1. Introduction

Welcome to Gifted, a luxury gifting and experience concierge service. Your privacy is important to us, and this policy explains how we collect, use, and protect your information.

2. Who We Are

Gifted operates as a product of A8 Innovation Consultancies LLC, a company registered in Dubai, UAE. This Privacy Policy aligns with the DIFC Data Protection Law and UAE Federal Data Protection Law, ensuring compliance with applicable privacy regulations, including aspects of GDPR where relevant.

3. Information We Collect

We may collect the following types of information:

• Personal Identifiable Information (PII): Name, email, phone number, and other details provided during sign-up. Retention period: 12 months after last interaction or until the user requests deletion.
• Transaction Information: Purchase history, payment details (processed through secure third-party payment providers). Retention period: as long as required for financial compliance (typically 5–7 years).
• User Preferences: Information from quizzes, surveys, and service interactions. Retention period: retained for 12 months unless the user requests deletion.
• Technical Data: IP address, browser type, device information, and cookies. Retention period: 6 months unless required for security audits.

4. How We Use Your Information

We use the collected data, including through AI-driven profiling and automated decision-making, to enhance personalization:

• Personalizing your gifting recommendations.
• Processing transactions and fulfilling orders.
• Communicating with you about offers, updates, and promotions.
• Analyzing user behavior to improve our services.
• Ensuring compliance with legal and regulatory obligations.

5. Data Sharing & Third Parties

We do not sell or rent personal data. However, we may share anonymized or aggregated data for targeted advertising and marketing purposes. Additionally, we may share data with:

• Service Providers: Third-party platforms (e.g., Typeform, Webflow, Brevo) that help manage orders, payments, and marketing.
• Legal Authorities: If required to comply with UAE laws and regulations.
• Business Transfers: In case of a merger, acquisition, or asset sale.

6. Cookies & Tracking Technologies

Our website uses Google Analytics and Webflow tracking, along with essential, performance, and advertising cookies, to enhance user experience and gather analytics. Users may opt out of tracking cookies via our cookie consent banner.

7. Data Security & Retention

We implement industry-standard security measures, including SSL/TLS encryption for data transmission and AES encryption for stored data, to protect personal information from unauthorized access, alteration, disclosure, or destruction. If a data breach occurs, we will notify affected users and authorities within 72 hours, in compliance with GDPR best practices.

8. Your Rights & Choices

Depending on applicable laws, you may have the right to:

• Access, modify, or delete your personal data within 30 days of request.
• Withdraw consent for marketing communications at any time.
• Opt out of targeted advertising while continuing to receive general ads.
• Request a download of your personal data (data portability).

9. Governing Law & Dispute Resolution

This Privacy Policy is governed by the laws of the United Arab Emirates (UAE). Any disputes will first be resolved through arbitration before escalating to Dubai courts if necessary.

10. Contact Us

If you have any questions about this Privacy Policy, contact us at:

• Email: legal@begifted.ai
• Address: Office 335-147, Latifa Tower, Trade Center First, Dubai, UAE

By using our website and services, you consent to this Privacy Policy. We may update this policy from time to time, and significant changes will be communicated accordingly.