Privacy Policy - FFAIR.GIFTS

1. Introduction

FFAIR.GIFTS ("we", "our", or "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our marketplace platform.

We are the data controller for the personal data we collect. Our contact details are available in the Contact section.

2. Information We Collect

2.1 Personal Information

Name and contact details (email, phone, address)
Account information (username, password)
Payment information (processed securely by Stripe)
Profile information (shop details, preferences)
Communication records (support messages, feedback)

2.2 Usage Information

Browsing history and recently viewed items
Search queries and preferences
Device information (IP address, browser type)
Cookies and similar technologies

2.3 Special Category Data

We may collect information about disabilities or health conditions when you choose to provide it, for example when applying as a seller. This is only collected with your explicit consent and used to provide appropriate support and accessibility features.

3. How We Use Your Information

We use your personal data for the following purposes:

3.1 Service Provision

To provide and maintain our marketplace platform
To process orders and payments
To facilitate communication between buyers and sellers
To provide customer support

3.2 Legal Basis

Contract Performance: Processing orders, payments, and marketplace services
Legitimate Interest: Improving our services, fraud prevention, analytics
Consent: Marketing communications, special category data
Legal Obligation: Tax records, regulatory compliance

4. Data Sharing

We may share your information with:

Service Providers: Stripe (payments), Supabase (database), Cloudinary (images)
Legal Requirements: When required by law or to protect our rights
Business Transfers: In case of merger or acquisition
Consent: When you explicitly agree to sharing

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

Encryption of data in transit and at rest
Regular security assessments and updates
Access controls and authentication
Staff training on data protection

6. Your Rights

Under GDPR, you have the following rights:

Access: Request copies of your personal data
Rectification: Correct inaccurate or incomplete data
Erasure: Request deletion of your personal data
Portability: Receive your data in a structured format
Restriction: Limit how we process your data
Objection: Object to processing based on legitimate interests
Withdraw Consent: Withdraw consent for consent-based processing

To exercise these rights, contact us at privacy@ffair.gifts

7. Data Retention

We retain your personal data for:

Account Data: Until account deletion or 3 years of inactivity
Order Data: 7 years for tax and legal compliance
Marketing Data: Until consent is withdrawn
Analytics Data: 2 years maximum

8. Cookies

We use cookies and similar technologies to enhance your experience. See our Cookie Policy for details.

9. International Transfers

Some of our service providers may be located outside the UK/EEA. We ensure appropriate safeguards are in place for such transfers, including Standard Contractual Clauses and adequacy decisions.

10. Children's Privacy

Our services are not intended for children under 16. We do not knowingly collect personal information from children under 16. If we become aware of such collection, we will delete the information promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last updated" date.

12. Contact Information

If you have questions about this Privacy Policy or our data practices, please contact us:

Email: privacy@ffair.gifts
Website: Contact Form