Store Preview • GiftAcross is currently in catalog preview mode. Ordering opens December 2026 across 150+ countries. Get 15% Launch Voucher →
Data Privacy PCI-DSS Compliant Last Updated: October 2026

Privacy and Cookie Policy

We recognize the sacred and personal nature of sending celebratory gifts to loved ones across oceans. This policy explains how we collect, safeguard, and process both your purchaser information and your recipient’s delivery details in accordance with international data privacy standards.

Your Privacy Protections

  • Zero Raw Card Storage: We never capture, view, or store full credit/debit card numbers or CVVs. All transactions are tokenized via PCI-DSS Level 1 certified processors (Stripe & Razorpay).
  • Strict Recipient Data Isolation: Your recipient's address and phone number are used strictly to coordinate physical logistics and on-time delivery. We never market or sell recipient data.
  • Full Regulatory Alignment: Designed to adhere with India's Digital Personal Data Protection (DPDP) Act, EU General Data Protection Regulation (GDPR), and the California Consumer Privacy Act (CCPA).

1. Information We Collect

When utilizing our cross-border gifting service, we collect two categories of information:

A. Purchaser Information

  • Account & Billing Data: Name, email address, billing address, and contact telephone number.
  • Authentication & Session Data: Encrypted passwords, device identifiers, IP geolocation (used strictly to route domestic INR ₹ vs international USD $ payment methods).
  • Personal Gift Notes: Sibling greetings and celebratory messages written on complimentary festive greeting cards.

B. Recipient Information

  • Delivery Particulars: Recipient's full name, physical delivery address, postal/zip code, and local contact telephone number required by customs authorities and express couriers.

2. How We Use Your Information

We process personal data solely for legitimate commercial and fulfillment objectives:

  • Fulfilling gift orders, coordinating packaging, and printing custom greeting cards.
  • Transmitting transactional dispatches, tracking numbers, and delivery confirmation notices via email and SMS.
  • Facilitating secure cross-border customs declarations (Delivered Duty Paid documentation).
  • Preventing fraudulent transactions and mitigating payment chargeback disputes.

3. Payment Security & Tokenization

Payment security is our highest operational priority:

PCI-DSS Certified Processing: All payment sessions are conducted over end-to-end 256-bit TLS encryption directly within secure iframes provided by Stripe (for USD transactions) and Razorpay (for INR transactions). Our servers never receive or store your payment credentials.

4. Third-Party Disclosures & Logistics Partners

We share only essential consignee information strictly with accredited logistics partners for physical fulfillment:

  • Express Couriers: DHL Express, FedEx Priority, BlueDart Air, Royal Mail, and USPS to enable door-to-door transit and customs clearance.
  • Fulfillment Vendors: Verified regional artisanal vendors receive order manifests containing the items ordered and delivery labels, without access to your billing details or payment cards.

We never sell, lease, or monetize your personal details or your recipient's contact information to third-party advertisers or brokers.

5. Cookies & Local Storage

We utilize essential and functional cookies to ensure a smooth browsing experience:

Cookie / Storage Key Purpose Duration
destination_country Remembers your selected destination country catalog and logistics matrix Session / 30 Days
active_currency Maintains your chosen settlement currency (INR ₹ or USD $) Session / 30 Days
ga_cart_storage Maintains active cart items isolated by destination country 14 Days
XSRF-TOKEN Cross-Site Request Forgery security protection against unauthorized requests Session

6. Your Rights & Data Retention

You possess the right to access, rectify, or request the deletion of your personal profile at any time. We retain order records strictly for accounting, taxation, and regulatory audit compliance as required by applicable commercial statutes.

GiftAcross