GIFTYNIA (“GIFTYNIA,” “we,” “us,” “our”), operating the website www.giftynia.com (the “Site”), is committed to protecting the privacy of everyone who visits the Site, creates an account, or places an order. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and the rights available to you.
This Policy is issued in accordance with the Information Technology Act, 2000 and the Information Technology (Reasonable Security Practices and Procedures and Sensitive Personal Data or Information) Rules, 2011 (“SPDI Rules”), and is drafted to align with the Digital Personal Data Protection Act, 2023 and the Digital Personal Data Protection Rules, 2025 (“DPDP Act”) as its substantive provisions come into force. By using the Site, you consent to the data practices described here.
1. Personal data we collect
| Category | Examples | When collected |
|---|---|---|
| Account data | Name, email address, phone number, password (hashed) | Sign-up, sign-in |
| Delivery data | Shipping address, recipient name, phone number, landmark/pincode | Checkout, address book |
| Order data | Items purchased, order value, gift note content, packaging selection | Checkout |
| Payment data | Payment method type and status (we do not store your card, UPI ID, or bank details — these are collected and processed directly by Razorpay) | Checkout |
| Review content | Review text, uploaded images, product reviewed | When you submit a review |
| Location data | Address search queries and pin-drop coordinates via Ola Maps during checkout | Address capture at checkout |
| Usage data | Pages visited, device/browser type, IP address, cookies | Automatically, while browsing |
| Communications | Emails or messages you send us, concierge/bulk-gifting enquiries | When you contact us |
We collect this data directly from you (forms you fill in), automatically (cookies, analytics), and from third parties acting on our behalf (e.g., Razorpay confirms payment status; Google confirms your identity if you sign in with Google; Ola Maps resolves address queries you enter).
2. Why we use your data
- To create and manage your account and order history.
- To process, pack, ship, and deliver your order, including sharing your delivery address and phone number with our courier partners.
- To process payment through Razorpay and confirm successful transactions.
- To display your product reviews (name/initials and content, as you choose to submit them) to other visitors.
- To send order confirmations, shipping updates, and — with your consent — occasional marketing communications, which you can opt out of at any time.
- To respond to support, concierge, and bulk-gifting enquiries.
- To detect and prevent fraud, abuse, and security incidents.
- To comply with tax, accounting, and legal obligations.
3. Legal basis and consent
Where we rely on your consent (e.g., marketing emails, optional profile details), you may withdraw that consent at any time by contacting us at giftyniaofficial+grievance@gmail.com. Withdrawing consent does not affect the lawfulness of processing carried out before withdrawal, and does not affect data we are required to retain for legal or accounting purposes (e.g., order and payment records).
4. Who we share data with
We do not sell your personal data. We share it only as needed to run the Site:
| Recipient | Purpose | Data shared |
|---|---|---|
| Razorpay Software Pvt Ltd | Payment processing | Order amount, order reference, your contact details as needed for payment |
| Supabase (database, authentication, file storage provider) | Hosting our database, login sessions, and uploaded images | All account, order, and review data (Supabase acts as our data processor) |
| Google (if you use “Sign in with Google”) | Authentication | Name, email address, as authorized by you via Google OAuth |
| Courier/logistics partners | Delivery | Recipient name, address, phone number |
| Ola Maps | Address autocomplete and delivery-location accuracy | Location queries and pin-drop coordinates you provide during address capture |
| Government or regulatory authorities | Legal compliance | As required by law, court order, or valid government request |
We require our processors to protect your data under contractual confidentiality and security obligations. We do not currently transfer personal data outside India as part of routine operations; if that changes, this Policy will be updated to reflect the safeguards applied.
5. Cookies
We use strictly necessary cookies (to keep you signed in, to remember your cart) and, where enabled, analytics cookies to understand Site usage. You can control cookies through your browser settings; disabling strictly necessary cookies may prevent parts of the Site (like checkout) from working.
6. Data retention
We retain account and order data for as long as your account is active and thereafter for the period required to meet our tax, accounting, and consumer-protection obligations (generally up to [X years — confirm with your accountant/company secretary] from the date of the transaction). Review content remains visible unless you request its removal or we remove it under our moderation policy. You may request deletion of your account at any time, subject to records we are legally required to keep.
7. Your rights
Subject to applicable law, you have the right to:
- Access the personal data we hold about you.
- Correct inaccurate or incomplete data.
- Withdraw consent for processing based on consent (e.g., marketing).
- Request erasure of your account and associated personal data, subject to our legal retention obligations.
- Nominate another individual to exercise your rights on your behalf in the event of death or incapacity (as provided under the DPDP Act).
- Lodge a grievance with our Grievance Officer (see §9), and thereafter with the Data Protection Board of India if unresolved.
To exercise these rights, contact us at giftyniaofficial+grievance@gmail.com. We will respond within the timeframe required by applicable law.
8. Security
We use industry-standard safeguards — encrypted connections (HTTPS/TLS), role-based database access controls (Postgres Row-Level Security), and Razorpay’s PCI-DSS-compliant payment infrastructure — to protect your data. No method of transmission or storage is 100% secure; if a breach affecting your personal data occurs, we will notify affected users and the relevant authority as required by law.
9. Grievance Officer
In accordance with the Information Technology Act, 2000 and the Consumer Protection (E-Commerce) Rules, 2020:
Name: Chiranjit Saha
Designation: Grievance Officer, GIFTYNIA
Email: giftyniaofficial+grievance@gmail.com
Address: Hijalpukur Main Road, Nagarthuba, Habra, North 24 Parganas, West Bengal - 743263
Response time: We will acknowledge your complaint within 48 hours and resolve it within one month of receipt.
10. Children’s data
The Site is not directed at children under 18. We do not knowingly collect personal data from children without verifiable parental/guardian consent as required under the DPDP Act. If you believe a child has provided us personal data, contact us and we will delete it.
11. Changes to this Policy
We may update this Policy from time to time. The “Last updated” date at the top will reflect the most recent revision. Material changes will be notified via the Site or by email where appropriate.
12. Contact us
GIFTYNIA
Hijalpukur Main Road, Nagarthuba, Habra, North 24 Parganas, West Bengal - 743263
Email: giftyniaofficial@gmail.com
Phone: +91-9609600299