Privacy Policy

1. Information We Collect

We may collect the following categories of personal data ("Personal Data"):

1.1 Information You Provide to Us

• Identity & contact details: name, email address, phone number, billing/shipping address, company name and designation (for corporate clients).
• Order & project details: gifting preferences, occasion details, recipient names and addresses, personalisation requests, budget, and event specifications.
• Payment information: billing details and transaction records (processed via third-party payment gateways; we do not store full card details).
• Communications: information you share via email, WhatsApp, contact forms, calls, or meetings.
• Recipient information: where you provide details of gift recipients (name, address, contact number) so we can fulfil deliveries or experiences on your behalf.

1.2 Information Collected Automatically

• Device and usage data (IP address, browser type, pages visited, time spent) via cookies and similar technologies when you use our website.

1.3 Information from Third Parties

• Information from vendors, delivery partners, or corporate contacts involved in fulfilling a gifting project.

2. How We Use Your Information

We use Personal Data to:

• Design, curate, and deliver gifting and experience solutions;
• Process orders, payments, and communicate delivery/project updates;
• Personalise gifts and experiences based on your preferences;
• Respond to enquiries, provide customer support, and manage client relationships;
• Send updates, offers, or newsletters (only with your consent, where required);
• Improve our Services, website, and internal operations;
• Comply with legal, tax, and regulatory obligations;
• Prevent fraud and ensure the security of our Services.

We process Personal Data only for the specified purpose for which consent was given, in line with the DPDP Act's purpose-limitation principle.

3. Legal Basis for Processing

We process your Personal Data on the basis of:

• Consent — freely given, specific, and informed consent, which you may withdraw at any time;
• Contractual necessity — to fulfil a service you have engaged us for;
• Legitimate use — such as responding to a request you have voluntarily made, or for purposes permitted under applicable law.

4. Sharing and Disclosure of Information

We do not sell your Personal Data. We may share information with:

• Vendors and delivery/logistics partners engaged to fulfil gifts, hampers, or experiences;
• Payment gateway providers for processing transactions;
• Service providers (e.g., IT hosting, analytics, design collaborators) bound by confidentiality obligations;
• Corporate clients, where a gifting project is commissioned by an organisation on behalf of its employees or stakeholders;
• Legal or regulatory authorities, where required by law, court order, or to protect our rights.

All third parties we work with are contractually required to handle your data securely and only for the purposes specified.

5. Data Retention

We retain Personal Data only for as long as necessary to:

• Fulfil the purpose for which it was collected;
• Meet legal, accounting, or tax reporting requirements;
• Resolve disputes and enforce agreements.

Once no longer required, data is securely deleted or anonymised.

6. Data Security

We implement reasonable security practices and procedures, including access controls, encryption where appropriate, and secure storage, to protect your Personal Data against unauthorised access, alteration, disclosure, or destruction. However, no method of transmission or storage is 100% secure, and we cannot guarantee absolute security.

7. Your Rights

Subject to applicable law (including the DPDP Act, 2023), you have the right to:

• Access the Personal Data we hold about you;
• Correct or update inaccurate or incomplete data;
• Withdraw consent at any time, without affecting the lawfulness of processing before withdrawal;
• Request erasure of your Personal Data, subject to legal retention requirements;
• Nominate another individual to exercise your rights in the event of death or incapacity;
• Grievance redressal, as set out below.

To exercise these rights, contact us using the details in Section 11.

8. Cookies

Our website may use cookies and similar tracking technologies to enhance your browsing experience and analyse site usage. You can control cookie preferences through your browser settings.

9. Children's Privacy

Our Services are not directed to individuals under the age of 18. We do not knowingly collect Personal Data from children. If we become aware that we have inadvertently collected such data, we will take steps to delete it.

10. Grievance Officer

In accordance with the Information Technology Act, 2000 and rules made thereunder, and the DPDP Act, 2023, the details of our Grievance Officer/Data Protection contact are:

We will endeavour to acknowledge grievances within Insert Number days and resolve them within Insert Number days.

11. Contact Us

For any questions about this Privacy Policy or our data practices, please contact:

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements. The revised version will be posted with an updated "Last Updated" date. Continued use of our Services after such changes constitutes acceptance of the updated Policy.