Privacy policy

Who we are

Secret Santa is operated by [legal entity name], [trade licence number], [registered address], Dubai, United Arab Emirates. Contact: [privacy contact email].

What we collect, and why

• Your details (name, email, phone): to process your order, send your confirmation and tell you when the gift is delivered.
• The recipient's details (name, phone, delivery address, optional map link and delivery instructions): only to deliver the gift.
• Your personal message: to print the letter that goes in the box.
• Payment: card payments are handled by Stripe. We never see or store your card number. We keep a payment reference so we can match and refund payments.

Who we share it with

Only the providers needed to fulfil your order: Stripe (payments), Resend (transactional email), our hosting provider, and [courier / delivery partner name] for the delivery itself. We do not sell personal data or use it for advertising.

How long we keep it

Order and delivery records are kept for [retention period, e.g. 12 months] after delivery for customer service and accounting, then deleted or anonymised. Printed packing slips are destroyed after delivery.

The recipient's privacy

By placing an order you confirm you are entitled to share the recipient's contact and address details with us for the delivery. Recipient details are never shown on public or tracking pages. If the gift is anonymous, we do not tell the recipient who sent it.

Your rights

You can ask us for a copy of your data, to correct it, or to delete it, by emailing [privacy contact email]. [Confirm applicable rights under UAE Federal Decree-Law No. 45 of 2021 on the Protection of Personal Data.]

Cookies

This site uses no advertising or analytics cookies. Your in-progress order is kept in your browser's session storage and is removed when you finish or close the tab. [Update this section if analytics are added.]