Privacy Policy

1. Introduction

GiftsToVN ABN 47 687 649 731 ("we", "us", "our") respects your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website giftstovn.store, purchase gifts from our curated Vietnamese makers, or contact our customer care team.

2. Information We Collect

Order & Delivery Information: Name, email address, phone number, delivery address, and any engraving text or photo notes you provide when placing an order.

Account Information: Email address and password when you create an account. Authentication is handled by Firebase Authentication — we never see or store your password directly.

Usage Data: Browser type, public pages visited, product-list exposure, product selections, shopping bag and checkout actions, selected category/recipient/occasion/delivery filters, delivery coverage check outcomes and coarse destination city or province, affected gift counts, search result counts, personalisation/upload progress, controlled error types, AI concierge usage and campaign source. Google Analytics (GA4) and Microsoft Clarity load only after you click "Accept" on our cookie banner. Clarity provides session replays and heatmaps to help us improve shopping. If you sign in, we use your Firebase account ID as GA4's User-ID and Clarity's custom identifier to connect your visits; these identifiers are cleared or rotated on logout. We do not send your name or email as that identifier. Search text, gift messages, photo contents, AI prompts, full street addresses, address Place IDs, checkout references and raw error messages are excluded from custom analytics events. Personalisation, shopping bag, account and checkout content is masked in Clarity. Declining means these analytics scripts are not loaded.

3. How We Use Your Information

Process and fulfil your orders — including personalisation, shipping, and delivery tracking
Send order confirmations, shipping updates, and delivery notifications by email
Provide customer support and handle returns, replacements, and guarantee claims
Improve our website, product selection, and services
Send occasional offers and gift guides (only with your consent; unsubscribe anytime)
Send newsletter double opt-in confirmations and manage subscriptions
Detect and prevent fraud or unauthorised access

4. Payment Processing

We use Stripe for card payments. Your payment card details are transmitted directly to Stripe and are never stored on our servers. We do not offer cash on delivery. Stripe's privacy policy applies: stripe.com/privacy.

5. AI Gift Recommendations

Our optional AI Gift Concierge uses Google's Gemini API to suggest gifts. When you use this feature, the recipient type, occasion, budget, and any preferences you enter are sent to Google's Gemini API solely to generate a recommendation. We do not send your account details or order history. Avoid entering sensitive personal information in this tool. Recommendations are suggestions only, not automated decisions that produce legal or similarly significant effects; no such automated decision-making is used for orders, payments, or eligibility.

6. Data Storage & Security

Order and account data is stored securely in Google Cloud Firestore with encryption at rest. We implement industry-standard security measures including HTTPS encryption, Firebase Authentication, and strict database access rules.

7. Third-Party Services

Stripe — Payment processing
Firebase / Google Cloud — Authentication, database, and hosting
Google Gemini API — Optional AI gift recommendations
Resend — Order confirmation and transactional emails
Google Analytics (GA4) — Website usage analytics, loaded only after cookie consent
Microsoft Clarity — Consent-based session replays, heatmaps and shopping-event analysis. See Microsoft's privacy statement.
Telegram — After analytics consent, visit and add-to-bag alerts may send public page and entry links, selected category, referring domain, campaign source, request IP address, browser/device type, language, timezone, catalog items, quantities/value, guest/signed-in status and time to our private business chat. For signed-in customers, alerts may include the verified Firebase account ID. Consented visit context may be retained with an order and included in its paid-order alert. Paid-order operational alerts also include the order reference, catalog items/quantities, AUD total, delivery option/fee and account status/ID independently of analytics consent. Alerts exclude customer names, email addresses, delivery addresses, personalisation text, photos and raw URL query strings.
Google AdSense — Advertising network. If you accept advertising cookies, third-party vendors, including Google, use cookies to serve and measure ads based on your visits to this site and other sites. We aim for non-personalised advertising by default.
Delivery validation alerts — If a gift cannot be delivered to the selected destination, we log the blocked checkout and may send an operational alert to our private Telegram chat independently of analytics consent. These records include a checkout reference, catalog product details, allowed delivery areas, the recipient’s city or province, and the validation outcome. They exclude customer contact details and the full street address.

8. Cookies & Advertising

We use essential cookies for site functionality (such as keeping your shopping bag and remembering your cookie choice). Analytics cookies are not used unless you click "Accept" on the cookie banner.

Advertising cookies: If this site displays ads through Google AdSense, Google and its advertising partners may use cookies to build a profile of your interests and show you more relevant ads. These cookies may store information about your visits to this and other websites.

DoubleClick DART cookie: Google's advertising partner may use the DART cookie to serve ads based on your prior visits to this and other sites. You may opt out of the use of the DART cookie by visiting Google's Ad Settings.
You can opt out of personalised advertising from Google at google.com/settings/ads.
You can opt out of some third-party vendors' cookies at aboutads.info.

You can change your cookie choices at any time by clearing your browser storage and revisiting the banner, or by adjusting your browser settings to block or delete cookies. Marketing emails require explicit consent, a double opt-in confirmation, and an unsubscribe link in every message.

9. Your Rights (Australian Privacy Act 1988)

Under the Australian Privacy Principles (APPs), you have the right to:

Access the personal information we hold about you
Request correction of inaccurate information
Request deletion of your personal information
Opt out of marketing communications at any time
Lodge a complaint with the Office of the Australian Information Commissioner (OAIC)

We are preparing our privacy practices for the 10 December 2026 end of the small-business exemption under the Privacy Act 1988, including APP 1.7–1.9 disclosure of automated-decision processes. Our AI concierge provides recommendations only and makes no legal or similarly significant automated decisions. We will publish any updated policy and complaint-handling details before that date.

To exercise any of these rights, email us at support@giftstovn.store.

10. International Data Transfers

Our customers can order from anywhere in the world while our makers deliver within Vietnam. Your data may be processed in Australia, the United States (where Firebase/Google servers are located), or Vietnam (where our makers and couriers fulfil orders). We take reasonable steps to ensure appropriate safeguards are in place for these transfers.

11. Children's Privacy

Our services are not directed to individuals under 16, and we do not knowingly collect personal information from children. Engraving details about babies (such as names and birth dates) are provided by adult customers to fulfil orders.

12. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

13. Contact Us

For privacy-related inquiries:

Email: support@giftstovn.store
Response Time: Within 24 hours