Privacy Policy

perfetcgift ("we," "our," or "us") operates the perfetcgift gift card marketplace at perfectgift.com. This Privacy Policy explains how we collect, use, and protect your personal information when you use our services. By accessing our platform, you agree to the practices described herein.

• •Account & Identity: Name, email address, billing address, and payment method details when you register or purchase.
• •Transaction Data: Gift card orders, redemption history, SKUs purchased, and order amounts.
• •Technical Data: IP address, browser type, device identifiers, pages visited, and session duration via server logs and analytics tools.
• •Communications: Messages you send us via email, contact forms, or customer support channels.

• •To process and fulfill gift card orders, send delivery confirmations, and manage your account.
• •To prevent fraud, verify identity, and comply with financial regulations and anti-money laundering obligations.
• •To send transactional emails (receipts, order status) and, with your consent, promotional offers you can opt out of at any time.
• •To improve our platform through aggregated, anonymized analytics and A/B testing.

We use essential cookies required for checkout functionality, preference cookies to remember your settings, and analytics cookies (e.g., Google Analytics) to understand platform usage. Advertising cookies may be placed by our advertising partners to deliver relevant ads.

You can manage cookie preferences via our Cookie Preference Centre or your browser settings. Disabling certain cookies may affect site functionality. See our Cookie Policy for full details.

• •Payment Processors: Stripe and/or PayPal receive payment details; we do not store full card numbers on our servers.
• •Gift Card Issuers: Redemption data is shared with the respective brand (e.g., Amazon, Spotify) to activate your card.
• •Service Providers: Cloud hosting, email delivery, and fraud detection vendors who are contractually bound to protect your data.
• •We never sell your personal data to third parties for their own marketing purposes.

Depending on your jurisdiction, you have the right to access, correct, delete, or port your personal data, and to object to or restrict certain processing. California residents may also opt out of the "sale" of personal information (we do not sell data) and request disclosure of categories collected in the past 12 months.

To exercise any right, email [email protected]. We will respond within 30 days (GDPR) or 45 days (CCPA) of verified receipt of your request.

We retain account and transaction data for 7 years to comply with tax and financial reporting obligations. Analytics data is anonymized after 26 months. You may request earlier deletion of non-mandatory data at any time, subject to legal retention requirements.

We implement TLS 1.2+ encryption in transit, AES-256 encryption at rest for sensitive fields, regular penetration testing, and strict role-based access controls. In the event of a data breach affecting your rights and freedoms, we will notify you and the relevant supervisory authority within 72 hours as required by law.

Our services are not directed to individuals under 16 years of age. We do not knowingly collect personal data from children. If you believe a child has provided us with personal information, please contact us immediately at [email protected] and we will delete it promptly.

We may update this Privacy Policy periodically. Material changes will be communicated via email or a prominent notice on our platform at least 14 days before taking effect. The "Last Updated" date at the top of this page always reflects the most recent revision. Continued use of our services after the effective date constitutes acceptance.