Privacy Policy

27 Gifts LLC ("we," "us," or "our") operates 27gifts.com and related services (collectively, the "Services"). Our principal place of business is 8336 S Clara Roberts Way, Tucson, AZ 85747.

Contact us: info@27gifts.com or 8336 S Clara Roberts Way, Tucson, AZ 85747.

This policy applies to personal information we collect about U.S. residents who use our Services, visit our website, communicate with us, or interact with our analytics tools.

We are based in Arizona and currently operate our Services for U.S. customers. We may voluntarily apply certain privacy practices more broadly than required under Arizona law, but this policy is primarily designed to describe our handling of personal information in the context of U.S. operations.

We collect the following categories of personal information when you provide it to us, when it is collected automatically through your use of the Services, or when it is provided by service providers acting on our behalf:

• Identifiers and contact information: name, email address, phone number, shipping/billing address, account identifiers, IP address, and other similar identifiers.
• Account and transaction information: account details, order history, purchase details, gift selections, saved preferences, and other commercial information related to your use of the Services.
• Personalization and user-submitted content: card messages, recipient details, uploaded logos, profile photos, images, branding materials, and other content you choose to provide in connection with gifts, accounts, or personalization features.
• Internet or device activity: pages viewed, clicks, navigation paths, referring and exit URLs, timestamps, browser type, device type, operating system, language, approximate location derived from IP address, and similar usage or diagnostic information.
• Browser storage and session data: information stored in cookies, localStorage, sessionStorage, and similar browser technologies that support sign-in, account continuity, security, and site functionality.
• Communications and support information: information you provide when you contact us, respond to surveys, or otherwise communicate with us.
• Sensitive information: We do not intentionally collect sensitive personal information such as precise geolocation, government-issued identifiers, health information, or information about racial or ethnic origin, religious beliefs, union membership, or sexual orientation.

We do not engage in automated decision-making that produces legal or similarly significant effects.

Certain features of the Services allow you to submit content and personalization details, such as logos, profile photos, images, card messages, recipient details, gift preferences, branding materials, and other information you choose to provide.

We use this information to generate previews, personalize products or communications, maintain account-related features, fulfill orders, and provide related support. Depending on the feature, this content may be stored by us or by service providers acting on our behalf.

• Directly from you: account registration, purchases, personalization inputs, uploaded content, support requests, surveys, and other communications.
• Automatically from your device or browser: cookies, browser storage, session technologies, security tools, and analytics tools.
• From service providers acting on our behalf: commerce, payment, hosting, storage, analytics, fraud prevention, and customer account providers.

• Provide, operate, secure, and improve the Services.
• Process transactions, fulfill orders, and manage customer accounts.
• Enable personalization features, including saved preferences, uploaded content, card messages, and gift customization.
• Communicate with you about your account, orders, support requests, features, and updates.
• Detect, prevent, and investigate fraud, abuse, security incidents, and prohibited activities.
• Debug, measure, and analyze site usage and performance.
• Provide optional AI-assisted features, such as message refinement, at your request.
• Comply with law, enforce terms, and defend legal claims.

We do not use your personal information for purposes that are materially different, unrelated, or incompatible with those described here without notifying you and obtaining consent where required by applicable law.

• Data minimization by design: collect the least data needed.
• No dark patterns: we design choices to be clear and balanced.
• Safety and dignity first: we avoid uses that could create unreasonable risks of harm.
• High-risk data use: where feasible, any novel or high-risk use of personal information is assessed before implementation. Human review may be conducted depending on the nature of the data and risk.
• Vendors: we share personal information with trusted service providers (such as hosting, analytics, or payment providers) only so they can perform services for us.

We do not sell or share personal information for cross-context behavioral advertising. We may disclose personal information to:

• Service providers and processors that help us operate the Services, such as commerce, hosting, storage, security, analytics, customer account, fraud prevention, and support providers.
• Professional advisors, auditors, insurers, and similar service providers where reasonably necessary to operate our business or comply with legal obligations.
• Law enforcement, regulators, courts, or other parties where required by law or where necessary to protect rights, safety, or investigate fraud, abuse, or security incidents.
• A successor entity or counterparties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable confidentiality and legal requirements.

We use third-party service providers to help operate the Services. These providers may process personal information on our behalf in connection with the services they provide to us.

• Commerce and customer account providers, including Shopify, to support product data, checkout-related functionality, and customer account services.
• Hosting, security, storage, and infrastructure providers, including Cloudflare-related services, to host content, secure the Services, and store uploaded materials and operational data.
• Analytics providers, including Microsoft Clarity, to help us understand and improve site usage and performance.
• AI service providers, including OpenAI, to support optionalAI-assisted features such as message refinement.
• Fraud prevention, rate limiting, and similar operational service providers that help us protect the Services from abuse and security threats.

We use Microsoft Clarity to better understand how visitors interact with our website through behavioral metrics, heatmaps, and session replay. This helps us identify usability issues, improve site performance, and better understand how our Services are used.

Clarity may collect information such as page views, clicks, scrolling, device and browser information, approximate location derived from IP address, and similar usage data through cookies and related technologies. We use Clarity for analytics, debugging, and site improvement purposes, not for targeted advertising.

For more information about how Microsoft collects and uses data, visit the Microsoft Privacy Statement.

We may offer optional AI-assisted features, such as tools to help refine card messages or generate suggested wording. When you use these features, the content you submit may be processed by an AI service provider on our behalf.

We use this information only to provide the requested feature, improve the quality of the Services, protect against misuse, and maintain the security and reliability of our systems.

We use cookies, localStorage, sessionStorage, and similar technologies to support core site functionality, security, customer account access, session continuity, personalization features, and analytics.

Most browsers allow you to control cookies through their settings, including blocking or deleting cookies. Please note that disabling certain technologies may affect the functionality of the Services.

Users may opt out of marketing emails via the unsubscribe link in any message. We honor unsubscribe requests promptly in accordance with applicable law.

Depending on your location and applicable law, you may have rights to:

• Access or know the categories and specific pieces of personal information collected about you.
• Correct inaccurate personal information.
• Delete personal information.
• Request a copy of certain personal information.
• Appeal a decision if a request is denied, where required by law.

We do not discriminate against users for exercising applicable rights.

• Submit requests via email (info@27gifts.com).
• We may require sufficient information to verify your identity or the authority of an authorized agent before fulfilling a request.
• We strive to respond within 45 days, or as required by applicable law, and may extend the timeframe where permitted.
• Appeals: if a request is denied, users may appeal by emailing info@27gifts.com.

Our Services are intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13. If a child under 13 provides personal information, or you believe that we have collected information from a child, please contact us, and we will take prompt steps to delete it. Parents or guardians may request deletion of a child’s information at any time.

We employ administrative, technical, and physical safeguards appropriate to the nature of the information we process. No method of transmission or storage is 100% secure; if we become aware of a breach affecting your personal information, we will notify you and regulators as required by law.

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, fulfill orders, support personalization features, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of information, the nature of the service provided, and applicable legal requirements.

If we transfer personal information outside the U.S. (e.g., to service providers), we do so under appropriate safeguards and contracts.

Our Services may link to third‑party sites or services we don’t control. Their privacy practices are governed by their own policies.

We will post any changes on this page with an updated "Last updated" date. If changes materially affect your rights, we will provide additional notice (e.g., email or prominent notice) and obtain consent where required.

We provide California residents with the rights and disclosures required by the California Consumer Privacy Act, as applicable to our business. This includes notice of the categories of personal information we collect, the purposes for which we use it, and the rights available under California law. We do not sell or share personal information as those terms are defined under California law.

Residents of certain states with comprehensive privacy laws may have rights, depending on applicable law, to access, correct, delete, and obtain a copy of their personal information. Some state laws also provide opt-out rights for processing activities such as targeted advertising, sale, or certain profiling, but we do not currently engage in those activities.

We will update this section as additional state requirements take effect.

Commercial emails identify the sender, include our postal address, avoid deceptive subject lines/headers, and provide a working unsubscribe mechanism honored within required timelines.

Email: info@27gifts.com.