At Gift Basket Boutique, we understand that sending a gift involves trust. When you place an order with us, you share personal information about yourself and often about someone special to you.
We respect that trust and take care to handle personal information responsibly.
This Privacy Policy explains what information we collect, how we use and protect it, and the third-party services involved in operating our website and delivering your gifts.
1. Information We Collect
When you place an order, contact us or use our website, we may collect:
We collect information reasonably necessary to provide our products and services, respond to enquiries and operate our business.
2. How We Use Your Information
We use personal information to:
3. Payments and Payment Security
Online card payments are processed through Stripe, a third-party payment service provider.
Payment card details are transmitted directly to Stripe for processing. Gift Basket Boutique does not store full card numbers or card security codes on its website.
Stripe may use security and fraud-prevention technologies, including cookies and verification services such as hCaptcha.
Where Zip is available at checkout, customers choosing Zip are directed to Zip to complete payment. Zip handles information required for its service under its own privacy policy. Other payment methods, such as Apple Pay or Google Pay, may be available where shown at checkout.
For payments arranged by telephone, payment information is used only for the authorised transaction. Where card details are temporarily recorded to process a telephone payment, they are securely destroyed at the end of the day.
4. Gift Recipients and Delivery Information
To send your gift, we need certain information about its intended recipient.
This generally includes their name, delivery address and, where provided, a contact telephone number. Hospital deliveries may require additional details, such as the hospital name, ward or room number.
We share the information necessary to arrange delivery with the relevant delivery provider. Depending on the destination and delivery method, this may include Australia Post, Aramex or a local delivery service.
Recipient information is used for order fulfilment and related delivery matters, not for advertising or marketing.
We do not routinely contact recipients before delivery. Any contact that becomes necessary to resolve a delivery issue will be limited to that purpose.
5. Customer Emails and Enquiries
We use Google Workspace to manage our business email correspondence.
Our website uses Postmark to send transactional emails, including order confirmations and other order-related notifications, and to support website-generated correspondence.
These services process the information necessary to send and receive messages.
If you contact us through our website’s contact form, your enquiry may be stored within our website as well as delivered to our business email address.
We use this information to respond to your enquiry and maintain appropriate business records.
6. Live Chat
Our website offers live chat assistance through tawk.to.
When live chat is available, tawk.to may process chat messages, information you enter and technical information such as your IP address, browser and pages visited. Chat records may be stored on servers outside Australia.
tawk.to may use cookies or similar technologies to operate the service. Please avoid entering payment card details into a chat conversation.
For more information, please see the tawk.to Privacy Policy: https://www.tawk.to/privacy-policy/.
7. Cookies and Website Functionality
Our website uses cookies and similar technologies for shopping, security, analytics and live chat.
These include technologies that:
Some cookies are essential for shopping and checkout. Analytics and live chat technologies are used for their respective purposes and may involve third-party processing.
Where our website provides cookie preference controls, you can use them to manage the relevant settings. You can also manage or disable cookies through your browser settings, although restricting essential cookies may affect shopping and checkout functionality.
8. Google Analytics
We use Google Analytics 4, a website analytics service provided by Google, to understand how visitors use our website.
Google Analytics may collect page visits, product views, checkout starts, purchases, device and browser information, approximate location and how visitors found our website.
Purchase tracking includes the order number, order total, GST, shipping charges and products ordered. We use these reports to understand website performance and improve the shopping experience. Logged-in staff activity is excluded from tracking.
Google may process analytics information in countries outside Australia.
For more information about Google’s handling of information, please see the Google Privacy Policy: https://policies.google.com/privacy.
9. AI Gift Finder
Our website offers an AI-powered Gift Finder using Claude, a service provided by Anthropic. When you use the feature, your search request is sent to Claude to generate gift suggestions.
No name, contact, delivery or payment details are required to use the Gift Finder. Please avoid including personal or sensitive information in your search. The provider may handle submitted requests under its own privacy practices.
10. Sharing Information with Service Providers
We disclose information to providers where reasonably necessary to operate our business, process payments, communicate with customers and arrange deliveries.
These may include:
These services include Stripe and Zip (payments), Postmark and Google Workspace (email), Google Analytics (website analytics), tawk.to (live chat), Anthropic/Claude (Gift Finder), and our Australian hosting and backup providers. Delivery information is provided to the carrier when we arrange shipment.
The information shared depends on the service being provided.
We do not sell personal information to third parties.
11. Address Autocomplete
To make checkout easier, we use Google Places Autocomplete to suggest addresses as you type. When you enter an address in an autocomplete-enabled field, the information you type may be sent to Google to generate relevant address suggestions. Google may process this information in accordance with its own Privacy Policy. You can choose not to use the suggestions and enter your address manually instead.
For more information, please see Google’s Privacy Policy.
12. Overseas Processing and Storage
Our website is hosted on a server in Australia. Website backups are stored in the AWS S3 Sydney data centre.
Service providers that may process or store information outside Australia include Stripe, Zip, Postmark, Google Analytics, tawk.to and Anthropic (Claude). Google Workspace may also process business correspondence using overseas infrastructure.
Overseas processing may occur in the United States or other locations where these providers operate. The information involved depends on the service used.
We take reasonable steps appropriate to the circumstances to protect personal information handled by our service providers.
13. Protecting Your Information
We take reasonable steps to protect personal information from misuse, loss, unauthorised access, modification and disclosure.
These measures include secure website connections, controlled administrative access, secure third-party payment processing and website backup arrangements.
Although no online system can guarantee complete security, protecting customer and recipient information is an important part of how we operate our business.
14. How Long We Keep Information
We generally retain order histories for the life of our website and business, including to help customers with previous orders, provide copies of purchases and arrange repeat gifts. These records can include sender and recipient details, delivery information and gift messages.
We also retain relevant correspondence and accounting records for customer service, business and legal purposes. We review retention practices as appropriate, including whether particular information is still needed. Certain records must be kept for statutory periods.
You may request access to, correction of or deletion of personal information. We consider deletion requests in light of our business needs and legal obligations. Where deletion is appropriate, we take reasonable steps to delete or de-identify the information.
15. Accessing or Correcting Your Information
If you would like to request access to personal information we hold about you, or believe that information needs to be corrected, please contact us.
We may ask you to verify your identity before providing access or making changes.
We will consider requests in accordance with applicable Australian privacy requirements.
If you have a privacy concern or complaint, please contact us using the details below. We will review your concern and respond within a reasonable time. If you are dissatisfied with our response, you may be able to complain to the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.
16. Links to Other Websites
Our website may include links to websites operated by other organisations, including payment providers and social media platforms. Their privacy practices are governed by their own policies. We encourage you to review those policies when visiting their websites.
17. Changes to This Privacy Policy
We may update this Privacy Policy from time to time to reflect changes to our website, services, business practices or legal requirements.
The current version will be available on our website, together with its most recent update date.
18. Contact Us
If you have any questions about this Privacy Policy or how we handle personal information, please contact:
Gift Basket Boutique
Gold Coast, Queensland, Australia
Email: [email protected]
Made with care, delivered from the heart
