Privacy Policy
Last updated July 2026
The Giftlocker (“we”, “us”) is committed to protecting your personal data in accordance with the UK GDPR and the Data Protection Act 2018. This policy explains what we collect, why, and your rights.
Information we collect
Account details (name, email), order and delivery information, payment metadata (processed securely by Stripe — we never store card numbers), wishlist and gift-box activity, and limited anonymous analytics.
How we use your data
To process orders and payments, provide customer support, personalise your experience, send transactional and (with consent) marketing communications, and improve our services. We process data only for legitimate business purposes.
Legal bases
Contract (fulfilling your orders), legitimate interests (service improvement, fraud prevention), consent (marketing, non-essential cookies) and legal obligation (financial record retention).
Cookies
We use essential cookies for the basket and sign-in, and — with your consent — analytics cookies to understand usage. You can manage your choice via the cookie banner.
Data retention
We keep order and financial records for as long as required by UK law (typically 6 years). Marketing data is kept until you unsubscribe. Other personal data is removed on account deletion.
Your rights
You may access, correct, export or erase your personal data at any time from your account settings, including one-click data download and account deletion. To exercise any right, contact hello@thegiftlocker.co.uk.
Contact
Questions about this policy? Email hello@thegiftlocker.co.uk.