Privacy Policy

27 Gifts LLC ("we," "us," or "our") operates 27gifts.com and related services (collectively, the "Services"). Our principal place of business is 8336 S Clara Roberts Way, Tucson, Arizona 85747.

Contact us: info@27gifts.com or 8336 S Clara Roberts Way, Tucson, Arizona 85747.

This policy applies to personal information we collect about U.S. residents who use our Services, visit our website, communicate with us, or interact with our analytics and advertising tools.

We are based in Arizona and currently operate our Services for U.S. customers. We may voluntarily apply certain privacy practices more broadly than required under Arizona law, but this policy is primarily designed to describe our handling of personal information in the context of U.S. operations.

We collect the following categories of personal information when you provide it to us, when it is collected automatically through your use of the Services, or when it is provided by service providers acting on our behalf:

• Identifiers and contact information: name, email address, phone number, shipping/billing address, account identifiers, IP address, and other similar identifiers.
• Account and transaction information: account details, order history, purchase details, gift selections, saved preferences, and other commercial information related to your use of the Services.
• Personalization and user-submitted content: card messages, recipient details, uploaded logos, profile photos, images, branding materials, and other content you choose to provide in connection with gifts, accounts, or personalization features.
• Internet or device activity: pages viewed, clicks, navigation paths, referring and exit URLs, timestamps, browser type, device type, operating system, language, approximate location derived from IP address, and similar usage or diagnostic information.
• Advertising, attribution, and matching information: interactions with our website and products, such as page views, products viewed, items added to a cart, checkout and purchase activity, referring URLs, advertising campaign parameters, IP address, browser and device information, advertising and cookie identifiers, and normalized and cryptographically hashed versions of customer information such as name, email address, phone number, customer identifier, city, state, postal code, and country when available. Hashing changes how this information is represented but does not make it anonymous.
• Browser storage and session data: information stored in cookies, localStorage, sessionStorage, and similar browser technologies that support sign-in, account continuity, security, and site functionality.
• Communications and support information: information you provide when you contact us, respond to surveys, or otherwise communicate with us.
• Sensitive information: We do not intentionally collect sensitive personal information such as precise geolocation, government-issued identifiers, health information, or information about racial or ethnic origin, religious beliefs, union membership, or sexual orientation.

We do not engage in automated decision-making that produces legal or similarly significant effects.

Certain features of the Services allow you to submit content and personalization details, such as logos, profile photos, images, card messages, recipient details, gift preferences, branding materials, and other information you choose to provide.

We use this information to generate previews, personalize products or communications, maintain account-related features, fulfill orders, and provide related support. Depending on the feature, this content may be stored by us or by service providers acting on our behalf.

• Directly from you: account registration, purchases, personalization inputs, uploaded content, support requests, surveys, and other communications.
• Automatically from your device or browser: cookies, browser storage, session technologies, security tools, and analytics and advertising tools.
• From service providers acting on our behalf: commerce, payment, hosting, storage, analytics, fraud prevention, and customer account providers.

• Provide, operate, secure, and improve the Services.
• Process transactions, fulfill orders, and manage customer accounts.
• Enable personalization features, including saved preferences, uploaded content, card messages, and gift customization.
• Communicate with you about your account, orders, support requests, features, and updates.
• Detect, prevent, and investigate fraud, abuse, security incidents, and prohibited activities.
• Debug, measure, and analyze site usage and performance.
• Measure advertising effectiveness, attribute visits and purchases to advertising campaigns, improve ad delivery, and support personalized or targeted advertising.
• Provide optional AI-assisted features, such as message refinement, at your request.
• Comply with law, enforce terms, and defend legal claims.

We do not use your personal information for purposes that are materially different, unrelated, or incompatible with those described here without notifying you and obtaining consent where required by applicable law.

• Data minimization by design: we aim to limit collection, use, and disclosure to information reasonably connected to the purposes described in this policy.
• No dark patterns: we design choices to be clear and balanced.
• Safety and dignity first: we avoid uses that could create unreasonable risks of harm.
• High-risk data use: where feasible, any novel or high-risk use of personal information is assessed before implementation. Human review may be conducted depending on the nature of the data and risk.
• Vendors: we disclose personal information to service providers and other business partners (such as hosting, analytics, advertising, or payment providers) for the purposes described in this policy and subject to applicable contractual and legal requirements.

We do not sell personal information for monetary payment. We may disclose personal information to advertising and measurement providers to measure advertising, attribute conversions, improve ad delivery, and support personalized or targeted advertising. Some state privacy laws may define these disclosures as a "sale," "sharing," or processing for targeted advertising even when no money is exchanged. We may disclose personal information to:

• Service providers and processors that help us operate the Services, such as commerce, hosting, storage, security, analytics, customer account, fraud prevention, and support providers.
• Advertising and measurement providers, including Meta, that help us measure campaigns, match activity to users or devices, attribute conversions, and optimize or personalize advertising.
• Professional advisors, auditors, insurers, and similar service providers where reasonably necessary to operate our business or comply with legal obligations.
• Law enforcement, regulators, courts, or other parties where required by law or where necessary to protect rights, safety, or investigate fraud, abuse, or security incidents.
• A successor entity or counterparties involved in a merger, acquisition, financing, reorganization, bankruptcy, or sale of all or part of our business, subject to applicable confidentiality and legal requirements.

We use third-party service providers to help operate the Services. These providers may process personal information on our behalf in connection with the services they provide to us.

• Commerce and customer account providers, including Shopify, to support product data, checkout-related functionality, and customer account services.
• Hosting, security, storage, and infrastructure providers, including Cloudflare-related services, to host content, secure the Services, and store uploaded materials and operational data.
• Analytics providers, including Google Analytics and Microsoft Clarity, to help us understand and improve site usage and performance.
• Advertising and measurement providers, including Meta, to measure advertising performance, attribute conversions, match activity to users or devices, and improve ad delivery.
• AI service providers, including OpenAI, to support optionalAI-assisted features such as message refinement.
• Fraud prevention, rate limiting, and similar operational service providers that help us protect the Services from abuse and security threats.

We use Google Analytics to understand how visitors find and interact with our website, evaluate site performance, measure engagement and purchases, and improve our Services. Google Analytics may collect information such as pages visited, interactions with site features, referring websites, browser and device information, approximate location derived from IP address, and identifiers stored through cookies or similar technologies. Google processes this information on our behalf to provide analytics and measurement services. We do not send Google Analytics information that directly identifies you, such as your name, email address, mailing address, or payment information. For more information, see How Google uses information from sites or apps that use our services.

We use Meta Pixel and Meta's Conversions API to measure interactions with our website, understand the effectiveness of advertisements, attribute conversions, improve ad delivery, and support personalized or targeted advertising on Meta services such as Facebook and Instagram.

We may send Meta events such as page views, product views, additions to cart, checkout activity, payment activity, and purchases. Information associated with these events may include product identifiers, transaction value, currency, timestamps, page or source URLs, IP address, browser information, Meta cookie identifiers, advertising click identifiers, and normalized and hashed customer information such as name, email address, phone number, customer identifier, city, state, postal code, and country when available.

Browser events may be sent through Meta Pixel, and corresponding server events may be sent through the Conversions API. Meta may use the event and matching information in accordance with its terms and privacy policy, including to associate activity with users or devices, provide measurement services, and deliver or improve advertising. Hashing identifiers before transmission does not make them anonymous.

We do not intentionally send Meta gift-recipient details, card messages, engraving text, uploaded images, payment-card information, or other gift personalization content. For more information about Meta's practices, see the Meta Privacy Policy.

We use Microsoft Clarity to better understand how visitors interact with our website through behavioral metrics, heatmaps, and session replay. This helps us identify usability issues, improve site performance, and better understand how our Services are used.

Clarity may collect information such as page views, clicks, scrolling, device and browser information, approximate location derived from IP address, and similar usage data through cookies and related technologies. We use Clarity for analytics, debugging, and site improvement purposes, not for targeted advertising.

For more information about how Microsoft collects and uses data, visit the Microsoft Privacy Statement.

We may offer optional AI-assisted features, such as tools to help refine card messages or generate suggested wording. When you use these features, the content you submit may be processed by an AI service provider on our behalf.

We use this information only to provide the requested feature, improve the quality of the Services, protect against misuse, and maintain the security and reliability of our systems.

We use cookies, localStorage, sessionStorage, and similar technologies to support core site functionality, security, customer account access, session continuity, personalization features, analytics, advertising measurement, attribution, and ad delivery. These technologies may include Meta identifiers such as _fbp and _fbc and advertising click parameters such as fbclid. We may also transmit information through server-side tools such as the Meta Conversions API, which is not controlled solely by browser cookie settings.

Most browsers allow you to control cookies through their settings, including blocking or deleting cookies. Please note that disabling certain technologies may affect the functionality of the Services.

Some browsers and extensions transmit signals such as Do Not Track or Global Privacy Control. Our website does not currently respond automatically to these signals. Where applicable law gives you a right to opt out of sale, sharing, or targeted advertising, you may submit a request using the contact method described below.

Users may opt out of marketing emails via the unsubscribe link in any message. We honor unsubscribe requests promptly in accordance with applicable law.

Depending on your location and applicable law, you may have rights to:

• Access or know the categories and specific pieces of personal information collected about you.
• Correct inaccurate personal information.
• Delete personal information.
• Request a copy of certain personal information.
• Appeal a decision if a request is denied, where required by law.
• Opt out of the sale or sharing of personal information or its use for targeted advertising, where applicable law provides those rights.

We do not discriminate against users for exercising applicable rights.

• Submit requests via email (info@27gifts.com).
• We may require sufficient information to verify your identity or the authority of an authorized agent before fulfilling a request.
• We strive to respond within 45 days, or as required by applicable law, and may extend the timeframe where permitted.
• Appeals: if a request is denied, users may appeal by emailing info@27gifts.com.

Our Services are intended for users 13 years of age or older. We do not knowingly collect personal information from children under 13. If a child under 13 provides personal information, or you believe that we have collected information from a child, please contact us, and we will take prompt steps to delete it. Parents or guardians may request deletion of a child's information at any time.

We employ administrative, technical, and physical safeguards appropriate to the nature of the information we process. No method of transmission or storage is 100% secure; if we become aware of a breach affecting your personal information, we will notify you and regulators as required by law.

We retain personal information for as long as reasonably necessary to provide the Services, maintain accounts, fulfill orders, support personalization features, measure and improve our Services and advertising, comply with legal obligations, resolve disputes, and enforce our agreements. Retention periods may vary depending on the type of information, the nature of the service provided, and applicable legal requirements.

Third parties such as analytics and advertising providers retain information according to their own terms, settings, and retention practices.

If we transfer personal information outside the U.S. (e.g., to service providers), we do so under appropriate safeguards and contracts.

Our Services may link to third-party sites or services we don't control. Their privacy practices are governed by their own policies.

We will post any changes on this page with an updated "Last updated" date. If changes materially affect your rights, we will provide additional notice (e.g., email or prominent notice) and obtain consent where required.

We provide California residents with the rights and disclosures required by the California Consumer Privacy Act, as applicable to our business. This includes notice of the categories of personal information we collect, the purposes for which we use it, and the rights available under California law. We do not sell personal information for monetary payment. Our disclosures to advertising providers may be considered "sharing" for cross-context behavioral advertising under California law when that law applies.

Residents of certain states with comprehensive privacy laws may have rights, depending on applicable law, to access, correct, delete, and obtain a copy of their personal information and to opt out of processing for targeted advertising, sale, sharing, or certain profiling.

We will update this section as additional state requirements take effect.

Commercial emails identify the sender, include our postal address, avoid deceptive subject lines/headers, and provide a working unsubscribe mechanism honored within required timelines.

Email: info@27gifts.com.