Privacy policy (draft)
Last updated: August 2026 — draft pending counsel review
Who we are
GiftRoam is operated by Multifunnels Inc. We are the merchant of record for your purchase and the controller of the personal data described here. Contact: hello@giftroam.com.
What we collect
To deliver a gift we collect the recipient's name, address and phone, your name and email, the delivery date and the gift message. If you create an account we also keep your sign-in email and language preference. Payment card details are collected and stored by Stripe, never by GiftRoam.
Why we use it
To carry out your purchase and place the order with the local partner who assembles and delivers it; to send receipts and delivery updates; to answer support requests; to prevent fraud; to meet legal, tax and accounting obligations; and to improve the site using aggregate, non-identifying statistics.
Who we share it with
The local fulfilment partner receives only what is needed to deliver: recipient details, delivery date and the gift message. Stripe processes payment. Google Cloud hosts our infrastructure and sign-in (data processed in the EU region); recipient details are encrypted at rest. We never sell personal data and never share it for advertising.
AI assistants
When you use GiftRoam through an AI assistant, the assistant only exchanges product, country, date and gift-message information with us. Recipient address and payment are entered on our own checkout page and are never sent to the assistant. If you connect an assistant to your account it can see your order statuses — never addresses or payment details — and you can disconnect it anytime from My orders.
Security
All traffic is encrypted in transit (TLS); recipient personal details are additionally encrypted at rest. Access is limited to systems and staff that need it to fulfil or support your order.
Retention
Recipient details are kept for up to 180 days after delivery for support and payment-dispute handling, then deleted. Abandoned checkout details are deleted after 30 days. Order and financial records are kept as required by law. Deleting your account removes your sign-in data and unlinks your orders (see Account & privacy in My orders).
Your rights
You can ask to access, correct, delete or export your data, or object to a use of it, by emailing hello@giftroam.com — we respond within 30 days, subject to legal retention. If you are in the EU/EEA or UK you can also complain to your data-protection authority.