Privacy Policy

1. Introduction

This Privacy Policy explains how Giftscardsnestsinfo handles personal data in connection with this informational website. It is intended to provide clear information about what data may be collected, where it comes from, why it is used, the legal bases relied upon, how long it is retained, and the rights available to individuals in relation to their data. This website does not provide sales, subscriptions, payment processing, or account registration functions.

2. Data Controller

For the purposes of this website, Giftscardsnestsinfo is the controller of personal data collected through the website and related communications. The contact details for the controller are listed above.

3. Categories of Personal Data

Depending on how the website is used, the categories of personal data may include:

-identification data such as a name provided in a contact message
-contact data such as an email address or telephone number
-correspondence data contained in messages sent to the website
-technical data such as IP address, browser type, device type, language settings, date and time of access, and log data
-cookie or similar technology data, where applicable and permitted
-records of consent choices relating to cookies or contact submissions

This website does not request payment card information, account passwords, or full gift card numbers through its general contact channel.

4. Sources of Personal Data

Personal data may be obtained:

-directly from the individual when they submit a message or otherwise contact the website
-automatically from devices and browsers when pages are accessed
-from cookie preference tools where users make selections
-from service providers that support hosting, security, analytics, or website administration

5. Purposes of Processing

Personal data may be processed for the following purposes:

-operating, maintaining, and securing the website
-responding to enquiries sent through the Contact page or by email
-managing consent preferences
-understanding website use through analytics where consent is required and has been provided
-keeping internal records relevant to website administration
-preventing misuse of the website and supporting technical troubleshooting

6. Lawful Bases

The lawful bases relied upon may include:

-consent, where a user chooses to submit personal data through a contact form with a consent checkbox or where non-essential cookies are accepted
-legitimate interests, where processing is necessary for website security, administration, fraud prevention, record-keeping, and responding to communications in a proportionate manner
-legal obligation, where processing is necessary to comply with an applicable requirement under United Kingdom law

Where consent is used, it may be withdrawn at any time. Withdrawal does not affect processing carried out before the withdrawal.

7. Special Category Data

This website does not seek special category personal data, such as health information, biometric data, religious belief data, or similar sensitive information, through its ordinary pages or contact tools. Individuals should not send such information unless it is necessary and specifically requested with appropriate notice. If special category data is received unexpectedly, it will be handled with restricted access and used only where a valid condition applies under relevant United Kingdom data protection law.

8. Children’s Data

This website is intended for a general audience. If personal data relating to a minor is processed in circumstances where consent is required, consent should be provided by a parent or legal guardian. The website does not knowingly use children’s data for profiling or advertising purposes.

9. Data Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, including website administration, security review, responding to correspondence, maintaining records of consent, and meeting legal or operational requirements. Retention periods may differ depending on the type of data, the context of collection, and any ongoing need to keep the information accurate and secure. When data is no longer required, it is deleted, anonymised, or otherwise disposed of securely.

10. Disclosure to Third Parties

Personal data may be disclosed to third-party processors and service providers where this is necessary for website hosting, security, analytics, email handling, technical maintenance, or administrative support. These recipients are expected to process personal data only on documented instructions and with appropriate confidentiality and security measures. Personal data may also be disclosed where necessary to establish, exercise, or defend legal rights, or where disclosure is otherwise required by law.

11. International Transfers

Where personal data is transferred outside the United Kingdom, the transfer will take place only where there is an appropriate safeguard or other lawful transfer mechanism recognised under applicable data protection law. This may include adequacy regulations, contractual safeguards, or another recognised basis permitting the transfer.

12. Security Measures

The website uses reasonable technical and organisational measures intended to protect personal data against unauthorised access, alteration, disclosure, or loss. These measures may include access controls, secure hosting arrangements, logging, update procedures, and limited access to administrative systems. No internet-based system is entirely free from risk, and users should avoid sending unnecessary sensitive information through general contact channels.

13. Individual Rights

Subject to applicable law and the context of processing, individuals may request access to their personal data, correction of inaccurate data, erasure, restriction of processing, portability of data provided by them, objection to certain processing activities, and withdrawal of consent where consent is relied upon. Requests can be sent using the contact details above. The website may need to verify identity before acting on a request where this is necessary to protect personal data.

14. Accuracy and Data Minimisation

The website aims to process only the personal data reasonably necessary for the stated purpose and to keep records accurate where appropriate. Users are asked not to submit unnecessary personal data through the Contact page.

15. Changes to This Policy

This Privacy Policy may be updated from time to time to reflect operational, legal, or technical changes affecting the website. The revised version will be published on this page with the updated date shown above.

For more information, please use the contact details above.