Legal
Privacy Policy
Last updated: 1 October 2026
This policy covers the Giftoro website at giftoro.io. It does not cover services we provide under a signed commercial agreement — those are governed by that agreement and by the data-processing terms attached to it.
What we collect
The only personal data this website collects is what you type into the “Talk to Sales” form: your name, company, work email, the volume range you select and your message. We also record the time the form was submitted, so that we can filter automated submissions, and how you found us: the site that referred you (domain only), the first page you opened and any campaign tags in the link.
We do not run advertising or analytics trackers on this site, and we do not buy or enrich contact data about visitors.
Why we collect it
To reply to your enquiry and, if it leads somewhere, to discuss a commercial relationship. That is the whole purpose. We do not add form submissions to a marketing list or share them with third parties for their own use.
The lawful basis is our legitimate interest in responding to business enquiries that were sent to us deliberately.
How long we keep it
Enquiries that do not lead to a business relationship are deleted within 24 months. Where an enquiry becomes a partnership, the contact details move into our normal business records and are kept as long as the relationship and applicable record-keeping obligations require.
Who processes it
Form submissions are handled by our own infrastructure and reach our team by email. Where we rely on service providers — hosting and email delivery — they act on our instructions and only to the extent needed to deliver the message.
Cookies and local storage
We set no tracking cookies. The site stores two items in your browser: your light or dark theme preference, which never leaves your device, and, for the current tab only, how you arrived at the site, which is sent to us only together with a form you choose to submit. See the Cookie Notice for detail.
Server logs
Our web server keeps standard access logs — IP address, timestamp, requested path, user agent — for security and troubleshooting. These are rotated on a short schedule and are not used to build profiles of visitors.
Your rights
You can ask us for a copy of the data we hold about you, ask us to correct it, or ask us to delete it. Write to info@giftoro.io and we will action the request. If you are in a jurisdiction with a supervisory authority for data protection, you can also complain to it.
Changes
If this policy changes materially, the date at the top of this page changes with it.
Contact
Questions about this policy: info@giftoro.io.