Privacy policy

This policy explains how Giftcards.co.nz handles personal information under the New Zealand Privacy Act 2020.

Who we are acting for

When you buy, receive or use a gift card, the business that issued it decides how your information is used. We hold that information on the business's behalf to provide the gift card service, and we don't use it for our own marketing or sell it.

What we collect

• Buyers: name, email address, the gift card amount and any message.
• Recipients: name and email address provided by the buyer, so the gift can be delivered. The delivery email tells recipients who sent it.
• Businesses and staff: account details, business details and an activity log of actions taken in the dashboard.
• Technical information such as IP address and browser type, for security and fraud prevention.

We never receive or store full card numbers. Payments are processed by Stripe.

How long we keep it

We keep purchase information while a gift card can still be used, and then as long as needed for financial record-keeping, after which personal details are removed. Abandoned checkouts are removed after 90 days. Financial totals are kept without personal details.

Security

We encrypt data in transit, store gift card codes encrypted, restrict staff access by role, and keep audit logs. If a privacy breach is likely to cause serious harm, we notify the Privacy Commissioner and affected people as soon as practicable.

Your rights

You can ask to access or correct your personal information. Contact the business that issued your gift card, or us at [email protected] and we'll help.

Overseas storage

Some service providers (such as email delivery and payment processing) may process information outside New Zealand under safeguards comparable to New Zealand law.