Last Updated: 30 April 2026
GiftcardX ("we", "our", "us") is committed to protecting your privacy. This Privacy Policy explains what personal data we collect, why we collect it, how we use and protect it, and what rights you have over your data when you use our platform at giftcardx.store.
By using GiftcardX, you agree to the practices described in this policy. If you do not agree, please stop using the platform. For any questions, contact us at support@giftcardx.store.
We collect the minimum data necessary to provide our services. We collect data directly from you, through your actions on the platform, and automatically via cookies and analytics technologies.
| Type | Description | Purpose |
|---|---|---|
| Email address | Provided at checkout for product delivery | Delivering gift card codes; order confirmations; support communications |
| Wallet address | Crypto wallet address used for payment | Processing and verifying your payment; fraud prevention |
| Transaction data | Product purchased, amount, currency, payment method, date and timestamp | Order fulfillment; customer support; compliance |
| Support data | Messages and information you share with our support team | Resolving your enquiries and disputes |
| Preferences | Selected country, currency, and platform settings | Personalizing your experience |
| Type | Description | Purpose |
|---|---|---|
| Device & browser data | Device type, operating system, browser version, screen resolution, IP address, network provider | Security; fraud detection; platform optimization |
| Usage data | Pages visited, clicks, time spent, referral source, error logs | Improving platform performance; understanding user behavior |
| Cookie data | Session identifiers, preference cookies, analytics cookies | Session management; analytics; remembering your settings |
Cryptocurrency transactions are recorded on public blockchains. When you pay with crypto, your wallet address, transaction amount, and transaction ID become permanently visible on the relevant blockchain network. This data is inherently public and cannot be deleted or modified by GiftcardX or anyone else. By paying with crypto, you acknowledge this.
GiftcardX does not collect: government-issued ID documents, biometric data, social security numbers, bank account details, credit card numbers, or any special categories of sensitive personal data (race, ethnicity, health, religion, political views). We do not require account registration to make a purchase.
We process your personal data only for specific, legitimate purposes:
| Purpose | Data Used | Legal Basis |
|---|---|---|
| Processing and delivering your order | Email, wallet address, transaction data | Performance of a contract |
| Sending order confirmations and gift card codes | Email, transaction data | Performance of a contract |
| Providing customer support | Email, transaction data, support messages | Performance of a contract; legitimate interest |
| Fraud prevention and platform security | IP address, wallet address, device data, transaction data | Legitimate interest |
| Compliance with legal obligations | Transaction data, wallet address, IP address | Legal obligation |
| Platform analytics and improvement | Usage data, device data (anonymized where possible) | Legitimate interest |
| Sending service communications | Email address | Performance of a contract; legitimate interest |
We do not use your personal data for automated individual decision-making or profiling that produces legal or similarly significant effects. We do not sell your personal data to third parties.
GiftcardX may send you promotional emails about new gift cards, special offers, and platform updates. We will only do this if you have provided your email address and not opted out of marketing communications.
Every marketing email we send includes an unsubscribe link. You can opt out at any time by clicking that link or by contacting us at support@giftcardx.store. Opting out of marketing communications will not affect transactional emails related to your orders.
We do not share your email address with third parties for their own marketing purposes.
GiftcardX shares your personal data only when necessary and with appropriate safeguards in place.
We work with trusted third-party service providers who help us operate the platform. These providers access only the data necessary for their specific function and are contractually bound to process it only on our instructions:
To fulfill your order, limited transaction data (product type, amount, currency) may be shared with the gift card issuer or their authorized distribution partner. We share only what is necessary to process and validate your order.
When you pay with cryptocurrency, your transaction is broadcast to the relevant public blockchain network. This includes your wallet address and transaction amount. This data is publicly visible and permanent by design — it cannot be removed by GiftcardX.
We will disclose your personal data to law enforcement or regulatory authorities only when required to do so by a valid legal obligation, court order, or equivalent legal instrument. We will not voluntarily share your data with authorities without a lawful basis. Where permitted by law, we will attempt to notify you of such a request before disclosing your data.
In the event of a merger, acquisition, sale of assets, or other corporate restructuring, your personal data may be transferred as part of that transaction. We will notify you of any such change and any resulting changes to how your data is handled.
We may share your data with other third parties where you have given us your explicit consent to do so.
We implement appropriate technical and organizational security measures to protect your personal data against unauthorized access, loss, destruction, or alteration:
Despite these measures, no system is completely secure. We cannot guarantee the absolute security of your data. If you become aware of any security vulnerability related to GiftcardX, please report it to support@giftcardx.store.
In the event of a data breach that poses a risk to your rights and freedoms, we will notify affected users and relevant authorities as required by applicable law.
Depending on your location and applicable law, you may have the following rights regarding your personal data. We will respond to all valid requests within 30 days.
| Right | Description |
|---|---|
| Access | Request a copy of the personal data we hold about you, including information on how it is processed. |
| Correction | Request correction of any inaccurate or incomplete personal data we hold about you. |
| Erasure | Request deletion of your personal data. We will comply to the extent permitted by law — some data may be retained for legal compliance reasons (see Section 7). |
| Restriction | Request that we restrict processing of your data in certain circumstances, such as while we verify its accuracy. |
| Objection | Object to our processing of your data where we rely on legitimate interests as our legal basis. |
| Portability | Request a copy of data you provided to us in a structured, machine-readable format. |
| Withdraw consent | Where processing is based on your consent (e.g. marketing emails), withdraw that consent at any time. |
To exercise any of these rights, email us at support@giftcardx.store with your request and sufficient information to verify your identity. We will not charge a fee for reasonable requests. For repetitive or excessive requests, we reserve the right to charge a reasonable fee or decline to act.
Please note that certain rights may be limited where we have a legal obligation to retain data, or where your data is linked to an ongoing fraud investigation or compliance review.
Note regarding blockchain data: Personal data recorded on public blockchains (wallet addresses, transaction amounts) cannot be erased or modified. Erasure requests do not apply to on-chain data.
We retain your personal data only for as long as necessary to fulfill the purpose for which it was collected, or as required by law:
| Data Type | Retention Period | Reason |
|---|---|---|
| Email address & order data | 5 years from last transaction | Fraud prevention; dispute resolution; compliance |
| Transaction & payment data | 5–7 years | AML compliance; tax obligations; legal requirements |
| Support communications | 2 years from resolution | Reference for future disputes or enquiries |
| Analytics & usage data | 26 months (Google Analytics default) | Platform improvement; aggregated analysis |
| IP addresses (security logs) | 90 days | Fraud detection; security incident investigation |
| Marketing preferences | Until you unsubscribe or request deletion | Respecting your communication preferences |
When data is no longer required, it is securely deleted or irreversibly anonymized. We do not retain personal data "just in case" — all retention is tied to a specific, documented purpose.
GiftcardX uses cookies and similar technologies to operate the platform, remember your preferences, and analyze usage.
Cookies are small text files stored on your device when you visit a website. They allow websites to recognize you across pages and sessions, remember your preferences, and collect analytics data.
| Category | Purpose | Examples |
|---|---|---|
| Essential | Required for the platform to function. Cannot be disabled without breaking core features. | Session cookie, cart data, country preference |
| Analytics | Help us understand how users interact with the platform so we can improve it. Data is aggregated and anonymized where possible. | Google Analytics (_ga, _gid) |
| Preference | Remember your settings across sessions. | Selected country, currency, display preferences |
We use Google Analytics to analyze platform usage. Google Analytics sets cookies on your device and collects anonymized data about your interactions with GiftcardX. This data is processed by Google in accordance with their Privacy Policy. You can opt out of Google Analytics tracking using the Google Analytics Opt-out Browser Add-on.
You can control cookies through your browser settings. Most browsers allow you to view, block, or delete cookies. Note that blocking essential cookies will prevent GiftcardX from functioning correctly. For instructions on managing cookies in your browser, visit your browser's help documentation.
GiftcardX is not intended for use by individuals under 16 years of age. We do not knowingly collect personal data from children under 16. If you are under 16, do not use GiftcardX or provide any personal information to us without the supervision and consent of a parent or legal guardian.
If we become aware that we have collected personal data from a child under 16 without verifiable parental consent, we will delete that data as quickly as possible. If you believe we may have collected data from a minor, please contact us at support@giftcardx.store.
GiftcardX operates globally and your personal data may be transferred to and processed in countries other than your country of residence. Some of our service providers are located outside your jurisdiction and may process data in countries with different data protection standards.
When we transfer data internationally, we ensure appropriate safeguards are in place, such as standard contractual clauses or other legally recognized transfer mechanisms. We only transfer data to service providers who meet our security and privacy standards.
We may update this Privacy Policy from time to time to reflect changes in our practices, technology, legal requirements, or other factors. The date of the most recent update is always displayed at the top of this page.
For significant changes, we will notify you by email (if you have provided one) or by displaying a prominent notice on the platform before the change takes effect. Your continued use of GiftcardX after the effective date of any changes constitutes your acceptance of the updated policy.
We encourage you to review this policy periodically to stay informed about how we protect your data.
If you have any questions, concerns, or requests regarding this Privacy Policy or how we handle your personal data, please contact us:
We aim to respond to all privacy-related enquiries within 30 days. For complex requests, we will acknowledge receipt within 5 business days and keep you updated on progress.