Privacy Policy

This Privacy Policy is issued by SendAChoice, a company registered in the United Kingdom, operating the gifting platform at sendachoice.com ("Platform").

We are the data controller for personal data collected through the Platform. Questions about this policy: privacy@sendachoice.com

Account and purchase data: name, email address, phone number, billing address, payment information (processed via our payment providers — we do not store card details), company name and VAT number for corporate accounts.

When you send a collection: recipient name and email address, your personal message, scheduled send date if applicable.

When a recipient redeems: delivery address, product selections, device and browser information for security verification.

Platform usage: IP address, browser type, device identifiers, pages visited, referring URLs, cookie data.

Communications: content of support requests, complaints, and any correspondence you send us.

We use personal data to: process purchases and fulfil orders; deliver collection notifications; arrange physical delivery; manage your account; provide customer support; send transactional communications; send marketing (with consent); prevent fraud and abuse; comply with legal obligations; improve the Platform; and resolve disputes.

We process data under the following bases: contract performance (to deliver your purchase); legitimate interests (fraud prevention, security, analytics, Platform improvement); legal obligation (tax, regulatory compliance); and consent (marketing, non-essential cookies). Where we rely on legitimate interests, we have balanced those interests against your rights and determined they do not override them.

We share data only where necessary with: fulfilment partners (to source and deliver chosen items); payment processors (to handle transactions securely); email and communications providers; analytics providers (data anonymised/pseudonymised where possible); legal authorities where required by law, court order or regulatory obligation.

We do not sell your personal data. We do not share it for third-party marketing purposes.

SendAChoice operates globally. Some service providers are located outside the UK or EEA. Where international transfers occur, we ensure appropriate safeguards are in place — including Standard Contractual Clauses approved by the UK ICO or equivalent transfer mechanisms.

• Account data: retained for the life of your account plus 2 years after closure
• Transaction and order data: 7 years (UK tax and accounting requirements)
• Marketing consent records: until consent is withdrawn
• Support communications: 3 years from last contact
• Fraud and security logs: up to 5 years where relevant to legal proceedings

Under UK GDPR you have rights to: access your data; rectify inaccuracies; request erasure (subject to legal retention requirements); restrict processing; data portability; object to processing based on legitimate interests; and withdraw consent at any time where processing is consent-based.

To exercise any right, email privacy@sendachoice.com. We will respond within 30 days. You may also lodge a complaint with the UK ICO at ico.org.uk.

We use: essential cookies (Platform function — cannot be disabled); analytics cookies (usage insights — can be declined); marketing cookies (advertising performance — require consent). Manage preferences via our cookie banner or browser settings.

We use TLS/SSL encryption for data in transit, access controls and authentication for our systems, and conduct regular security reviews. Payment data is processed exclusively by PCI-DSS compliant providers — we never store card numbers or CVV codes.

If you believe your account is compromised, contact support@sendachoice.com immediately.

The Platform is not directed to children under 16. We do not knowingly collect data from children. Contact us to remove any data submitted by a minor without parental consent.

The Platform may reference or link to third-party websites, brand pages or products. We are not responsible for the privacy practices of those third parties. We encourage you to review their privacy policies before sharing personal data.

We may use automated systems for fraud detection and order screening. Where automated decisions have significant effects on you, you have the right to request human review. Contact us to exercise this right.

We may update this policy from time to time. Material changes will be communicated by email or Platform notice. The effective date above reflects the most recent version. Continued use of the Platform constitutes acceptance of the updated policy.