Privacy Policy

2. Information We Collect

We collect only the information necessary to operate the Platform, provide access to digital experiences, and maintain security.

2.1 Information You Provide Directly

When using ByGift, you may provide:

1. Full name
2. Date Of Birth
3. Email address
4. Account login credentials
5. Communication preferences
6. Messages or optional information related to event participation
7. Customer support communications

2.2 Information Collected Automatically

When you use the Platform we may automatically collect:

1. IP address
2. Device and browser information
3. Operating system and device identifiers
4. Approximate geographic location (country or region level)
5. Platform usage activity
6. Interaction logs and timestamps
7. Cookies and similar tracking technologies

2.3 Payment Information

ByGift does not collect or store full payment card details. All payments are processed securely by licensed third-party payment service providers, such as Stripe, PayPal, and other supported providers. Payment information is handled directly by these providers in accordance with their own privacy policies.
ByGift does not hold customer funds and does not operate payment accounts, wallets, or stored balances.

3. How We Use Personal Information

We use personal information only for legitimate business purposes, including to:

1. Create and manage user accounts
2. Process transactions for access to digital experiences
3. Provide and deliver access to specific events or experiences
4. Enable participation in digital experiences
5. Prevent fraud, misuse, and unauthorized access
6. Comply with legal and regulatory obligations
7. Respond to inquiries and provide customer support
8. Improve and maintain the Platform

ByGift does not sell, rent, or trade personal information. ByGift does not maintain user wallets, stored balances, or general-purpose digital credit accounts.

4. Data Visibility and Privacy Controls

ByGift is designed to protect user privacy:

1. Users cannot access personal data of other users
2. Purchasers cannot access recipient account data beyond delivery and access instructions
3. Recipients cannot access purchaser personal information beyond necessary communication details
4. Participation in experiences is limited to access-related data only

5. Legal Basis for Processing (GDPR)

Under GDPR, ByGift processes personal data based on the following legal grounds:

1. Contractual necessity – to provide Platform services and experiences access
2. Legal obligation – to comply with applicable laws
3. Legitimate interests – such as fraud prevention, platform security, and service improvement
4. Consent – where required (e.g., marketing communications)

6. Cookies and Tracking Technologies

ByGift uses cookies and similar technologies to:

1. Enable essential platform functionality
2. Maintain user sessions
3. Improve performance and security
4. Understand how the Platform is used

You can control or disable cookies through your browser settings. Some features of the Platform may not function properly without cookies.

7. Data Sharing and Third Parties

We share personal information only when necessary and only with trusted third parties, including:

1. Payment processors
2. Hosting and infrastructure providers
3. Security, analytics, and fraud-prevention services
4. Analytics services
5. Customer support platforms

All third parties are contractually obligated to process data securely and in compliance with applicable data protection laws.

8. International Data Transfers

ByGift may process or store data outside your country of residence. Where data is transferred internationally, we ensure appropriate safeguards are in place, including:

1. Adequacy decisions
2. Standard Contractual Clauses (SCCs)
3. Equivalent lawful transfer mechanisms

9. Data Retention

We retain personal information only for as long as necessary to:

1. Provide Platform services
2. Comply with legal, accounting, and regulatory requirements
3. Resolve disputes and enforce agreements

When no longer required, data is securely deleted or anonymized.

10. Data Security

ByGift implements appropriate technical and organizational measures to protect personal data, including:

1. Secure infrastructure and encrypted connections
2. Access control and authentication systems
3. Monitoring and fraud detection mechanisms
4. Internal security procedures

Despite these measures, no system is completely secure, and we cannot guarantee absolute security.

11. Your Privacy Rights

Depending on your jurisdiction, you may have the right to:

1. Access your personal data
2. Correct inaccurate or incomplete information
3. Request deletion of your personal data
4. Restrict or object to the processing of your data
5. Request portability of your personal data
6. Withdraw consent where processing is based on consent

Users in the European Economic Area (EEA) and United Kingdom have additional rights under the General Data Protection Regulation (GDPR). Requests can be submitted using the contact details provided below.

12. Children’s Privacy

ByGift is not intended for individuals under the age of 18. We do not knowingly collect personal data from minors.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated effective date.

14. Contact Information

For privacy-related questions or requests, please contact:
ByGift Support