Privacy Policy

gifti.club (“gifti.club”, “we”, “us”) is a product of BUILTFORBUSINESS LLP. This policy explains what information we collect when you use the platform, how we use it, and the choices you have.

The short version

Senders (companies and individuals) see the financial details of their own campaigns. Recipients never do. Every recipient-facing part of gifti.club is built to never receive price, budget, or margin data in the first place — not just to hide it in the interface.

Information we collect

Account data. When you sign up as a sender, we collect your name, email address, whether you’re signing up as a company or an individual, and your company name if applicable.

Campaign data. When you create a campaign, we store the recipient’s name and contact detail you provide, the occasion, your message, the internal gift value you set, and the gifts you mark as eligible. This is visible only to you and platform admins.

Recipient delivery data. When a recipient opens a gift link and selects a gift, we collect the delivery information they enter — name, phone, email (optional), and address — solely to fulfill that order.

Usage data. We use session cookies to keep you signed in. We don’t use third-party advertising trackers.

How we use your information

• To operate campaigns, gift links, and order fulfillment.
• To communicate with you about your campaigns or orders.
• To maintain the security and integrity of the platform.
• To comply with legal obligations.

Who we share it with

We use Supabase for authentication, database, and storage, and Vercel for hosting. Both process data on our behalf under their own security commitments. We do not sell personal data, and recipient delivery details are shared only with the parties needed to fulfill an order.

Data isolation

Every sender’s campaigns, recipients, and budgets are isolated at the database level — one company or individual can never see another’s data, and this is enforced by row-level security policies, not just application logic.

Data retention

We retain account and campaign data for as long as your account is active, and recipient order data for as long as needed to support delivery, returns, and dispute resolution. You can request deletion at any time — see below.

Your rights

You can request access to, correction of, or deletion of your personal data by contacting privacy@gifti.club. Recipients who want their delivery information removed after an order is completed can make the same request.

Children’s privacy

gifti.club is not directed at children under 13, and we do not knowingly collect their data.

Changes to this policy

We’ll update the date at the top of this page if this policy changes, and let account holders know of any material changes.

Contact

Questions about this policy? Reach us at privacy@gifti.club.