Last updated: 16 June 2026

“This Privacy Policy is provided on a voluntary best-practice basis. Gifts & Co’s current annual turnover is below the AU$3 million threshold under the Privacy Act 1988 (Cth), meaning Gifts & Co is not currently classified as an “APP entity” unless an exception applies (for example, if Gifts & Co trades in personal information or is related to a business that meets the threshold). Notwithstanding this, Gifts & Co voluntarily adopts and applies the Australian Privacy Principles (APPs) as a matter of good practice and to provide assurance to our customers.“

1. Introduction

Gifts & Co (“we”, “us” or “our”) is committed to protecting the privacy of personal information collected through our online store and related services (the “Store”). This Privacy Policy explains how we collect, hold, use and disclose personal information, and how you can access or correct that information or make a complaint.

By using the Store, you agree to the collection and use of information in accordance with this Policy. This Policy should be read alongside our Terms and Conditions.

2. Personal Information We Collect

We collect personal information that is reasonably necessary for us to operate the Store and provide our products and services. This may include:

• Identity and contact details, such as your name, billing and delivery address, email address and phone number;
• Account information, such as your username, password and order history;
• Transaction details, such as products purchased, order value and gift messages;
• Payment-related information processed via our third-party payment processor (see Section 5); we do not directly collect or store full credit card numbers;
• Technical and usage information, such as IP address, browser type, device information, pages visited and referring website, collected via cookies and similar technologies;
• Marketing preferences and communications you have with us, including customer service enquiries, reviews and survey responses.

We do not seek to collect sensitive information (such as health, racial or ethnic information) and ask that you do not include such details in any communications, order notes or gift messages submitted through the Store.

3. How We Collect Personal Information

We collect personal information directly from you when you:

• Create an account or place an order on the Store;
• Subscribe to our newsletter or marketing communications;
• Contact our customer service team;
• Complete a survey, competition entry or leave a product review;
• Browse the Store, via cookies, pixels and analytics tools (see Section 6).

Where practicable, we collect personal information directly from you. In some circumstances we may collect information from third parties, such as our payment processor confirming a successful transaction, or analytics and advertising platforms providing aggregated or device-level data about your interaction with our Store and ads.

4. Purposes of Collection and Use

We collect, hold, use and disclose personal information for the following purposes:

• To process and fulfil your orders, including arranging payment, packaging and delivery;
• To create and manage your customer account;
• To respond to enquiries, complaints and customer service requests;
• To send transactional communications, such as order confirmations and shipping updates;
• To send marketing communications and personalised offers, where you have consented or where permitted by law (with an option to opt out at any time);
• To operate, evaluate and improve the Store, including through analytics and advertising performance measurement;
• To detect, investigate and prevent fraud, unauthorised transactions and other unlawful activity;
• To comply with our legal and regulatory obligations, including taxation, consumer law and record-keeping requirements.

5. Disclosure of Personal Information

We may disclose personal information to the following categories of third parties, strictly for the purposes described in this Policy:

• Payment processors – we use Stripe to process payments. Stripe collects and processes payment card details directly; we do not store full card numbers on our systems. Stripe’s handling of your information is governed by Stripe’s own privacy policy;
• Delivery and logistics providers, to fulfil and deliver your order;
• IT service providers and website hosting providers, who assist in operating the Store;
• Analytics and advertising platforms (such as Google Analytics and Meta/Facebook Pixel), which assist us in understanding Store usage and measuring the performance of our advertising. These providers may set cookies or use similar tracking technologies as described in Section 6;
• Professional advisers, regulators or law enforcement, where required or authorised by law;
• A prospective buyer or related entity, in the event of a sale, merger or restructure of our business, subject to confidentiality arrangements.

We do not sell personal information to third parties for their own independent marketing purposes.

6. Cookies, Analytics and Advertising

Our Store uses cookies and similar tracking technologies (such as pixels and tags) to operate effectively and to understand how visitors use the Store. These technologies are provided in part by third parties, including:

• Google Analytics, which collects information about your use of the Store on an aggregated and pseudonymised basis to help us understand traffic and behaviour patterns;
• Meta (Facebook) Pixel and other advertising pixels, which allow us to measure the effectiveness of our advertising and deliver more relevant ads to you on third-party platforms (commonly referred to as remarketing or retargeting).

These tools may collect information such as your IP address, device identifiers, browsing activity on our Store and interactions with our advertisements. You can manage or disable cookies through your browser settings; please note that disabling cookies may affect the functionality of the Store. You may also opt out of personalised advertising directly through Google Ads Settings or Meta’s ad preferences, or through industry opt-out tools such as the Network Advertising Initiative.

7. Storage and Security of Personal Information

All personal information we collect is stored and processed within Australia. We do not currently send or store personal information overseas; where this changes (for example, if we engage an overseas-based service provider), we will update this Policy accordingly and take reasonable steps to ensure overseas recipients handle your information consistently with the Australian Privacy Principles.

We take reasonable steps to protect personal information from misuse, interference, loss, and unauthorised access, modification or disclosure. These steps include the use of secure, encrypted connections, restricted access to systems on a need-to-know basis, and reliance on reputable third-party service providers (such as Stripe) for secure payment processing. While we take care to protect your information, no method of transmission or storage is completely secure, and we cannot guarantee absolute security.

We retain personal information only for as long as is necessary to fulfil the purposes for which it was collected, including to meet legal, accounting or reporting obligations, after which it is securely deleted or de-identified.

8. Access, Correction and Complaints

You may request access to the personal information we hold about you, or ask that it be corrected if it is inaccurate, out of date, incomplete, irrelevant or misleading. We will respond to such requests within a reasonable period.

If you have a concern or complaint about how we have handled your personal information, please contact us using the details in Section 11. We will investigate your complaint and aim to respond within 30 days. If you are not satisfied with our response, you may refer your complaint to the Office of the Australian Information Commissioner (OAIC):

• Website: www.oaic.gov.au
• Phone: 1300 363 992

9. Marketing Communications

If you have consented to receive marketing communications from us, you may opt out at any time by using the unsubscribe link in any email, updating your account preferences, or contacting us directly. We will process your request promptly in accordance with applicable laws, including the Spam Act 2003 (Cth).

10. Children’s Privacy

Our Store is intended for use by adults. We do not knowingly collect personal information from children without the consent of a parent or guardian. If you believe a child has provided us with personal information without appropriate consent, please contact us so we can take appropriate action.

11. Contact Us

If you have any questions about this Privacy Policy, or wish to access, correct or complain about the handling of your personal information, please contact us at:

Gifts & Co

Email: contact@giftsandco.com.au

12. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements or other factors. The updated version will be posted on our Store with a revised “Last updated” date. We encourage you to review this Policy periodically.