GiftMeGiftMeHome

GiftMe — Privacy Policy

Last updated: 20 June 2026

This Privacy Policy explains how GiftMe ("GiftMe", "we", "us") collects, uses, and protects personal information when you use our website and service. We process personal information in line with the Protection of Personal Information Act, 2013 (POPIA) of South Africa.

By using GiftMe, you agree to this Privacy Policy. It should be read together with our Terms & Conditions.

1. Who we are

GiftMe is the responsible party (data controller) for the personal information described in this policy. If you have any questions, you can reach us at giftmeevents@gmail.com.

2. Who this policy applies to

  • Hosts — people who create an account and build a wish list.
  • Guests — people who visit a host's public wish list and reserve an item. Guests do not need an account.

3. Information we collect

3.1 From hosts

  • Account details: your name and email address.
  • Login security: a securely hashed version of your password (we never store it in plain text).
  • Event content: the title, type, date, welcome message, items, links, colours, and any photos you upload.
  • Payment information: we record that a payment was made and a payment reference. Card details are handled by our payment provider, PayFast — we do not see or store your card number.
  • Banking details (optional): if you enable cash/EFT gifts, the banking details you enter (account name, bank, account number, branch code). These are stored only to display to your guests so they can send you an EFT gift — GiftMe does not process or hold any such payment.
  • Agreement records: the date and version of the Terms & Conditions you accepted at checkout.

3.2 From guests

  • Reservation details: the name you enter when reserving an item, and (if you choose to provide them) your email address and a message.

3.3 Collected automatically

  • Technical and usage data: basic information such as IP address, browser type, and pages visited, used to keep the service secure and working. We may use essential cookies for login and security.

4. How we use your information

We use personal information to:

  • create and manage host accounts;
  • build, display, and customise wish list pages;
  • run the reservation feature and prevent duplicate gifts;
  • process the R100 publishing fee through PayFast;
  • send service-related messages (for example, a reservation confirmation or payment receipt);
  • keep the service secure, prevent abuse, and comply with our legal obligations.

We do not sell your personal information.

5. Legal basis for processing (POPIA)

We process personal information where:

  • it is necessary to provide the service you have asked for (performance of a contract);
  • you have given consent (for example, a guest choosing to provide an email address);
  • it is necessary for our legitimate interests, such as keeping the service secure; or
  • we are required to do so by law.

6. Sharing your information

We share personal information only as needed to run GiftMe, with:

  • Hosts — a host can see the reservation details (name, and any email/message) for their own event. By default, guests cannot see who reserved an item.
  • Service providers (operators) who process data on our behalf under appropriate safeguards, including:
    • PayFast — payment processing;
    • our hosting and database provider;
    • our image hosting provider (for uploaded photos);
    • email delivery, where used for service messages.
  • Legal authorities, where required by law.

We do not otherwise sell or rent your personal information to third parties.

7. International transfers

Some of our service providers may process data outside South Africa. Where this happens, we take reasonable steps to ensure your information is protected in line with POPIA.

8. How long we keep information

  • Event and reservation data is kept while your event is active and for a reasonable period after it expires (see the expiry policy in our Terms), so you can view your history.
  • Account data is kept while your account is open.
  • Payment records are kept as long as needed for accounting and legal purposes.
  • We delete or anonymise personal information when it is no longer needed, unless the law requires us to keep it longer.

9. Your rights

Under POPIA, you have the right to:

  • ask what personal information we hold about you and request access to it;
  • ask us to correct or update information that is inaccurate;
  • ask us to delete your information, subject to any legal retention requirements;
  • object to certain processing; and
  • lodge a complaint with the Information Regulator (South Africa).

Guests: you can ask us, or the host of the event, to remove your reservation details at any time.

To exercise any of these rights, contact us at giftmeevents@gmail.com.

10. Security

We take reasonable technical and organisational measures to protect personal information, including hashing passwords, restricting access, and using reputable service providers for payments and hosting. No online service can be guaranteed 100% secure, but we work to keep your information safe.

11. Children

GiftMe is intended for use by adults (18 or older), or by minors with the consent of a parent or guardian. We do not knowingly collect personal information from children without such consent.

12. Changes to this policy

We may update this Privacy Policy from time to time. If we make material changes, we will update the "Last updated" date above and, where appropriate, notify you.

13. Contact

For any questions about this Privacy Policy, or to exercise your rights, contact us at giftmeevents@gmail.com.