order to comply with any legal obligation, or in order to protect the rights, property or safety of our business, our customers or others. This includes, in specific cases, exchanging information with other companies and organisations for the purposes of fraud protection; and
• to successors in title or replacement operators of all or part of our respective businesses.

How we contact you

Contact regarding transactions - We will contact you if necessary regarding a transaction initiated by you. This may include:

• Transactional emails such as order confirmations, delivery updates, purchase receipts, and (where applicable) post-purchase review requests or shopping cart reminders.

Contact regarding promotions/marketing - If we have your consent, we may contact you by post, e-mail, SMS text messages, telephone or other means including other electronic means such as Facebook and social media applications, and only using such contact details as you provide to us from time to time.

You can withdraw your consent to marketing at any time, without affecting the lawfulness of processing based on consent before its withdrawal.

If you no longer wish to receive such or certain communications, you can let us know by contacting us using one of the email addresses here. You may also update your preferred contact details from your account preferences after logging on to the website.

Making a request

We are required by law to act on requests and provide information free of charge, except where your requests are manifestly unfounded or excessive (in particular because of their repetitive nature) in which case we may charge a reasonable fee (to cover administrative costs), or refuse to act on the request.

Please consider your request responsibly before submitting it. We'll respond as soon as we can. Generally this will be within one month from when we receive your request but, if the request is going to take longer to deal with, we'll come back to you and let you know.

Contacting us

If you need to contact us for any reason (including to exercise any of your rights in relation to data protection as set out above) please send us your request using the details here.

Disclosure of Sender

When your order is shipped directly to a third party (i.e. the gift recipient), we normally provide the recipient with the sender's details (such as name, address, telephone number, and if provided, email address) so that they know from whom the gift has come.

If you wish to remain anonymous, you may request this during checkout or by contacting our customer service team. In such cases, we will remove your details from the parcel. However, in line with our policy and to prevent nuisance or unwanted correspondence, we may provide the sender's details to the recipient if they make a reasonable request, for example to confirm the origin of a gift.

We process sender details for this purpose under our legitimate interests (to ensure transparency and to prevent misuse of our service). Sender details will never be disclosed to the recipient for marketing purposes.

Security of Your Data

We take appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include encryption, access controls, and secure storage of information.

While we take appropriate steps to protect your data, please note that no transmission of information over the internet can be guaranteed as completely secure.

Children's Data

Our services are not directed at children under the age of 16, and children are not able to create accounts or place orders with us. However, as part of personalised products (for example, greeting cards or gifts), customers may choose to provide content such as names, photos, or messages relating to children. In these cases, we process that information solely for the purpose of fulfilling the order, and we do not use it for marketing or any other unrelated purpose. By providing such content, you confirm that you have the right to share it with us. If you believe we have collected children's data in any other way, please contact us and we will delete it.

Changes To This Notice

Any changes to this Privacy Notice will be posted on this website so you are always aware of what information we collect, how we use it, and under what circumstances, if any, we disclose it. If we make significant changes to how we use your Personal Data, we will notify you by email (where appropriate) and give you the option to decide whether or not we may use your information in this new way.