PRIVACY POLICY

⠀⠀

1. GENERAL PROVISIONS AND CONTROLLER DETAILS

⠀⠀
This Privacy Policy (the "Policy") governs the processing of personal data collected from users of the digital platform operated under the domain fancygiftcard.com (the "Platform").
⠀⠀
For the purposes of applicable data protection legislation, the data controller responsible for your personal information is:
⠀⠀
* Company Name: CURVITO GROUP LTD
* Registered Office Address: 128 City Road, London, United Kingdom, EC1V 2NX
* Company Registration Number: 16741661
* Contact Telephone: +44 7463 083214
* Contact Email: hello@fancygiftcard.com
⠀⠀
By accessing, browsing, or utilizing the services available on the Platform, you acknowledge that your personal information will be handled in accordance with the practices detailed in this Policy.
⠀⠀

2. THE TYPES OF DATA WE COLLECT

⠀⠀
We gather information that you provide to us directly, as well as data generated automatically during your interactions with the Platform. This information is categorized as follows:
⠀⠀
* Identity & Account Data: Usernames, profile settings, and registration credentials.
* Contact Details: Your email address and any other communication details provided during registration or support interactions.
* Activity & Transaction Records: Information concerning the digital gift cards purchased, order history, transaction dates, amounts, and delivery fulfillment status.
* Correspondence: Text and metadata from your communications with our customer care and support teams.
* Technical & Usage Information: IP addresses, device identifiers, browser types, operating system details, and general analytical data regarding how you navigate and interact with our Platform.
⠀⠀
Note on Payment Data: All financial transactions and checkout payments made to acquire digital gift cards are handled securely and directly by our dedicated third-party payment service provider. The Company does not collect, process, or retain full payment card details or sensitive financial credentials on its servers.
⠀⠀

3. PURPOSES AND LEGAL BASES FOR PROCESSING

⠀⠀
We process your personal information under strict legal grounds and solely for clearly defined operational purposes, as outlined below:
⠀⠀
* Service Delivery: Managing user accounts, processing direct purchases, and facilitating the distribution and delivery of digital products.
* Legal Basis – Performance of a Contract: Processing is strictly necessary to fulfill our contractual obligations to you under the Terms of Use.
⠀⠀
⠀⠀
* Support & Communication: Addressing inquiries, resolving technical issues, and managing customer service requests.
* Legal Basis – Performance of a Contract / Legitimate Interests: Necessary to fulfill service requests and maintain high-quality customer relations.
⠀⠀
⠀⠀
* Platform Integrity & Security: Monitoring for fraudulent activities, preventing unauthorized access, ensuring system stability, and verifying transaction integrity when misuse is suspected.
* Legal Basis – Legitimate Interests: Our overriding interest in protecting the Platform, our assets, and our user community from cyber threats and abuse.
⠀⠀
⠀⠀
* Analytics & Optimization: Reviewing technical usage trends to upgrade features and improve overall Platform performance.
* Legal Basis – Legitimate Interests: Continuously optimizing our digital services and user experience.
⠀⠀
⠀⠀
* Regulatory Compliance: Adhering to statutory requirements, accounting rules, and legal mandates.
* Legal Basis – Legal Obligation: Compliance with mandatory laws applicable to corporations in the United Kingdom.
⠀⠀
⠀⠀

4. DATA SHARING AND INTERNATIONAL TRANSFERS

⠀⠀
The Company does not sell, rent, or trade your personal data to any third parties for marketing purposes. However, to ensure seamless service delivery, we may disclose relevant data to the following categories of recipients:
⠀⠀
* Third-Party Vendors & Service Providers: Trusted partners who assist us with web hosting, technical infrastructure, communication systems, and platform analytics.
* Payment Processor: Our integrated payment gateway partner processing direct financial checkout transactions safely.
* Professional Advisers: Legal experts, auditors, and compliance consultants in connection with protecting our corporate rights.
* Law Enforcement & Public Authorities: State bodies or regulatory institutions, strictly when mandated by applicable law or to safeguard our legal position.
⠀⠀
Cross-Border Transfers: To maintain continuous platform operations, your personal data may be transferred to and processed in countries outside the United Kingdom. In such events, the Company implements appropriate safeguards and legal mechanisms to guarantee that your information receives a level of protection equivalent to that required under UK data protection laws.
⠀⠀

5. DATA RETENTION POLICY

⠀⠀
We store personal data exclusively for the duration necessary to satisfy the specific purposes outlined in this Policy, or as mandated by law. Our retention parameters include:
⠀⠀
* Account Profiles: Retained throughout the lifecycle of your active account and for a reasonable, limited duration following account closure.
* Transactional Histories: Kept as long as required to comply with financial, tax, and corporate record-keeping rules.
* Support Correspondence: Preserved for a timeframe sufficient to resolve ongoing issues and manage potential legal claims or disputes.
⠀⠀
Data may be held for extended periods if required by a legal obligation or for the establishment, exercise, or defense of legal claims.
⠀⠀

6. COOKIES AND TRACKING TECHNOLOGIES

⠀⠀
The Platform implements tracking tools to optimize website functionality, remember your preferences, and evaluate traffic patterns. You can manage your cookie preferences through your personal web browser settings; however, disabling certain cookies may limit your ability to use some features of the Platform.
⠀⠀

7. YOUR PRIVACY RIGHTS

⠀⠀
Depending on your jurisdiction and applicable data protection legislation, you are entitled to several rights regarding your personal information:
⠀⠀
* Access & Portability: The right to request copies of the data we hold about you.
* Rectification: The right to request the correction of inaccurate or incomplete records.
* Erasure ("Right to be Forgotten"): The right to request the deletion of your data under specific statutory conditions.
* Restriction & Objection: The right to limit how we process your data or object to processing based on our legitimate interests.
* Consent Withdrawal: Where processing relies on your consent, you may revoke it at any time without affecting the lawfulness of prior processing.
⠀⠀
To exercise any of these rights, please submit a formal request to our support team at hello@fancygiftcard.com. We may require you to verify your identity before processing your request.
⠀⠀
Additionally, you retain the absolute right to lodge a formal complaint regarding our data practices with the Information Commissioner’s Office (ICO) in the United Kingdom.
⠀⠀

8. REVISIONS TO THIS POLICY

⠀⠀
We reserve the right to modify this Privacy Policy at our discretion to reflect operational adjustments, changes to our digital products, or shifting legal requirements.
⠀⠀
Any updated version will be published directly on this page. Your continued utilization of the Platform after changes are posted serves as your acknowledgment of the modified terms.