OH! WHAT A GIFT!

1. Information We Collect

2. How We Use Your Information

We use the information we collect for the following purposes:

• Order Processing: To process and fulfill your orders, including personalization requests, shipping, and delivery
• Customer Service: To respond to your inquiries, provide support, and handle returns or exchanges
• Communication: To send order confirmations, shipping updates, and important account-related information
• Marketing: With your consent, to send promotional emails, newsletters, and special offers about our products and services
• Website Improvement: To analyze website usage, improve user experience, and optimize our website functionality
• Legal Compliance: To comply with legal obligations, enforce our terms of service, and protect our rights and the rights of our customers
• Fraud Prevention: To detect and prevent fraudulent transactions and unauthorized access
• Personalization: To customize your shopping experience and recommend products that may interest you

3. Information Sharing and Disclosure

We do not sell, rent, or trade your personal information. We may share your information only in the following circumstances:

• Service Providers: With trusted third-party service providers who assist us in operating our website, processing payments, shipping orders, managing email communications, and analyzing website usage. These providers are contractually obligated to protect your information and use it only for the purposes we specify.
• Legal Requirements: When required by law, court order, or government regulation, or to respond to legal process or requests from law enforcement
• Business Transfers: In connection with a merger, acquisition, or sale of assets, where your information may be transferred as part of the business transaction
• Protection of Rights: To protect our rights, property, or safety, or that of our customers or others, including fraud prevention and security measures
• With Your Consent: When you have explicitly given us permission to share your information

4. Data Security

We implement appropriate technical and organizational security measures to protect your personal information against unauthorized access, alteration, disclosure, or destruction. These measures include:

• SSL encryption for data transmission
• Secure payment processing through PCI-compliant providers
• Regular security assessments and updates
• Limited access to personal information on a need-to-know basis
• Secure storage of data with industry-standard protections

However, no method of transmission over the internet or electronic storage is 100% secure. While we strive to protect your information, we cannot guarantee absolute security.

5. Your Rights and Choices

Depending on your location, you may have certain rights regarding your personal information:

• Access: Request access to the personal information we hold about you
• Correction: Request correction of inaccurate or incomplete information
• Deletion: Request deletion of your personal information, subject to legal and operational requirements
• Objection: Object to certain processing of your information
• Data Portability: Request a copy of your data in a portable format
• Withdraw Consent: Withdraw consent for marketing communications at any time by clicking unsubscribe in our emails or contacting us
• Opt-Out: Opt-out of cookies and tracking technologies (see our Cookies Policy)

To exercise these rights, please contact us at hello@ohwhatagift.com. We will respond to your request within 30 days.

6. Data Retention

We retain your personal information only for as long as necessary to fulfill the purposes outlined in this policy, unless a longer retention period is required or permitted by law. For example:

• Order information is retained for at least 7 years for tax and accounting purposes
• Marketing consent information is retained until you withdraw consent
• Customer service communications are retained for up to 3 years
• Website analytics data may be retained in anonymized form

7. Children's Privacy

Our services are not directed to individuals under the age of 18. We do not knowingly collect personal information from children. If you believe we have inadvertently collected information from a child, please contact us immediately, and we will take steps to delete such information.

8. International Data Transfers

Your information may be transferred to and processed in countries other than your country of residence. These countries may have data protection laws that differ from those in your country. We take appropriate measures to ensure that your information receives an adequate level of protection in accordance with applicable data protection laws.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our practices or for legal, operational, or regulatory reasons. We will notify you of any material changes by posting the new Privacy Policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

10. Contact Us

If you have questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us:

We are committed to addressing your concerns and will respond to your inquiry as soon as possible.