1. Introduction
Gag Package ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website.
2. Information We Collect
Personal Information:
- Name and email address
- Recipient's delivery address and phone number (optional)
- Payment information (processed by Stripe, not stored by us)
- Photos or custom messages you provide
- Contact form submissions
Automatic Information: IP address, browser type, pages visited, and referring URLs via Google Analytics (GA4).
3. How We Use Your Information
- Process and fulfil orders
- Send order confirmations and delivery updates
- Respond to customer inquiries
- Improve website functionality and user experience
- Send marketing communications (if opted in)
- Prevent fraud and ensure service security
4. Photo Handling & Data Retention
Photos: User-submitted photos are stored securely, used only for your specific order, and automatically deleted after 30 days.
Order Data: Order information is retained for 24 months for accounting and dispute resolution purposes, then securely deleted.
Account Data: If you request deletion, personal data is removed within 30 days, except where required by law.
5. Third-Party Services
Stripe (Payment Processing): We do not store full payment card details. Stripe handles all payment information securely under PCI-DSS compliance. See Stripe's Privacy Policy.
Google Analytics (GA4): We use GA4 to understand website traffic patterns. Data is anonymised. See Google's Privacy Policy.
SendGrid (Email): Transactional emails are sent via SendGrid for order confirmations and updates. See SendGrid's Privacy Policy.
Cloudflare (Hosting/Security): Our website is hosted on Cloudflare Pages. See Cloudflare's Privacy Policy.
6. Data Security
We implement industry-standard security measures:
• SSL/TLS encryption for all data in transit
• Secure cloud storage with encrypted backups
• PCI-DSS compliant payment processing
• Regular security audits and updates
However, no method of transmission over the internet is 100% secure.
7. Cookies & Tracking
We use cookies for:
• Session management (keeping you logged in)
• Google Analytics tracking (website improvements)
• Stripe payment processing
You can disable cookies in your browser settings, though some features may not work properly. By using our site, you consent to cookie usage.
8. International Data Transfers
We are based in Ireland and comply with GDPR. If you are outside the EEA, your data may be transferred internationally. By using our service, you consent to such transfers under appropriate safeguards (Standard Contractual Clauses with our service providers).
9. Children's Privacy
Our service is not intended for individuals under 18 years old. We do not knowingly collect information from children. If we discover we have collected personal data from someone under 18, we will delete it immediately.
10. Your GDPR Rights
Under GDPR, you have the right to:
• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data (right to be forgotten)
• Restriction: Limit how we use your data
• Portability: Receive your data in a portable format
• Object: Opt-out of marketing communications
To exercise these rights, contact: gagpackage8@gmail.com
11. Contact the Data Protection Commission
If you have concerns about our privacy practices, you can contact the Irish Data Protection Commission:
Data Protection Commission (Ireland)
21 Fitzwilliam Square South
Dublin 2, D02 RD28, Ireland
Phone: +353 1 765 9600
Website: www.dataprotection.ie
12. Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any changes by posting the new policy on this page and updating the "Last updated" date.
13. Contact Us
For privacy inquiries, contact: gagpackage8@gmail.com