Privacy Policy

1. Commitment to Your Privacy

Gift·it ("we", "us", or "our") respects your rights to privacy under the Privacy Act 1988 (Cth) and is committed to protecting your personal information. This Privacy Policy outlines how we collect, hold, use, and disclose personal information gathered through our platform at giftitcard.com.au.

2. Information We Collect

We only collect personal information that is reasonably necessary for our core gifting and payout coordination services:

• Campaign Organizers: Name, email address, password hash, celebration fund title, cutoff date, and nominated Australian bank payout details (PayID identifier or BSB & Account Number).
• Contributors & Givers: Contributor name, personal greeting message, optional video or photo message, gift amount, and transaction receipt email. Note: Credit card details are processed directly and securely by Stripe Inc. under PCI-DSS Level 1 compliance; Gift·it never stores complete card numbers or CVVs.
• Support Inquiries: Contact information, message details, and uploaded problem screenshots submitted via our Support Form.

3. How We Use Personal Information

• To create and manage group funds, solo Gift·it cards, and digital Gift·it CARDs.
• To disburse collected monies to Australian bank accounts via PayID or BSB/Account Number upon organizer request.
• To deliver digital greeting messages and digital Gift·it CARDs to nominated recipients.
• To investigate and resolve customer support inquiries and reported technical bugs.
• To prevent fraudulent transactions and comply with Australian regulatory obligations.

4. Data Storage & Security

All data is transmitted via 256-bit Transport Layer Security (TLS) encryption. Database records and attachments are hosted in secure enterprise cloud infrastructure with strict access controls. While no internet transmission is 100% immune from risks, we implement industry best-practice measures to safeguard your information against unauthorized access, modification, or disclosure.

5. Disclosure to Third Parties

We do not sell, rent, or trade your personal information. We disclose information only to vetted service providers essential for delivering our service:

• Payment Gateways: Stripe Australia Pty Ltd for payment processing and fraud prevention.
• Banking Rails: Regulated Australian financial institutions for executing PayID and Direct Entry payouts.
• Communications: Transactional email delivery providers for contribution receipts and payout confirmations.

6. Access & Correction Rights

Under the APPs, you have the right to request access to any personal information we hold about you and to request corrections if it is inaccurate. To exercise these rights, please contact our Privacy Officer at privacy@giftitcard.com.au or submit a request via our Support Portal.

7. Contact Information

Gift·it Australia
Attention: Privacy & Customer Care
Email: support@giftitcard.com.au
Portal: giftitcard.com.au/contact.html