Privacy Policy

---

Last updated: 9 September 2025

1. Who We Are

GiftSmart AI ("we", "us", "our") provides AI-driven marketing automation services tailored for gifting and e-commerce brands, including social media posting, campaign generation, and customer chat automation.

2. Information We Collect

We collect personal data when you:

• Visit our website (e.g. via cookies, analytics — see our Cookie Policy).
• Submit a contact form or book an audit, providing your name, email, company, and website.
• Sign up for newsletters or updates, with your consent.
• Use our services, when billing or contract data is collected (e.g. payment email, store platform details).
   

3. How We Use Your Data

We use your personal data to:

• Respond to inquiries, calls, and provide demos or audits.
• Deliver our services and fulfil contracts.
• Send administrative information (e.g. account or policy updates).
• With your consent, send marketing communications (newsletter, offers).
• Keep our website secure and improve service functionality.

This aligns with UK GDPR lawful bases (consent, contract, legitimate interest)
 

4. Legality & Transparency

GiftSmart AI processes data only when legally permitted (consent, contract, legitimate interest) and aims for full transparency on data use.

5. Sharing Your Data

We may share your data with trusted third parties only as needed to provide our services (e.g. email service providers, analytics tools). We do not sell your data. Partners are bound by confidentiality and data protection obligations.

6. Cookies & Tracking

We use cookies and analytics tools (e.g. Google Analytics) to understand website usage. Cookies users may opt out as described in our Cookie Policy.

7. Your Rights

Under UK GDPR, you have rights to:

• Access, correct, erase, or restrict your personal data.
• Object to processing or request data portability.
• Withdraw your consent at any time (e.g. unsubscribe).
• Lodge complaints with UK Information Commissioner’s Office (ICO) 

8. Data Security & Retention

We keep personal data only as long as needed for the defined purposes, or to comply with legal obligations. We protect data with technical and organisational security measures to prevent unauthorized access.

9. Transfers Outside the UK

If data is transferred outside the UK — e.g., via cloud services — we ensure appropriate safeguards are in place, such as standard contractual clauses, to maintain protection standards.

10. Privacy by Design

We follow privacy by design principles, embedding privacy considerations into all aspects of service, ensuring proactive, visible, and user-centric data protection.

11. Changes to This Policy

We may update this policy over time. The latest version will always be available on our website. We encourage you to review the “Last updated” date for changes.

12. Contact Us

For questions or to exercise your rights, please contact us at hello@giftsmartai.co.uk.