Privacy notice

This notice explains how personal data is handled when you visit The Group Gift Guide or email our editorial team. It covers this publication only. It does not cover your use of GiftRound or any other provider we write about, each of which has its own privacy information.

Who is responsible for your data

The data controller is Gift Round Limited, registered in Scotland with company number SC515352. Our registered office is 49 Castleview Drive, Bridge of Allan, Stirling, Scotland, FK9 4BD.

You can contact us about privacy at hello@thegroupgiftguide.com.

What we collect

This site has no user accounts, no newsletter signup and no contact form. We do not ask you to create a profile or submit personal details to read anything here. The personal data involved falls into two categories.

• Email enquiries. If you email us, we receive your email address, your name if you give it, and whatever you choose to include in your message.
• Technical and security information. Like almost all websites, pages are delivered by hosting and security infrastructure that may automatically process basic technical information such as your IP address, browser and device details, the URL requested, timestamps and diagnostic or security log entries.

Why we use it and our lawful bases

• Replying to you. When you email us, we use your details to read, answer and, where relevant, act on your message, including corrections. Lawful basis: our legitimate interests in running a responsive editorial publication, or taking steps at your request.
• Delivering the site securely. Technical information is processed so pages load, so faults can be diagnosed, and so the site can be protected against abuse. Lawful basis: our legitimate interests in a secure, functioning website.
• Legal obligations. Where the law requires us to keep or disclose information, our lawful basis is compliance with a legal obligation.

We do not sell personal data. We do not use it for advertising profiling, and there is no automated decision-making that produces legal or similarly significant effects.

Who may receive it

We share personal data only with service providers acting on our instructions, in the categories you would expect for a small publication: website hosting and content delivery, security and anti-abuse infrastructure, and our business email provider. These suppliers process data for us under contract and are not permitted to use it for their own purposes.

We may also disclose information where we are legally required to do so, or to establish or defend legal claims.

International transfers

Some hosting, content delivery, security or email providers may process data outside the UK. Where that happens, transfers are made under safeguards recognised by UK data protection law, such as UK adequacy regulations or the International Data Transfer Agreement or Addendum. If you would like more detail about the arrangements relevant to your enquiry, please email us.

How long we keep it

We keep email correspondence for as long as needed to deal with the matter and to keep a reasonable record of corrections, complaints or legal issues, then delete it. Technical and security logs are held by our infrastructure providers for short operational periods and deleted or overwritten in the normal course of their systems. We do not keep personal data for longer than we have a genuine reason to.

Your rights

Under UK GDPR you have the right to access your data, to have inaccurate data corrected, to have data erased, to restrict processing, to data portability where it applies, and to object to processing.

The right to object: where we rely on legitimate interests, you can object at any time to how we use your personal data. Tell us why, and we will stop unless we have compelling legitimate grounds that override your interests, or we need the data for legal claims.

If we ever rely on consent for anything, for example a future newsletter, you will be able to withdraw that consent at any time, and withdrawing it will not affect processing carried out before you did so.

To exercise any right, email hello@thegroupgiftguide.com. We respond within one month and will tell you if we need longer.

Complaints

We would rather hear from you first, but you can complain to the UK regulator, the Information Commissioner's Office, at ico.org.uk/make-a-complaint or by calling their helpline.

Children

This site is written for adults organising group gifts. It is not directed at children and we do not knowingly collect personal data from them. If you believe a child has sent us personal data, email us and we will delete it.

External links

We link to other websites, including GiftRound and competing providers. We are not responsible for their content or privacy practices. Read their own privacy notices before giving them personal data.

Changes to this notice

If we introduce anything that changes how personal data is handled, for example analytics, a newsletter or a contact form, we will update this page before it goes live and change the date at the top. See also our cookie notice.