GIFTYA PRIVACY POLICY

UPDATED: December 2025

INTRODUCTION

Welcome to GiftYa.com! Your privacy matters to us. This Privacy Policy (the “Policy”) explains what information we collect, why we collect it, how we use it, and your rights. It applies to all our websites, apps, and digital services (we’ll call them “Services”); it does not apply to third-party websites or information collected from you off-line.

The Services are intended for U.S. residents who are the age of majority or older in their home state (Age 21 in Mississippi, age 19 in Alabama and Nebraska and age 18 in other states and Washington, D.C.). You are not authorized to access and use the Services if you are located outside the United States, or are younger than the age of majority in your state.

By using our Services, you agree to this policy. If you don’t agree, please don’t use our Services or GiftYa.com.

SUMMARY

• We collect your personal information to provide and improve the Services.
• We don’t sell your information
• We may share your information with trusted third-party service providers who help us to run our business.
• You have rights to access, correct, or delete your information, subject to applicable data protection laws in your jurisdiction.
• This policy applies to U.S. residents over the age of majority.

PERSONAL INFORMATION WE COLLECT

For purposes of this Policy, “Personal Information” means any information that identifies, relates to, describes, references, is capable of being associated with, or could reasonably be linked, directly or indirectly, with a specific person. It does not include publicly available information from government records or de-identified or aggregated information.

• When You Give GiftYa Information:
  When you sign up, make a purchase, or contact us, we may collect:
  • Name, email address, phone number, physical address
  • Payment info (e.g., credit card, bank account)
  • Shipping details
  • Job application info (if applicable)
  • Business info (if you contact us on behalf of a company)
  • Preferences (e.g., wish lists, marketing choices)
• When You Use the Services (Info Collected Automatically from your Device):
  • IP address, browser type, device info
  • Location (if enabled)
  • Cookies and similar tools to understand how you use our site
• Third Parties
  • When you provide access to financial institution information, the following may be collected:
    • Your bank account and/or other financial institution account info
    • Information to access your account
    • Authority to act on your behalf to access and transmit information from your account(s)
  • Our service providers may collect and use:
    • Account information as described in their privacy policies, and as necessary to help provide you with the Services
• From Other Sources:
  • Social Media (if you connect your account)
  • Third-party services (e.g., fraud detection, analytics)

HOW WE USE YOUR INFO

• GiftYa uses Personal Information to:
  • Provide and personalize our Services
  • Process orders and payments
  • Communicate with you (including marketing communications, unless you opt out)
  • Protect our customers and our business from malicious, deceptive, fraudulent, or illegal activity
    • Detect and prevent security incidents and fraudulent transactions
    • Protect against unauthorized access to accounts, systems and payment instruments
    • Investigate, respond to, and mitigate potentially fraudulent or suspicious activity
    • Comply with applicable laws, regulations, and Card Network requirements regarding fraud detection and prevention
  • Improve our products and services
  • Comply with legal obligations

If you provide GiftYa with access to your credit or debit card, and/or to any financial institution account, in connection or pursuant to the Services, you authorize us to collect, store and share your credit card, debit card, and/or other financial institution information, along with other information related to your qualifying transaction, such as purchase amount/time/date/merchant with the applicable card payment network or financial institution.

HOW WE USE DATA COLLECTION TOOLS

Cookies, web beacons, clear GIFs and similar technology (“Data Collection Tools”) help GiftYa automatically collect information about you when you use the Services.

GiftYa, or our service providers, use tools like the above to:

• Remember your preferences
• Analyze how you use our site
• Track when our emails are viewed
• Personalize and show you relevant ads

Please remember: You can control cookies in your browser settings. We don’t respond to “Do Not Track” signals.

HOW WE SHARE PERSONAL INFORMATION

• GiftYa may share your information with:
  • Our affiliates (i.e., companies we’re connected to, including merchants/brands)
  • Service providers (e.g., payment processors, delivery services)
  • Legal authorities (if required)
  • Third-parties connected with the sale of a business or merger

Text messaging originator opt-in data and consent will not be shared with any third parties, excluding aggregators and providers of the Text Message services.

We never sell your Personal Information.

HOW WE PROTECT AND STORE INFORMATION

GiftYa takes precautions intended to help protect information that we collect and store. However, any transmission to us is at your own risk and we expect that you will use appropriate security measures to protect your information. GiftYa will treat access to the Services through your account credentials as authorized by you. Unauthorized access to password-protected or secure areas is prohibited and may lead to criminal prosecution. We may suspend your use of all or part of the Services without notice if we suspect or detect any breach of security. We retain information for as long as necessary to provide the Services, to fulfill the purposes for which you provided the information, to comply with legal obligations, to resolve disputes, to enforce agreements, and similar essential purposes.

GiftYa also uses a combination of automated fraud detection tools, manual review, and third-party services to monitor for suspicious activity. These tools may include transaction monitoring, device fingerprinting, behavioral analytics, and identity verification.

LINKING TO OTHER SITES

GiftYa may provide links to websites operated by unrelated third parties. Please note that when you navigate to the website of an unrelated third party, this Privacy Policy no longer applies. We encourage you to read the privacy policies of every website or service that you visit in order to understand how those third parties may process your Personal Information.

EXCLUSIONS

This Privacy Policy does not apply to any Personal Information collected by GiftYa other than that collected through the Services. It does not apply to any unsolicited information you provide to GiftYa through the Services or through any other means.

YOUR RIGHTS

• SMS Notifications
  • By accessing the Service and by acknowledging our Terms of Service, you consent to our communicating with you on your mobile device. If you would like to revoke this consent at any time, you may do so by contacting us via our customer support form on this page. You may also opt out through your GiftYa account.
• E-Mails
  • If you do not wish to receive promotional e-mails from us (including third-party emails), you can follow the unsubscribe process at the bottom of the e-mail. Please note that you may still receive transactional e-mails from us, even if you opt out of promotional e-mails.
• Additional Rights
  • Depending on where you live, you may have the right to:
    • Access your data
    • Correct or delete your data
    • Opt out of marketing communications
    • Request a copy of your data

To make a request for a copy of your data, contact us by:

• Email: support@giftya.com
• Phone: (866) 352-9437
• Mail: 495 Mansfield Avenue, Pittsburgh, PA 15205

Please note that there are limitations to these rights, such as if we are required by law to keep your personal information, or if by providing you with access to your personal information would reveal personal information about another person. If we cannot fulfill your request, we will inform you as to the reason why.

CHILDREN’S PRIVACY

The Services are not directed to or intended for use by minors. Consistent with the requirements of the U.S. Children’s Online Privacy Protection Act, if we learn that we have received any information directly from a child under age 13 without his or her parent’s verified consent, we will use that information only to respond directly to that child (or his or her parent or legal guardian) to inform the child that he or she cannot use the Services and subsequently will delete that information.

CALIFORNIA CONSUMER PROTECTION ACT (CCPA)

If you are a California resident, you have specific rights regarding your personal information under the California Consumer Privacy Act (CCPA). These rights include:

• Right to Know – You may request information about the personal data we collect, use, disclose, or sell about you over the past 12 months.
• Right to Delete – You may request that we delete personal information we have collected from you, subject to certain exceptions.
• Right to Opt-Out of Sale – If we sell personal information, you have the right to opt out of such sales.
• Right to Non-Discrimination – We will not discriminate against you for exercising your CCPA rights.

To exercise any of these rights, please contact us through any of the methods set out on this page. We will respond to verifiable requests in accordance with CCPA timelines and requirements.

GENERAL DATA PROTECTION REGULATION (GDPR)

If you are an individual located in the European Economic Area (EEA), you have certain rights regarding your personal data under the General Data Protection Regulation (GDPR), including:

• Right of Access – You may request access to the personal data we hold about you.
• Right to Rectification – You may request correction of inaccurate or incomplete personal data.
• Right to Erasure – You may request deletion of your personal data, subject to certain legal obligations.
• Right to Restrict Processing – You may request that we limit the processing of your personal data.
• Right to Data Portability – You may request a copy of your personal data in a structured, machine-readable format.
• Right to Object – You may object to certain processing activities, including marketing purposes.

To exercise any of these rights, please contact us through any of the methods set out on this page. We will respond to your request in accordance with applicable GDPR timelines.

APPLE DEVICE ADDITIONAL TERMS

If you access an App via a Mobile Device or tablet branded by Apple, Inc. (“Apple”) and running Apple’s iOS (an “Apple Device”), the following terms (“Apple Device Additional Terms”) are hereby made part of this Privacy Statement: (a) If this Privacy Statement or any agreement between GiftYa and you conflict with the Apple Device Additional Terms, then the Apple Device Additional Terms shall apply with respect to access and use of the Services via an Apple Device.; (b) You acknowledge that this Privacy Statement or your agreements with GiftYa about the Services are not an agreement with Apple. GiftYa, not Apple, is solely responsible for any App you access via your Apple Device (“iOS App”) and the content thereof. If this Privacy Statement or your agreements with GiftYa about the Services are less restrictive with respect to an iOS App or otherwise conflict with, the Apple App Store Terms of Service (the “App Store Terms of Service”), the App Store Terms of Service shall apply to the extent of any conflict.; (c) The license granted to use an iOS App is limited to a non-transferable license to use the App on an Apple Device that you own or control and as permitted by the usage rules set forth in the App Store Terms of Service; (d) GiftYa is solely responsible for providing any maintenance and support services for an iOS App. You acknowledge that Apple has no obligation whatsoever to furnish any maintenance and support services with respect to any iOS App.; (e) GiftYa is solely responsible for any product warranty, whether express or implied by law, to the extent not effectively disclaimed. If an iOS App fails to conform to any applicable warranty, you may notify Apple and Apple will refund the purchase price for the iOS App (if any) and, to the maximum extent permitted by applicable law, Apple will have no other warranty obligation whatsoever with respect to the iOS App and all other claims, losses, liabilities, damages, costs or expenses attributable to any failure to conform to any warranty are GiftYa’s sole responsibility; (f) You hereby acknowledge that GiftYa, not Apple, is responsible for addressing your or any third-party claims relating to an iOS App and/or use of an iOS App, including, but not limited to: (i) product liability claims; (ii) any claim that an iOS App fails to conform to any applicable legal or regulatory requirement; and (iii) claims arising under consumer protection or similar legislation. This Privacy Statement or your agreements with GiftYa about the Services do not limit GiftYa’s liability beyond what is permitted by applicable law.; and (g) You acknowledge that, in the event of any third party claim that an iOS or your possession and use of an iOS App infringes that third party’s intellectual property rights, GiftYa, not Apple, is solely responsible for the investigation, defense, settlement and discharge of any such intellectual property infringement claim.

CHANGES TO THIS PRIVACY STATEMENT

We reserve the right to update this Privacy Policy as business needs change. If we make changes, we’ll let you know – by posting the changes on this page and by revising the “Updated” date at the top of the page. Any changes will become effective when we post the amended Privacy Policy, and the latest version will always be on our website.

HOW TO CONTACT US

Have questions? Reach out anytime:

• E-mail: support@giftya.com
• Phone: (866) 352-9437
• Mail: 495 Mansfield Avenue, Pittsburgh, PA 15205

© 2025 GiftYa, LLC