Privacy Policy

1. Who we are

Greetings! ("we", "us", "our") is a greeting card and gift retailer run by a trading partnership, based at Unit 4 140-144 South Coast Road, Peacehaven BN10 8ER, United Kingdom. We are the data controller responsible for your personal data. If you have any questions about this policy, contact us at hello@greetingsonline.co.uk or 07414776536.

2. Data we collect

• Account details — your name and email address when you create an account or sign in.
• Social sign-in data — if you sign in with Google or Facebook, we receive your name, email address, and profile picture from that provider. We do not receive your social account password or post anything on your behalf.
• Order and delivery details — items ordered, delivery address, and contact details needed to fulfil your order.
• Payment information — card payments are processed securely by Stripe. We do not store your full card number on our systems.
• Usage data — basic technical information such as your device and pages visited, used to keep the site working and secure and to understand how it is used.

3. How we use your data

We use your personal data to:

• create and manage your account and sign you in;
• process, fulfil, and deliver your orders;
• send order confirmations and respond to your enquiries;
• send marketing emails where you have opted in (you can unsubscribe at any time); and
• protect the site against fraud and meet our legal obligations.

4. Legal bases (UK GDPR)

We rely on contract to fulfil your orders and provide your account, consent for marketing emails, legal obligation to keep tax and accounting records, and our legitimate interests to keep the site secure and improve our service.

5. Who we share it with

We only share data with service providers that help us run the shop, under appropriate agreements:

• Stripe — payment processing and fraud prevention.
• Google and Meta (Facebook) — only if you choose to sign in with them.
• Other service providers — website and database hosting, email delivery, error monitoring, and internal tools we use to manage orders.
• Delivery companies — your name and address so they can deliver your order.

We may also share data where required by law, for example with HMRC. We never sell your personal data.

6. International transfers

Some of our service providers store or process data outside the UK, including in the European Union and the United States. Where they do, we make sure your data is protected by appropriate safeguards, such as UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses.

7. Cookies and similar technologies

We use a small number of cookies and similar browser storage that are strictly necessary for the site to work — to keep you signed in, remember your basket, and process payments securely (Stripe). We do not use advertising or third-party tracking cookies.

We also collect anonymous, first-party statistics about how the site is used (such as pages viewed and how visitors found us) using a temporary identifier that is deleted when you close your browser tab. This data is not shared with third parties for advertising. You can block browser storage in your browser settings at any time.

8. How long we keep it

We keep your account data for as long as you have an account. We keep order and payment records for six years after the end of the financial year they relate to, as required by UK tax law. When data is no longer needed, we delete or anonymise it.

9. Your rights

Under UK GDPR you have the right to access, correct, or delete your personal data, to object to or restrict its processing, and to data portability. To exercise any of these rights, contact us at hello@greetingsonline.co.uk. You can also delete your data at any time — see our Data Deletion page. You have the right to complain to the UK Information Commissioner's Office (ico.org.uk).

10. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page with the date it was last updated.