Privacy policy.

Effective Date: October 7, 2026

Last Updated: October 7, 2026

Welcome to GiftPop ("we," "our," or "us"). We operate a multi-vendor gifting marketplace that connects consumers with independent third-party merchants ("Vendors") who offer products, services, and gift vouchers, alongside physical add-on items fulfilled directly by us.

We are committed to protecting your personal information in accordance with the New Zealand Privacy Act 2020. This Privacy Policy outlines how we collect, use, disclose, and protect your information when you visit our website www.giftpop.co.nz or use our services.

1. Information We Collect

We collect personal information to provide and continually improve our marketplace. The types of information we collect include:

• Account & Profile Data: When you register, we collect your name, email address, phone number, password, and account preferences.
• Transaction, Shipping & Gifting Details: Billing information, purchaser details, recipient names and contact information for surprise gifts, physical delivery addresses for shipped add-ons, and custom gift messages. (Note: Payment card details are tokenized and processed securely by our certified third-party payment gateways; we do not store full payment card numbers on our servers).
• Vendor & Merchant Data: If you register as a vendor, we collect business registration details, contact numbers, and payout bank account information.
• Automatically Collected Data: IP addresses, browser types, device information, operating system, referral URLs, and browsing behavior gathered via cookies and tracking technologies.

2. How We Use Your Information

We use the information we collect for the following purposes:

• Facilitating Marketplace Transactions & Fulfillment: Transmitting order details and voucher issuance data to independent Vendors for booked services, and processing physical shipping details for add-on items fulfilled directly by us.
• Customer Support & Dispute Mediation: Assisting in routing inquiries, facilitating communication, and coordinating resolutions between you, independent Vendors, and our own fulfillment team.
• Platform Security & Fraud Prevention: Detecting and preventing fraudulent transactions, unauthorized access, and other malicious activities.
• Platform Improvement: Analyzing site traffic, user behavior, and feature performance to optimize our technology.

3. Disclosure of Your Information

We do not trade, rent, or sell your personal data. However, we may share your information in the following limited circumstances:

• With Independent Vendors: We share necessary order fulfillment details (such as recipient name and voucher redemption code) with the specific Vendor fulfilling your experience or service.
• Courier and Logistics Partners: We share delivery names and physical shipping addresses with courier services to deliver physical add-on items purchased through our platform.
• Service Providers: We share data with third-party vendors who assist us with cloud hosting, IT infrastructure, customer support tools, and secure payment processing.
• Legal Compliance & Safety: We may disclose information if required by New Zealand law, court order, or government regulation, or to protect the rights, property, and safety of GiftPop, our users, or others.

4. Marketing and Promotional Communications

• Consent & Compliance: In compliance with the Unsolicited Electronic Messages Act 2022, we will only send you commercial electronic messages (such as promotional emails or SMS texts) where you have explicitly opted in (e.g., checking an unticked box during checkout), or where an existing customer relationship exemption applies.
• Vendor Marketing: We do not give or sell your email address to independent Vendors for their own marketing campaigns unless you provide explicit, separate consent at checkout. If you opt-in to a specific Vendor's marketing list, their communications are governed by their own privacy policy.
• Opt-Out Rights: You can opt out of marketing communications at any time by clicking the "Unsubscribe" link at the bottom of any promotional email, updating your account notification settings, or emailing us at [email protected]. (Note: You will still receive mandatory transactional notices regarding active orders, voucher delivery, and security updates).

5. International Data Transfers

If your personal information is stored on cloud servers or processed outside of New Zealand by our trusted technical infrastructure providers, we ensure appropriate security safeguards are implemented in compliance with Information Privacy Principle 12 of the Privacy Act 2020.

6. Your Rights Under the Privacy Act 2020

You have the right to request access to and correction of any personal information we hold about you. To exercise these rights, please contact our Privacy Officer at [email protected].

7. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect operational or legal changes. We will post the updated policy on this page with a revised "Last Updated" date.

8. Contact Us

For questions or concerns regarding this Privacy Policy, please contact us at:

• Company Name: GiftPop Group Limited
• Email: [email protected]
• Location: Auckland, New Zealand