Gift Momentum · giftmomentum.com
Privacy
Policy
Effective 10 October 2026. This policy describes how Gift Momentum handles information when you visit giftmomentum.com, create an account, place an order, or use a private gift link.
1. Who we are
Gift Momentum operates giftmomentum.com and provides personalised Momentum Magnet gifts, design review, production and delivery coordination. Questions about privacy can be sent through our contact page.
2. Information we collect
Depending on how you use the service, we may collect your name, email address, account credentials, order and quotation details, payment method and payment reference, delivery information, messages, design approvals, and communications with us.
For a personalised gift, you or the recipient may upload photographs and provide captions, dates or other personalisation. A recipient can use a private invitation link without creating an account or entering a delivery address.
We also receive technical information needed to operate the service, such as browser, device, security and request information. We do not ask for passwords, payment card numbers or authentication codes in messages or design fields.
3. How we use information
We use information to create and manage orders, prepare quotations, process or reconcile payments, produce and review designs, coordinate production and delivery, send service updates, provide support, protect the service, prevent abuse, maintain audit records, and meet legal or accounting obligations.
Uploaded photographs are used to prepare the requested design and product previews. Operator review is part of the service. Automatic AI image generation is not enabled in the current release.
4. Private gift links
A recipient invitation is a bearer link: anyone who obtains it may be able to view and update that gift. Keep it private and do not forward it. The giver or an authorised administrator can revoke or replace a link. A revoked or replaced link no longer authorises access, although a previously issued image URL may remain usable for a short period of up to five minutes.
5. Service providers
We use infrastructure and specialist providers to operate the service. These may include Supabase for authentication, database and private file storage; Stripe where card checkout is enabled; Resend for service email; and production or delivery partners needed to fulfil an order. Providers receive only the information needed for their service and may process it in other countries under their own terms and privacy policies.
6. Retention and deletion
Photographs and design files for an order are scheduled for deletion 90 days after the order is completed. Gift messages, recipient contact information and delivery details stored with the order are scheduled to be removed on the same 90-day completion schedule. The service keeps the order, payment, accounting and immutable security audit records needed to operate the business and resolve disputes. Pending or active orders are not subject to this completed-order schedule.
Backups, account contact information, service emails and records kept for legal or business purposes may have separate retention periods. The 90-day schedule does not mean that every copy, email, cache or legally required record disappears on the same day. Contact us if you need help with a deletion request.
7. Security
We use access controls, private storage, short-lived signed image URLs, server-side order checks, administrator MFA, rate limits and audit records. No online service can guarantee absolute security. Do not send passwords, one-time codes, payment credentials or private invitation links to us by email or chat.
Optional website analytics
We use Google Analytics to understand visits, traffic sources and popular public pages. Analytics loads by default on public pages unless you disable it using “Analytics preferences”. Account, order, private gift and operations pages are excluded. We remove query strings and fragments from reported page URLs, use fixed page titles, and report external referrers only at website origin level. We do not intentionally send customer contact details, order references or private links.
Analytics uses cookies to recognise browser visits. Your choice is saved in this browser for 180 days; you can change it using “Analytics preferences” on public pages. Disabling analytics does not affect ordering. Google may process analytics data in other countries. This site does not enable advertising personalisation or Google Signals.
8. Your choices
You may ask us to access, correct or delete information where applicable, subject to identity checks, order fulfilment needs, legal obligations and records we must retain. You may stop optional communications by contacting us. Service messages about an order may still be sent while the order is active.
9. Children and third-party content
The service is intended for adults arranging gifts. Do not upload a child’s photograph unless you have the right and permission to share it for this purpose. You are responsible for ensuring that photographs, messages and other material you submit may be used to fulfil the order.
10. Changes and contact
We may update this policy when the service or legal requirements change. The effective date above identifies the current version. For privacy questions or requests, use the contact page and include the order reference where relevant; do not include a password, access token or full private link.