Privacy Policy

When you register and place an order, we collect:

• Sender information: your name, email address, country and password (stored hashed form not the actual password).
• Receiver information: the name, email address, and country of the person you are sending the E-Gift to, any message if the sender wants to send to receiver, gift category and if the sender wants to display there name or not.
• Order and payment information: details of the E-Gift ordered and payment confirmation data. Card or full payment details are processed by our third-party payment processor Razorpay and are not stored directly by us (see Section 5).
• Technical data: standard information such as IP address, browser type, and usage data collected automatically through the Service and is not utilized or stored by us.

• To create and verify your account;
• To generate, personalize, and deliver the E-Gift to the Receiver by email;
• To process payment and maintain order records;
• To communicate with you about your account, order, or delivery status;
• To operate, secure, and improve the Service; and
• To comply with legal obligations.

Where applicable law requires a legal basis, we process Sender information on the basis of contract performance (to provide the Service you requested) and we process Receiver information on the basis of our legitimate interest in delivering the E-Gift you requested, and/or your representation that the Receiver has consented to being contacted.

We do not sell, rent, or share your personal information, or the Receiver's personal information, with any third party for their own marketing purposes, while sender and receiver names are being displayed on our "Wall of Magic" page. We only disclose information to:

• Service providers who process data on our behalf and under our instructions solely to operate the Service (for example, our database provider, Google Firestore/Firebase, our email delivery provider, and our payment processor);
• Authorities, where required to comply with a legal obligation, court order, or to protect our rights, users, or the public; or
• A successor entity, in the event of a merger, acquisition, or sale of assets, subject to this Policy.

Personal information you submit is stored in our database (MongoDB). We take reasonable measures to protect information from unauthorized access, but no method of electronic storage or transmission is 100% secure, and we cannot guarantee absolute security. Payment card details are handled directly by our payment processor (Razorpay) and are not stored on our own servers or database.

We retain Sender and Receiver information for as long as the Service is operational, and in any event no later than 2 January 2027. On or before that date, all Sender and Receiver personal information will be permanently and irreversibly deleted from our database, and the Service will be shut down and will no longer be accessible.

Depending on your country of residence, you may have rights to access, correct, delete, or restrict the use of your personal information, or to object to certain processing. Because gift orders are non-editable once payment is completed (see our Terms & Conditions), correction requests after payment may be limited to what is legally required. To exercise any right, contact us at year2027new@gmail.com.

A Receiver's name, email address, country and the message are submitted to us by the Sender, not by the Receiver directly. By submitting this information, the Sender confirms they have an appropriate basis to share it with us for the sole purpose of delivering the E-Gift. A Receiver may contact us atyear2027new@gmail.com to request information about, or removal of, their data, subject to applicable law.

The Service is available to individuals of all ages and is not subject to a minimum age requirement, except where a minimum age is required by applicable law. We do not knowingly restrict access to the Service based solely on a user's age. If you are a parent or legal guardian and believe that a child has provided personal information through the Service in a manner that you believe is inconsistent with applicable law or this Privacy Policy, please contact us. We will review the request and, where required by applicable law, take appropriate steps to address the information.

Your information may be stored and processed in a country other than your own (including via our hosting/database provider). Where required, we rely on appropriate safeguards for such transfers.

We may update this Privacy Policy from time to time. Material changes will be reflected by updating the "Last Updated" date above.

For questions about this Privacy Policy or our data practices, contact us at year2027new@gmail.com.