Privacy policy

Last updated: October 27, 2025

1. Data Controller

This website and online store are operated by Gifting U Ltd, a company registered in Malta under registration number 32123633, with its registered office at 15 Triq il-Villegaignon, Mdina, Malta.

Email: info@gifting-u.com

For the purpose of the applicable data protection laws, including the EU General Data Protection Regulation (GDPR), Gifting U Ltd is the Data Controller responsible for processing your personal information.

If you have any questions about this Privacy Policy or how we handle your data, you can contact us at the details above.

2. Data Protection Officer (DPO)

If at any time Gifting U Ltd processes large volumes of personal data or sensitive information (such as payment data or data revealing special categories), we will appoint a qualified Data Protection Officer (DPO) — internal or external — to oversee compliance and data protection practices.

Until such appointment, all privacy inquiries should be addressed to info@gifting-u.com

3. Personal Information We Collect or Process

When we use the term “personal information,” we mean information that identifies or can reasonably be linked to you. We collect and process the following categories of personal data depending on your interaction with our website and services:

Contact details: name, billing/shipping address, phone number, email address.
Financial information: payment card details, transaction data.
Account information: username, password, and preferences.
Transaction information: purchases, returns, exchanges, order history.
Communications: messages and inquiries sent to us.
Device and usage information: IP address, browser type, operating system, and website interactions.

4. Personal Information Sources

We may collect personal data:

Directly from you (e.g., during checkout or account registration).
Automatically through cookies and analytics tools when you use our Services.
From our service providers (e.g., Shopify, payment gateways, logistics providers).
From business partners or third parties where lawful.

5. How We Use Your Personal Information

We process your personal information for the following purposes and on the following lawful bases under Article 6 of the GDPR:

Purpose of Processing	Lawful Basis
To provide, operate, and improve our Services, fulfill orders, and manage your account	Performance of a contract (Art. 6(1)(b))
To process payments, returns, and refunds	Performance of a contract (Art. 6(1)(b))
To send administrative or transactional communications	Legitimate interest (Art. 6(1)(f))
To send marketing communications (email, social media, etc.)	Consent (Art. 6(1)(a))
To prevent fraud, ensure security, and comply with laws	Legal obligation (Art. 6(1)(c))
To personalize and enhance user experience	Legitimate interest (Art. 6(1)(f))

You may withdraw your consent for marketing communications at any time by clicking “unsubscribe” in any email or contacting us at info@gifting-u.com

6. Cookies

Our website uses cookies and similar technologies to enhance functionality, analyze website traffic, and personalize content.
Cookies may also be used by third-party providers such as Shopify, Meta, and Google Analytics.

If you disable cookies in your browser, some features of our website may not function properly.

7. How We Disclose Personal Information

We may share your personal information:

With Shopify (our e-commerce platform provider) and other service providers that help us operate our business.
With marketing and advertising partners, where you have consented.
With affiliates or in case of a business transfer (e.g., merger or acquisition).
To comply with legal obligations or respond to valid requests by public authorities.

We do not sell or rent your personal information.

8. Relationship with Shopify

Our store is hosted by Shopify Inc., which processes data to enable order management, payments, and analytics.
Shopify acts as a data processor in some cases and as a data controller in others (e.g., when using aggregated analytics).

For more information on how Shopify processes your personal data, please refer to the Shopify Privacy Policy.

9. Children’s Data

Our Services are not directed to children under the age of 16.
In compliance with Maltese law (Data Protection Act, Chapter 586), we do not knowingly collect or process personal data from anyone under 16 years old without verifiable parental consent.

If you believe a child under 16 has provided us with personal data, please contact us at info@gifting-u.com so we can promptly delete it.

10. Security and Data Retention

We take appropriate administrative, technical, and physical measures to safeguard your data.
However, no system is completely secure, and we cannot guarantee absolute protection against unauthorized access.

We retain personal data only for as long as necessary to fulfill the purposes outlined in this Policy, including legal, accounting, and reporting requirements.

11. Your Rights

Under applicable data protection laws, you have the right to:

Access the personal data we hold about you.
Request correction or deletion of inaccurate or unnecessary data.
Withdraw consent at any time (where applicable).
Object to processing based on legitimate interest.
Request data portability.
File a complaint with the Office of the Information and Data Protection Commissioner (IDPC) in Malta.

To exercise your rights, contact us at info@gifting-u.com.

12. International Transfers

Your data may be processed outside the EEA.
When doing so, we ensure that appropriate safeguards are in place, such as the European Commission’s Standard Contractual Clauses (SCCs) or equivalent protection mechanisms.

13. Updates to This Privacy Policy

We may update this Privacy Policy periodically to reflect legal or operational changes. Updates will be posted on this page, with the revised “last updated” date.

14. Contact Us

If you have questions, requests, or complaints about this Privacy Policy or our handling of your data, please contact:

Gifting U Ltd
15 Triq il-Villegaignon, Mdina, Malta
Email: info@gifting-u.com