Privacy Policy

Giftoria Pty Ltd, trading as Giftoria (“Giftoria”, “we”, “us” or “our”), respects your privacy and is committed to handling personal information responsibly and transparently.

This Privacy Policy explains how we collect, hold, use and disclose personal information when you visit giftoria.com.au, place an order, send a gift to another person, contact us, subscribe to marketing communications or otherwise interact with Giftoria.

We manage personal information in accordance with applicable Australian privacy laws, including the Privacy Act 1988 (Cth) and the Australian Privacy Principles where they apply.

1. Personal Information We Collect

The personal information we collect depends on how you interact with Giftoria and may include:

Your name
Email address
Telephone number
Shipping and billing addresses
Account login information, if you create an account
Order details, product selections and purchase history
Gift messages, delivery instructions and packaging selections
The name, address, telephone number and delivery details of a gift recipient
Enquiries, correspondence, reviews and customer service communications
Marketing preferences and subscription information
Information relating to returns, refunds, disputes or suspected fraudulent activity
Device, browser, IP address, website usage and cookie information
Payment status, payment method and transaction reference information

Payments are processed through Shopify and other authorised payment providers. Giftoria does not generally receive or store your complete credit or debit card number.

Please do not include sensitive personal information in a gift message, product review or contact form unless it is reasonably necessary for your enquiry.

2. How We Collect Personal Information

We may collect personal information:

Directly from you when you place an order, create an account, contact us, submit a form, write a review or subscribe to communications
From a person purchasing and sending a gift to you
Automatically when you browse or use our website, including through cookies and similar technologies
From Shopify, payment providers, delivery providers and other service providers involved in processing an order
From social media platforms when you interact with Giftoria through those platforms
From publicly available sources where lawful and reasonably necessary

If you provide us with personal information about another person, including a gift recipient, you should ensure that you are authorised or otherwise have a reasonable basis to provide that information.

3. How We Use Personal Information

We may collect, hold and use personal information to:

Process, confirm and fulfil orders
Arrange payment, delivery, tracking and customer notifications
Prepare gift packaging and include a customer-provided gift message
Deliver an order directly to a gift recipient
Respond to enquiries and provide customer support
Manage order changes, cancellations, returns, refunds and consumer guarantee claims
Verify transactions and prevent fraud, misuse or security incidents
Maintain customer accounts and order records
Improve our products, services, website and customer experience
Analyse website traffic, shopping behaviour and business performance
Send marketing communications where you have consented or where otherwise permitted by law
Comply with accounting, taxation, legal and regulatory obligations
Establish, exercise or defend legal claims
Carry out other purposes disclosed to you at the time of collection or with your consent

We will not use personal information for a materially different purpose unless permitted by law or we have obtained appropriate consent.

4. Information About Gift Recipients

Giftoria allows customers to purchase gifts for delivery directly to another person.

If a customer provides a recipient’s name, address, telephone number, delivery instructions or gift message, we use that information only as reasonably necessary to:

Prepare and deliver the gift
Provide delivery updates where appropriate
Resolve delivery or order problems
Respond to an enquiry from the purchaser or recipient
Meet our legal and record-keeping obligations

We do not add a gift recipient to our marketing list merely because someone has sent them a Giftoria order. A recipient will only receive marketing communications if they separately consent or subscribe.

5. Payments

Payments made through the Giftoria website are securely processed by Shopify and the payment providers displayed at checkout.

These providers may collect and process payment and identity information under their own privacy policies and terms. Giftoria may receive limited transaction information, such as payment confirmation, payment method, billing details and fraud-screening results.

We do not generally have access to or store complete payment card details.

6. Cookies and Similar Technologies

The Giftoria website may use cookies, pixels and similar technologies to:

Operate the website and shopping cart
Remember preferences and selections
Maintain website security
Measure website performance and traffic
Understand how visitors use the website
Improve products, content and customer experience
Measure the effectiveness of advertising and marketing
Present more relevant content or advertising where permitted

Some cookies are necessary for the website to function. Other cookies may be provided by Shopify, analytics services, advertising platforms or other service providers.

You can manage cookies through your browser settings and, where available, the website’s cookie preference controls. Disabling certain cookies may affect website functions, including the shopping cart or checkout.

7. Marketing Communications

If you subscribe to Giftoria marketing communications or otherwise provide valid consent, we may send you information about products, gift ideas, new arrivals, promotions and other Giftoria news.

You can unsubscribe at any time by:

Using the unsubscribe link in a marketing email
Following the opt-out instructions in a message
Contacting us at info@giftoria.com.au

Unsubscribing from marketing does not prevent us from sending necessary service communications relating to an order, payment, delivery, return or customer enquiry.

8. How We Disclose Personal Information

We may disclose personal information where reasonably necessary to:

Shopify and ecommerce platform providers
Payment processors and fraud-prevention providers
Australia Post, couriers and other delivery providers
Website hosting, IT, data storage and security providers
Email, SMS, customer service and communication providers
Analytics, advertising and marketing service providers
Review and customer feedback platforms
Accountants, lawyers, insurers and other professional advisers
Government authorities, regulators, courts or law-enforcement bodies where required or permitted by law
A purchaser, successor or adviser involved in a proposed or completed sale, merger, restructuring or transfer of the business, subject to appropriate confidentiality and legal requirements

We only disclose information that is reasonably necessary for the relevant service or purpose.

Giftoria does not sell or rent personal information as part of its ordinary business activities.

9. Overseas Disclosure and Processing

Some of our service providers operate or store information outside Australia.

Depending on the services used, personal information may be processed in countries including Canada and the United States, as well as other countries in which Shopify, payment providers, technology providers or their service providers operate.

Where required by applicable law, we take reasonable steps to ensure overseas recipients handle personal information appropriately. However, privacy protections in another country may differ from those available in Australia.

10. Data Security

Giftoria takes reasonable administrative, technical and organisational measures to protect personal information from:

Misuse
Interference
Loss
Unauthorised access
Unauthorised modification
Unauthorised disclosure

These measures may include secure ecommerce systems, access controls, password protection, trusted payment providers and restrictions on access to customer information.

No internet transmission or storage system can be guaranteed to be completely secure. If a data incident occurs, we will assess and respond to it in accordance with applicable law.

11. How Long We Keep Personal Information

We retain personal information only for as long as reasonably necessary to:

Complete transactions and provide customer service
Maintain business, accounting and taxation records
Manage returns, disputes and legal claims
Prevent fraud and maintain security
Meet legal and regulatory obligations

When personal information is no longer reasonably required, we will take reasonable steps to delete, destroy or de-identify it, unless we are required or permitted by law to retain it.

12. Accessing or Correcting Personal Information

You may request access to personal information Giftoria holds about you or ask us to correct information that is inaccurate, incomplete, out of date, irrelevant or misleading.

To make a request, email info@giftoria.com.au with:

Your name
The email address associated with your order or enquiry
Details of the information you would like to access or correct

We may need to verify your identity before completing a request. We will respond within a reasonable period and will explain any lawful reason that prevents us from providing access or making a requested correction.

There is no fee for submitting an access or correction request. Where permitted by law, a reasonable fee may apply for providing access if substantial work or costs are involved. We will inform you before any fee is incurred.

13. Deletion and Withdrawal of Consent

You may ask us to delete personal information or withdraw consent where applicable.

We will consider the request in accordance with applicable law. We may need to retain certain information for legitimate business, fraud-prevention, accounting, taxation, dispute-resolution or legal purposes.

Withdrawing consent does not affect processing that occurred lawfully before consent was withdrawn.

14. Privacy Complaints

If you have a concern about how Giftoria has handled personal information, please contact us at info@giftoria.com.au and use the subject line “Privacy Complaint”.

Please include:

Your name and contact details
A description of the concern
Relevant order or correspondence details
The outcome you are seeking

We will acknowledge and investigate the complaint within a reasonable period. We aim to provide a response within 30 calendar days, although complex matters may require additional time. If additional time is required, we will let you know.

If the Privacy Act applies to the matter and you are not satisfied with our response, you may be entitled to contact the Office of the Australian Information Commissioner through www.oaic.gov.au.

15. Children’s Privacy

Purchases through the Giftoria website should be made by a person aged 18 or over, or with the involvement and permission of a parent or legal guardian.

We do not knowingly collect personal information directly from children unless it is reasonably necessary and provided with appropriate involvement or authorisation from an adult.

16. Third-Party Websites and Services

The Giftoria website may contain links to third-party websites, platforms or services.

Giftoria is not responsible for the privacy practices of third parties. We encourage you to read the relevant privacy policy before providing personal information to another organisation.

17. Contact Giftoria

For privacy enquiries, access or correction requests, complaints or questions about this Privacy Policy, contact:

Giftoria Pty Ltd trading as Giftoria
Email: info@giftoria.com.au
Website: https://giftoria.com.au
Business location: Melbourne, Victoria, Australia