Privacy

Who is responsible

What we store

• The names entered as sender (“From”) and recipient (“To”).
• The optional personal message.
• An internal Etsy order number, used only to match the gift to the order.
• Technical dates: when the gift was created, changed and until when it stays online.

We do not store payment details. Purchase and payment are handled entirely by Etsy under its own privacy policy.

Why we process this data

We use the names, the message and the order number only to create, deliver and host the gift you ordered. For the buyer, the legal basis is the performance of the purchase contract (Art. 6(1)(b) GDPR). The recipient’s name is processed on the basis of our and the buyer’s legitimate interest in delivering a personal gift (Art. 6(1)(f) GDPR).

Who can see a gift

Every gift has a long random link. Anyone who knows this link — or scans its QR code — can open the gift and see the names and the message. Please share the link only with the intended recipient. Gift pages are marked so that search engines should not index them, but this is not an access restriction.

Visits and tracking

Gift pages contain no analytics, advertising or third-party resources, and no tracking of recipients takes place. The server keeps no access logs. To protect against misuse (for example someone trying out random links), the IP address of a visitor is held in memory only, for at most 15 minutes, and is never written to disk.

How long gifts stay online

A gift page is online for the hosting period stated in the Etsy listing (12 months), counted from its creation. After that the link stops working. 30 days later the gift is deleted automatically and permanently: names, message and order number. Server backups, if any, are kept for at most 30 days, so deleted data also disappears from the backups at the latest 30 days after deletion.

Deletion and your rights

You can ask us to correct or delete a gift at any time by e-mail to info@digiflower.store or via Etsy messages. Please include your Etsy order number.

You have the right to access the data we hold about you, to have it corrected or deleted, to restrict its processing, to receive it in a portable format and to object to its processing. You also have the right to lodge a complaint with a data protection authority — in the EU, usually the authority of the country where you live; in Georgia, the Personal Data Protection Service of Georgia.

Hosting

The gift pages and the database run on a server rented from Hostinger: https://www.hostinger.com/, located in Frankfurt, Germany. No other service stores gift data.