Privacy Policy
Last updated: 9 November 2026. This Privacy Policy explains how Giftalino collects, uses and protects information when you use the platform.
1. Who handles your data
Giftalino operates the digital collectible and gifting platform at giftalino.com. For privacy enquiries, contact [email protected] ([email protected]). You can contact Giftalino at this address about how your personal information is handled.
2. Information we process
We process account information such as username, email address and authentication credentials (stored as password hashes), as well as collection ownership, collectible serial numbers, achievements, gift messages, claim activity, trade offers, purchase and payment status, preferences and support enquiries. Payment details are handled by the payment provider; Giftalino does not need your full card number to record an order. We also process technical information necessary to operate and secure the service, such as request metadata and server logs.
3. Why we process information
We use account and transaction records to provide the service, authenticate users, deliver gifts, record ownership and prevent misuse. We use email addresses to verify accounts, send necessary service messages and answer support requests. Where applicable, our legal bases include performance of a contract, legitimate interests in security and reliability, compliance with legal obligations and consent for optional analytics or marketing.
4. Public collection information
If you make your collection public, your profile, Showcase, collectible details and displayed achievements may be visible to visitors. Public collectors may also appear in Top Collectors rankings based on their collection and platform activity. Gift messages and private account information are not intended to appear in the public collection. Do not include sensitive personal information in your public username.
5. Email and service providers
We use Brevo to deliver transactional emails and contact-form messages. PayPal processes payments where checkout is available. Hosting, database and infrastructure providers process technical data as necessary to operate the platform. Provider access is limited to their service functions and governed by applicable contractual safeguards.
6. Cookies and similar technologies
Essential session or authentication cookies are used to keep you signed in and protect your account. These are necessary for core service functions. Additional browser storage may be used for interface preferences. You can control non-essential browser storage through your browser settings and any consent controls made available on the site. Planned Google Analytics We plan to add Google Analytics to understand aggregate site usage. Google Analytics is not enabled by this policy or by this release. Before activation, we will update this policy and the cookie inventory, configure the service appropriately and request consent for non-essential analytics cookies where required. Declining analytics must not prevent use of essential Giftalino features.
7. Retention
We retain account and collectible records for as long as needed to operate the service and maintain accurate ownership history. Support messages and technical logs are retained only for appropriate operational, security or legal purposes. Retention depends on the type of record, its operational purpose and any applicable legal obligations. You may ask about retention of your personal information using the contact address above.
8. International transfers
Some service providers may process data outside your country. Where required, we will rely on appropriate transfer mechanisms and safeguards. You can contact us for more information about relevant international transfers and safeguards.
9. Your rights
Depending on applicable law, you may request access, correction, deletion, restriction, portability or objection to certain processing. You may withdraw consent where processing relies on consent. Some ownership and security records may need to be retained to satisfy legal or legitimate operational requirements. Contact [email protected] ([email protected]) to make a request. You may also complain to your competent data-protection authority.
10. Security and children
We use access controls and technical safeguards intended to protect data, but no online service is entirely risk-free. Children should not use Giftalino independently where parental permission or supervision is required by applicable law.
11. Updates
We may update this policy when the platform or applicable requirements change. Material changes will be communicated appropriately. Contact [email protected] ([email protected]) with privacy questions.