Privacy Policy

This policy explains how Giftiplay collects and processes personal data under the EU General Data Protection Regulation (GDPR).

Data controller

The controller of your personal data is Geedie OÜ (registry code 16817890), Narva mnt 5, 10117 Tallinn, Estonia — [email protected].

Data we collect

Account data (name, email), order data (purchases, delivered keys, invoices), payment metadata (we never store full card numbers — these are handled by our payment processors), and technical data (IP address, device, and approximate location used for fraud prevention and VAT).

Why we process it

To perform our contract with you (deliver keys, issue invoices), to comply with legal and tax obligations, and for our legitimate interest in preventing fraud and improving the Service.

Sharing

We share data only with processors needed to run the Service: payment providers, key suppliers (to fulfil an order), email delivery, and hosting. We do not sell personal data.

Retention

We keep order and invoice data for as long as required by tax law, and account data until you close your account.

Your rights

You may access, correct, export, or erase your data, and object to or restrict processing. Contact [email protected] to exercise these rights. You may also lodge a complaint with the Estonian Data Protection Inspectorate (Andmekaitse Inspektsioon, aki.ee) or your local EU supervisory authority.

Cookies

See our Cookie Policy for the cookies we use and how to control them.