At Heart Gifted (“we”, “our”, “us”), protecting your privacy and ensuring compliance with data protection laws, including the General Data Protection Regulation (GDPR), is a priority. This policy explains how we use cookies and handle your personal data.
1. What Are Cookies?
Cookies are small text files stored on your device when you visit a website. They help improve your browsing experience, remember your preferences, and provide analytics on website usage.
2. Types of Cookies We Use
We may use the following types of cookies:
-
Essential cookies: Required for the website to function properly (e.g., shopping cart, login).
-
Performance cookies: Collect anonymous data on website usage to help us improve performance.
-
Functionality cookies: Remember your preferences, such as language or location.
-
Marketing/Targeting cookies: Track browsing behavior to deliver relevant advertisements (only with your consent).
3. Managing Cookies
You can control or disable cookies via your browser settings. Please note that some parts of our website may not function correctly if cookies are disabled.
4. Data We Collect
Under GDPR, personal data is any information that can identify you, such as:
-
Name, email, and contact details
-
Billing and shipping addresses
-
Payment information (processed securely via third-party providers)
-
Website usage data collected via cookies and analytics
5. How We Use Your Data
We use your personal data to:
-
Process and deliver your orders
-
Communicate important updates regarding your orders or services
-
Personalise and improve your shopping experience
-
Comply with legal obligations (e.g., tax records)
-
Send marketing communications, but only if you have opted in
6. Legal Basis for Processing Data
We process your data under the following GDPR legal bases:
-
Consent: You have given clear permission for us to process your personal data (e.g., for marketing emails).
-
Contractual necessity: Data is required to fulfil your order or provide services.
-
Legal obligation: Compliance with laws and regulations.
-
Legitimate interests: Improving our website and services, where this does not override your rights.
7. Sharing Your Data
We may share personal data with trusted third parties, including:
-
Payment processors and banks
-
Delivery and courier services
-
Website hosting and analytics providers
-
Legal authorities if required by law
We do not sell or rent your personal data to third parties.
8. Data Retention
We retain your personal data only as long as necessary to provide our services, comply with legal obligations, or resolve disputes.
9. Your GDPR Rights
You have the following rights under GDPR:
-
Access your personal data
-
Request correction or deletion
-
Object to processing or request restriction
-
Withdraw consent for marketing communications
-
Data portability (receive your data in a structured format)
To exercise these rights, please contact us using the details below.
10. Security
We implement appropriate technical and organisational measures to protect your data. However, no method of transmission over the internet can guarantee complete security.
11. Contact Us
For questions about this policy, your data, or GDPR rights please Contact Us →