Privacy and Security Policy

The Gift Universe Group (“Gift Universe”, “we”, “us”, “our”) of The Atrium, Curtis Road, Dorking, Surrey, United Kingdom, RH4 1XA is made up of the following subsidiaries: Prezzybox.com Limited (Company Number 03946124), Lost Universe Limited (Company Number 12406217), Menkind Limited (Company Number 04265426), Gift Universe.com Limited (Company Number 03946124) and The Source Wholesale Limited (Company Number 07879479). We are committed to the protection of the personal data we process in line with the data protection principles set out in the UK General Data Protection Regulation, the EU General Data Protection Regulation (together referred to herein as the “GDPR”) and the Data Protection Act 2018.

This privacy notice explains what personal data Gift Universe collects from individuals who visit our websites, contact us using our web forms, by email, phone or through one of our social channels; or other marketing communications (“you”, “your”). It also explains what information we collect automatically when you visit our websites.

Gift Universe Group Limited is the Controller for the purposes of the GDPR in instances where you make any form of enquiry with us, registered in the UK with the Information Commissioner’s Office, registration number ZA301456.

As an information-led business, we place great importance on ensuring the quality, confidentiality, integrity, and availability of the data we hold and in meeting our data protection obligations when processing personal data. We are also committed to protecting the security of your personal data. We use a variety of technical and organisational measures to help protect your personal data from unauthorised access, use or disclosure.

What information do we process?

We process all information you give to us, either through our websites (“our sites”) or by corresponding with us by telephone, email or otherwise. This includes information you provide when you use our sites, make a purchase, subscribe to a service, offer online content creation or influencing services, register as an affiliate, search for a product or service, use the social media functions linked to one of our sites, or when you report a problem with one of our sites.

Information processed following an enquiry or purchase

We may process the following information:

• Full name
• Email address
• Telephone number
• Delivery address
• Billing address

We may use these details to contact you about your order or enquiry, if necessary.

For online content creators and influencers, we may also process your age, social handle and any other personal data you wish to share with us.

We may also monitor or record telephone calls for training and quality purposes. Call recordings are retained in accordance with our Personal Data Retention Policy.

Gift Universe uses cookies on our websites and web beacons in some emails. Cookies are small text files and web beacons are small graphic images. They are downloaded to your device when you visit a website or receive certain emails, unless you have set your browser to reject them. We use cookies to remember your preferences, display content that is more relevant to you and improve your overall experience of our sites.

For users who have consented to receiving marketing emails, we use web beacons to monitor the performance of campaigns and send you the most relevant special offers. A web beacon allows us to see when you have opened an email from us, provides information about the type of device you are using and from where you are viewing. This allows us so to better tailor marketing content to our users' needs.

When you consent to receiving marketing emails from us, we collect the IP address of the device used, as well as the date and time of registration, which allows us to maintain an accurate register of when consent to marketing was provided.

To learn more about cookies, web beacons and what you can do to opt out of receiving them, please view our Cookies Notice here.

Purposes and bases for processing your personal data

Sharing your information

We will rarely share your personal data outside the United Kingdom (“UK”) or the European Economic Area (the 27 EU member states plus Norway, Iceland and Liechtenstein - “EEA”). If it becomes necessary for the purposes of providing our services to you, we will only share it where appropriate safeguards are in place to ensure your personal data is protected to the same standard expected within the UK and EEA.

Our websites include links to our social media platforms (Facebook, Twitter, Instagram, Pinterest and YouTube). Once you navigate away from our sites via one of the links, the next site may collect your IP address and may set a cookie on your device. When you use one of these links, you are sharing information to another website or service and this privacy notice will no longer apply. Please read the privacy notices provided by the particular service website you are directed to before posting any personal information using these links.

Please see the below list  of key external providers with whom we share your data, the purpose of this sharing and a link to their privacy policy or terms of service.

Your rights

The GDPR provides you with certain rights in relation to the processing of your personal data, including to:

• Request access to personal data about you (commonly known as a “data subject access request”). This enables you to receive a copy of the personal data we hold about you, and to check that we are processing it lawfully.
• Request rectification, correction, or updating to any of the personal data that we hold about you. This enables you to have any incomplete or inaccurate information we hold about you corrected.
• Request personal data provided by you to be transferred in machine-readable format (“data portability”).
• Request erasure of personal data. This enables you to ask us to delete or remove personal data where there is no good reason for us continuing to process it. You also have the right to ask us to delete or remove personal data where you have exercised your right to object to processing (see below).
• Request the restriction of processing of your personal data. This enables you to ask us to suspend the processing of personal data about you (e.g. if you want us to establish its accuracy or the reason for processing it).
• Object to the processing of your personal data in certain circumstances. This right may apply where the processing of your personal data is based on the legitimate interests of Gift Universe.

Some of these rights are not absolute and are subject to various conditions under applicable data protection and privacy legislation, laws, and regulations to which we are subject. If at any time you decide that you no longer wish to be contacted for marketing purposes, or if you would like to exercise any of your rights as set out above, you can contact us at privacy@giftuniverse.com. You will not have to pay a fee to access your personal data (or to exercise any of the other rights). However, we may charge a reasonable fee if your request for access is clearly unfounded or excessive. Alternatively, we may refuse to comply with the request in such circumstances.

In addition to the above, please note that you have the right to make a complaint at any time to the Information Commissioner’s Office if you are concerned about the way in which we are handling your personal data.

Data retention period

We will retain your personal data for as long as is necessary to provide you with our products and ongoing services and for a reasonable period thereafter, to enable us to meet our contractual and legal obligations and to deal with complaints and claims.

At the end of the retention period, your personal data will be securely deleted in accordance with our Personal Data Retention Policy.

Contact

You can contact Gift Universe in relation to data protection and this privacy notice by emailing privacy@giftuniverse.com.