Free UK Delivery on Orders Over £50 | Use code WELCOME10 for 10% off your first order

Privacy Policy

We respect your privacy and are committed to protecting your personal data. This policy explains how we collect, use and safeguard your information when you visit our website or place an order with us.

Last Updated: 15 February 2026
Effective Date: 15 February 2026
Data Controller: Gift Curated Ltd

Changes to this policy will be notified via a banner on our homepage a minimum of 14 days before taking effect.

1. Who We Are

Gift Curated Ltd is a premium gift shop registered in Scotland. We operate the website accessible at this domain and are the data controller responsible for your personal data.

Registered Address: Tillywhally House, Milnathort, Kinross, Scotland, KY13 0RN

Company Registration Number: 14573928

VAT Number: GB 428 7619 37

Email: [email protected]

Telephone: +44 1577 123456

2. What Data We Collect

We may collect, use, store and transfer the following categories of personal data about you:

  • Identity Data: Full name, title
  • Contact Data: Email address, phone number, billing address, delivery address
  • Technical Data: IP address, browser type and version, device type and operating system, time zone setting and location
  • Usage Data: Pages visited, time spent on site, click paths, referring pages, search terms used on our site
  • Transaction Data: Order details, payment method (we do not store full card details), delivery preferences
  • Communication Data: Contact form submissions, email correspondence, enquiry content, gift messages
  • Tracking Data: Cookies and tracking identifiers, device identifiers (browser fingerprint), conversion events (form submissions, purchases, add-to-basket actions)
  • Marketing Data: Newsletter subscription preferences, communication opt-in status

We do not collect any special categories of personal data (such as details about your race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, genetic or biometric data, or information about your health).

3. Legal Basis for Processing (GDPR Article 6)

For each type of data processing, we rely on the following legal bases under the General Data Protection Regulation:

Data Type Legal Basis
Contact form and enquiry data Consent (Art. 6.1.a) and contract performance (Art. 6.1.b)
Order and transaction data Contract performance (Art. 6.1.b) and legal obligation (Art. 6.1.c)
Analytics data (Google Analytics 4) Consent (Art. 6.1.a)
Marketing and remarketing data Consent (Art. 6.1.a)
Newsletter subscription Consent (Art. 6.1.a)
Security and fraud prevention Legitimate interest (Art. 6.1.f)
Essential cookies (session, security) Legitimate interest (Art. 6.1.f) - necessary for site operation

4. Cookie Categories

We divide the cookies used on this website into three distinct categories. Each category serves a specific purpose, and your consent is required for non-essential categories before they are activated.

Essential Cookies

Always Active - No Consent Required

Purpose: Core site functionality, security, session management, shopping basket functionality and remembering your cookie preferences.

Examples: session_id, csrf_token, cookie_consent_status, basket_session, currency_preference

Retention: Session duration or up to 12 months for preference storage. These cookies are strictly necessary for the website to function and cannot be switched off in our systems.

Analytics Cookies

Consent Required

Purpose: Measuring traffic, understanding user behaviour, and monitoring site performance. These cookies help us improve our website by collecting and reporting information on how you use it.

Tools: Google Analytics 4

Examples: _ga, _ga_XXXXXXX, _gid, _gat

Consent required: Yes. These cookies are activated only after you explicitly accept analytics cookies through our consent banner or preferences panel.

Retention: Up to 14 months

Marketing / Advertising Cookies

Consent Required

Purpose: Remarketing, personalised ad delivery, conversion tracking, and measuring advertising campaign effectiveness.

Consent required: Yes. Marketing cookies are activated only after you explicitly accept them through our consent banner or preferences panel.

Retention: Up to 540 days (Google Ads default). Detailed disclosures for each marketing technology are provided in Section 5 below.

5. Marketing Cookies - Detailed Disclosures

5.1 Third-Party Ad Serving

Third-party vendors, including Google, use cookies to serve ads based on a user's previous visits to this website and other sites on the internet.

5.2 Advertising Partners

We may work with advertising partners such as Google and Meta to deliver advertisements tailored to your interests across various websites and platforms.

5.3 Remarketing

We may use remarketing services to advertise to previous visitors of our website. After visiting our site, you may see our ads on other websites, apps, or platforms you visit.

5.4 YouTube and Display Network

Advertisements may appear across Google services including YouTube, Gmail, and the Google Display Network.

5.5 Tracking Technologies

We use the following tracking technologies on this website:

  • Cookies (first-party and third-party)
  • Tracking pixels (Google Ads tag / gtag.js, Meta Pixel)
  • Device identifiers (browser fingerprint, IP address)
  • Conversion event tags

5.6 Advertising Measurement

We use conversion tracking to understand which advertisements lead to actions on our website, such as form submissions, newsletter sign-ups, or purchases. This allows us to measure campaign effectiveness and allocate budget appropriately. Conversion data may be shared with Google Ads and Meta.

5.7 Technologies in Use

Advertising and analytics technologies active on this site:

  • Google Ads (gtag.js / Google Tag Manager)
  • Google Analytics 4
  • Google Remarketing Tag
  • Meta Pixel (Facebook / Instagram)

5.8 Opt-Out from Personalised Advertising

You may opt out of personalised advertising at any time using the following tools:

  • Google Ads Settings: https://adssettings.google.com
  • Your Online Choices (EU): https://www.youronlinechoices.eu
  • Network Advertising Initiative: https://optout.networkadvertising.org
  • Digital Advertising Alliance: https://optout.aboutads.info

Opting out does not remove ads entirely. You will continue to see non-personalised advertisements.

5.9 Cookie Preference Management

You can manage your cookie preferences at any time by clicking the Manage Cookie Preferences link, available in our website footer and within this policy. This opens a panel allowing you to accept or reject each cookie category independently. Essential cookies are always active and cannot be disabled.

6. Consent Requirements

6.1 Consent Banner

When you first visit our website, you are presented with a cookie consent banner that offers three options: "Accept All", "Reject Non-Essential", and "Manage Preferences". Analytics and marketing cookies are not activated until you explicitly accept them. Your choice is stored in your browser's local storage for 12 months. The banner can be dismissed without accepting cookies; choosing to reject means only essential cookies remain active. The banner links directly to this Privacy Policy.

6.2 Consent Statement

By clicking "Accept All Cookies", you consent to the storing of cookies on your device for analytics and advertising purposes, including personalised advertising delivered by Google and Meta. You may withdraw consent at any time through the cookie preferences panel without affecting the lawfulness of processing that occurred before withdrawal.

6.3 EEA and UK Users

Users in the European Economic Area and the United Kingdom receive this consent notice in compliance with the General Data Protection Regulation (GDPR) and UK GDPR. Marketing and analytics cookies are activated solely after explicit, informed, freely given consent under GDPR Article 6(1)(a). Consent is recorded with a timestamp and may be audited upon request.

6.4 Withdrawal of Consent

You may withdraw consent at any time by clicking "Manage cookie preferences" in the website footer, or by clearing cookies via your browser settings. Withdrawal does not affect processing that occurred while consent was valid.

7. Data Sharing with Advertising Partners

We share certain data with advertising partners for campaign delivery and measurement. Recipients and the data categories shared include:

  • Google LLC: Cookie identifiers, conversion events, anonymised behavioural data, remarketing lists. Governed by Google's Privacy Policy: https://policies.google.com/privacy
  • Meta Platforms, Inc.: Pixel events, conversion data, custom audiences. Governed by Meta's Data Policy: https://www.facebook.com/privacy/policy

We do not sell personal data. All transfers to Google and Meta operate under Standard Contractual Clauses where applicable. Data is processed for ad targeting and campaign measurement only and is not resold to unaffiliated third parties.

Google and Meta may use this data across their own platforms in accordance with their respective policies. We encourage users to review those policies directly.

8. Lead Forms and Contact Requests

When you submit a contact form, request information about corporate gifting, sign up for our newsletter, or register interest in our products, we collect the information you provide. This typically includes: full name, email address, phone number, and the content of your message or enquiry.

Legal basis: Consent (GDPR Art. 6.1.a) and, where a service relationship exists, performance of a contract (GDPR Art. 6.1.b).

Retention: Form submission data is retained for up to 2 years from the date of submission, unless a longer period is required by applicable law or you request earlier deletion.

You may request deletion of your data at any time by contacting us at [email protected].

A link to this Privacy Policy appears adjacent to every submission button on this site. Submitting a form constitutes acknowledgment of this policy.

9. Google Services and Advertising

This website uses the following Google services:

Google Analytics 4

Collects anonymised usage data, device information, and behavioural signals. IP anonymisation is enabled. Data retention is set to 14 months. Users may opt out via the Google Analytics Opt-out Browser Add-on: https://tools.google.com/dlpage/gaoptout

Google Ads Conversion Tracking

Records when a user completes a defined action (form submission, newsletter sign-up, purchase) after clicking one of our advertisements. This data is used solely for measuring ad campaign performance and is not used to personally identify you.

Google Remarketing

Allows us to show ads to previous visitors across Google's network, including search results, YouTube, and partner websites. Remarketing lists are not created from sensitive data categories (health, finance, religion, sexual orientation).

Google Tag Manager

Deploys tracking tags on our behalf. No personal data is collected by Google Tag Manager itself; it acts as a container for the tags listed above.

Google's advertising products are governed by: https://policies.google.com/technologies/ads

10. Meta Advertising Services

This website uses the Meta Pixel to measure the effectiveness of our advertising on Facebook and Instagram. The pixel may record:

  • Page views and time on site
  • Specific conversion events (form submissions, purchases, add-to-basket actions)
  • Custom audience membership for retargeting purposes

We do not use the Meta Pixel to collect sensitive personal data, nor to target users based on health status, financial situation, religion, political views, sexual orientation, or any other special-category attribute prohibited under Meta's advertising policies.

Meta acts as an independent data controller for data collected via its Pixel and processed within its own platform. Refer to Meta's Data Policy: https://www.facebook.com/privacy/policy

To manage your ad preferences on Meta platforms, visit: https://www.facebook.com/adpreferences/

11. Prohibited Content Self-Declaration

This website does not promote, sell, or facilitate access to prohibited product or service categories including but not limited to: weapons, controlled substances, counterfeit goods, gambling services (unlicensed), adult content, or services that make misleading health or financial claims. All advertising conducted through Google Ads and Meta Ads complies with the respective platform policies in full. Our products consist exclusively of premium gifts, home fragrance, stationery, kitchenware, wellness products and similar consumer goods suitable for all audiences.

12. Landing Page Integrity Statement

The content of this website accurately represents the products and services advertised. No bait-and-switch practices are employed. The experience delivered to users arriving from paid advertisements is identical to the experience for all other visitors. Cloaking, automatic redirects, and content variation by traffic source are not used on this website. All product descriptions, prices and availability shown on this site are kept current and accurate.

13. Children's Privacy

This website is not directed at individuals under the age of 16. We do not knowingly collect personal data from minors. If we discover that data has been collected from a person under 16 without verifiable parental consent, we will delete it promptly. Contact us at [email protected] if you believe we have received data from a minor.

14. International Data Transfers

Personal data collected through this website may be transferred to and processed in countries outside the European Economic Area, including the United States, where Google LLC and Meta Platforms, Inc. are based.

These transfers are conducted under Standard Contractual Clauses (SCCs) approved by the European Commission, which provide appropriate safeguards for personal data. A copy of the applicable SCCs can be requested by contacting us directly at [email protected].

15. Your Rights (GDPR Articles 15-22)

If you are located in the EEA or UK, you have the following rights under the General Data Protection Regulation:

  • Right of Access (Art. 15): Request a copy of the personal data we hold about you
  • Right to Rectification (Art. 16): Request correction of inaccurate or incomplete personal data
  • Right to Erasure (Art. 17): Request deletion of your personal data ("right to be forgotten")
  • Right to Restriction (Art. 18): Request that we limit how we process your data
  • Right to Data Portability (Art. 20): Receive your data in a structured, commonly used, machine-readable format
  • Right to Object (Art. 21): Object to processing based on legitimate interest, including profiling
  • Right to Withdraw Consent (Art. 7.3): Revoke consent at any time without penalty or charge

To exercise any of these rights, please email us at [email protected]. We will respond within 30 calendar days. We may ask you to verify your identity before processing your request to protect your data from unauthorised access.

You also have the right to lodge a complaint with your local supervisory authority:

  • UK users: Information Commissioner's Office (ICO) - https://ico.org.uk
  • EU users: European Data Protection Board - https://edpb.europa.eu

16. Retention Periods

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected. Specific retention periods by category are set out below:

Data Category Retention Period
Contact form submissions 2 years from date of submission
Order and transaction data 6 years (HMRC legal requirement)
Analytics data (Google Analytics 4) 14 months
Marketing cookies (Google Ads) Up to 540 days
Newsletter subscription data Duration of subscription plus 1 year
Email communications Duration of customer relationship plus 1 year
Server logs 90 days
Cookie consent records 3 years (audit requirement)

When data is no longer required, it is securely deleted or anonymised so that it can no longer be associated with you.

17. Contact Us

If you have any questions about this Privacy Policy, your personal data, or wish to exercise any of your rights, please contact us using the details below:

Gift Curated Ltd

Tillywhally House, Milnathort, Kinross, Scotland, KY13 0RN

Email: [email protected]

Telephone: +44 1577 123456

Company Registration: 14573928

VAT Number: GB 428 7619 37

We aim to respond to all data protection enquiries within 30 calendar days. If you are not satisfied with our response, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) in the United Kingdom.

Important Information

All gifts are selected for quality and presentation. Personalised items are non-returnable unless faulty. Prices include VAT where applicable. Product images are for illustrative purposes; actual products may vary slightly in colour and appearance due to screen settings and natural material variations.