At Gifts That Matter, we value your privacy and are committed to protecting your personal data. This Privacy Policy explains how we collect, use, disclose, and safeguard your information in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

1. Who We Are

Gifts That Matter is the data controller responsible for your personal data.
If you have any questions about this policy or your data, you can contact us at:

Email: gifts@giftsthatmatter.com.mt
Phone: +356 9946 9820
Address: Naxxar, Malta

2. What Personal Data We Collect

We may collect and process the following categories of personal data:

Identity Data: name, email address, phone number
Contact Data: billing/shipping address
Transaction Data: payment details (processed securely via third-party gateways), order history
Technical Data: IP address, browser type, device information, pages visited
Marketing Data: your preferences for receiving communications

3. How We Collect Your Data

We collect data when:

You make a purchase
You sign up for our newsletter or marketing
You contact us via email or contact forms
You browse our website (via cookies and analytics tools)

4. Legal Bases for Processing

Under GDPR, we process your personal data based on the following lawful bases:

Contractual necessity – to fulfill your orders and provide customer support
Legal obligation – to comply with tax, accounting, or regulatory requirements
Consent – for email marketing and cookies (you can withdraw consent anytime)
Legitimate interests – to improve our services and protect our business (e.g. fraud prevention)

5. How We Use Your Data

We use your information to:

Process and deliver orders
Manage payments and refunds
Send transactional communications (e.g. order confirmations)
Send marketing (if you’ve opted in)
Improve our website functionality and customer experience
Comply with legal obligations

6. Sharing Your Data

We only share your personal data with:

Service providers who help us run our business (e.g. payment processors, couriers, IT support)
Regulatory authorities if required by law
Email marketing providers if you opt into our newsletter

All third parties are required to process your data in accordance with GDPR and are not permitted to use it for their own purposes.

7. Data Retention

We retain your personal data only for as long as necessary to fulfill the purposes for which it was collected, including legal, accounting, or reporting requirements.
For example, we typically retain order data for 10 years for tax and accounting.

8. Your Rights

Under the GDPR, you have the right to:

Access your personal data
Correct or update inaccurate data
Request deletion of your data (“right to be forgotten”)
Restrict or object to processing in certain circumstances
Data portability (receive a copy of your data in a structured format)
Withdraw consent (e.g. for marketing or cookies)

To exercise any of these rights, email us at gifts@giftsthatmatter.com.mt. We may need to verify your identity before fulfilling your request.

9. International Transfers

If your data is transferred outside the EU (e.g. via third-party service providers), we ensure it is protected by appropriate safeguards, such as standard contractual clauses or providers certified under recognised frameworks.

10. Cookies and Tracking Technologies

We use cookies and similar technologies to improve your browsing experience, analyze site traffic, and personalize content.

You can manage cookie preferences through our cookie banner or via your browser settings.

11. Automated Decision-Making

We do not use your data for automated decision-making or profiling that would have legal or significant effects on you.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Updates will be posted on this page with a new “Effective Date.”

13. Contact

If you have any questions or concerns about your data or this policy, please contact:

Gifts That Matter
Email: gifts@giftsthatmatter.com.mt
Phone: +356 9946 9820
Address: Naxxar, Malta