Privacy Policy
Last updated: March 2026
GiftMaster ("we", "our") handles your personal data with the utmost care. This policy describes what data we collect, how we use it, and your rights under the GDPR (EU Reg. 2016/679). Data controller: GiftMaster — privacy@giftmaster.net.
Data we collect
We collect your username, email address, date of birth, and optionally the bank details needed to receive collection payments (encrypted with AES-256-GCM). We also collect technical access data (logs, IP address) required for service security.
How we use your data
Your data is used to: provide the group collection service, send notifications and reminders to participants, and improve the platform through anonymised aggregate statistics. We do not use your data for third-party advertising.
Data sharing
We do not sell your data. Bank details are visible only to the collection organiser and contributors who have joined. We use Firebase (Google) for push notifications; Firebase is subject to its own privacy policy.
Your rights (GDPR)
You have the right to access, correct, delete, restrict, port, or object to the processing of your data. To exercise these rights write to privacy@giftmaster.net. You may also lodge a complaint with your local data protection authority.
Retention
Data is retained for the duration of your account and for 12 months after deletion, unless otherwise required by law.
Contact
For any privacy-related questions write to: privacy@giftmaster.net.