This policy explains what personal information GiftHub collects when you visit gifthub.my or place an order, how we use it, and the choices you have. We handle personal data in line with Malaysia's Personal Data Protection Act 2010 (PDPA).
1. What we collect
- Order details: your name, email address, phone number, billing address, and the recipient's name, address and phone number.
- Gift details: card messages and delivery notes you write for your order.
- Account details: if you sign in, your email address and order history. If you sign in with Google, we receive your name and email address from Google. We don't receive your Google password.
- Browsing data: your IP address, browser and device type, and the pages you visit, collected through cookies (see section 6).
We don't see or store your full card details. Payments are handled by our payment providers.
2. How we use it
- To process, pack and deliver your order, and to send order and delivery updates.
- To reply to your questions, and to handle returns and refunds.
- To run and improve our website, and to prevent fraud.
- To send news and offers by email, only if you've opted in. Every marketing email has an unsubscribe link.
3. Who we share it with
We share only what's needed to complete your order:
- Shopify, which hosts our store and stores order data.
- Payment providers, to process your payment.
- Couriers and delivery partners, who receive the recipient's name, address and phone number.
- Florists and brand partners who prepare your gift, who receive the order details and card message they need.
We don't sell your personal information. We may also disclose information when the law requires it. Some of these providers store data outside Malaysia. Where that happens, we rely on them to protect it to a standard comparable to the PDPA.
4. How long we keep it
We keep order records for as long as we need them for the order, for accounting and tax purposes, and to resolve any disputes. After that, we delete or anonymise them.
5. Your choices and rights
Under the PDPA, you can ask us to:
- tell you what personal data we hold about you, and give you a copy of it;
- correct data that is inaccurate or out of date;
- stop using your data for marketing;
- delete your account.
Email hello@gifthub.my with your request. We may need to confirm your identity before we act on it.
6. Cookies
We use cookies to keep your cart and sign-in working, to remember your preferences, and to understand how the site is used. You can accept or decline non-essential cookies in the cookie banner. See our Cookie Policy for details.
7. Security
Our store runs on Shopify, which encrypts connections to the site and handles payments to industry security standards. No method of storing or sending data online is completely secure, but we take reasonable steps to protect your information.
8. Children
Our baby gifts are bought by adults. We don't knowingly collect personal data from children.
9. Changes to this policy
We may update this policy from time to time. The latest version is always on this page.
10. Contact us
For privacy questions or requests, email hello@gifthub.my.