GiftIdeaPop Privacy Policy

Who operates GiftIdeaPop

GiftIdeaPop is the public brand name of a free gift idea website operating from Bulgaria. The brand name is not a statement that a company with that name has been registered.

• [LEGAL OPERATOR / DATA CONTROLLER IDENTITY — to be confirmed]
• [LAWFUL BUSINESS OR SERVICE ADDRESS, IF REQUIRED — to be confirmed; no residential address is supplied here]
• [BUSINESS REGISTRATION AND VAT DETAILS, IF APPLICABLE — to be confirmed]

Public contact: contact@giftideapop.com. No personal name, residential address, or private email is included in this draft. Using a brand and contact link does not replace any legally required operator disclosure.

Gift finder selections

Recipient, occasion, interests, and budget are compared with the gift list locally on the page. The finder saves these selections, shortlist visibility, and rotation position in this tab’s session storage so they survive reloads and navigation. They are not sent to a server or saved as an account profile. There are no accounts, database, paid APIs, or contact submission forms in the app.

Email contact

If you email contact@giftideapop.com, your email service sends your address, message, and any information or attachments you include to the recipient’s email service. Clicking the email link only opens your email app; nothing is automatically submitted by the website.

Contact information would be used to respond to questions, consider feedback, or handle privacy requests, not to create a gift-shopping profile. Please avoid sensitive data, identity documents, and information about other people.

[EMAIL PROVIDER, ACCESS CONTROLS, MESSAGE RETENTION, AND PROCESSOR TERMS — confirm once the public mailbox is configured]

Website hosting and service providers

Replit provides the current hosting setup. Delivering and securing the site may involve routine technical information, such as IP addresses, browser information, requests, and service logs. The gift selections are not included in requests made by this app.

[CONFIRMED HOSTING PROCESSORS, LOG RETENTION, PROCESSING LOCATIONS, AND DATA-PROCESSING AGREEMENTS — complete for the launch configuration]

No third-party contact form service is connected. No advertising, affiliate, or visitor-analytics scripts are currently active in the production app.

Purposes and legal grounds

Technical processing is intended to deliver and protect the website. Voluntary emails are intended to let us respond, and privacy requests may require processing to meet legal obligations. Depending on the confirmed processing, applicable GDPR grounds may include legitimate interests or legal obligations; any processing that requires consent must obtain it separately.

[FINAL PURPOSES, GDPR ARTICLE 6 GROUNDS, AND ANY LEGITIMATE-INTEREST ASSESSMENT FOR EACH PROCESSING ACTIVITY — to be confirmed]

Cookies and future advertising

The gift finder uses browser session storage only to remember your finder choices during the tab session; it does not use persistent local storage or tracking cookies. The visible advertisement containers are previews, not live ads, and do not make advertising requests.

Before live advertising, analytics, or other tracking is added, this policy and any required consent controls must be updated. Non-essential technologies must not be activated before any legally required consent is obtained.

[FINAL COOKIE INVENTORY, AD PROVIDERS, DATA USE, AND CONSENT/WITHDRAWAL MECHANISM — complete before enabling tracking]

Retention, security, and international transfers

Gift selections remain in this tab’s browser session. Closing the tab or browser normally ends that session, but browser session-restore features may restore it. Clearing site data also clears these choices. If session storage is blocked, the finder works without persistence and shows a notice. Emails and hosting logs have separate retention requirements. No specific deletion period, data-residency location, or security certification is claimed in this draft.

[RETENTION PERIODS OR CRITERIA FOR EMAILS AND LOGS, INCLUDING BACKUPS — to be confirmed]

[CONFIRMED SECURITY MEASURES, PROCESSING COUNTRIES, AND ANY REQUIRED NON-EEA TRANSFER SAFEGUARDS — review provider agreements before launch]

Your privacy rights

Where GDPR applies, you may have rights to access, correction, erasure, restriction, portability, and objection, subject to legal conditions. If consent is used, you may withdraw it without affecting prior lawful processing. The finder does not make decisions producing legal or similarly significant effects.

Send privacy questions to contact@giftideapop.com, without unnecessary personal information. You may complain to Bulgaria’s Commission for Personal Data Protection or another competent supervisory authority.

[VERIFIED RIGHTS-REQUEST HANDLING, IDENTITY-CHECK AND RESPONSE PROCEDURE — to be established]

All-ages audience and policy updates

People of all ages may use the gift finder without creating an account. Children should ask a parent or guardian to send contact emails and should not send personal details about themselves or others. We do not ask for dates of birth.

[CHILDREN’S DATA SAFEGUARDS AND ANY PARENTAL AUTHORIZATION REQUIRED BY APPLICABLE LAW — review, especially before live advertising]

[FINAL POLICY EFFECTIVE DATE AND CHANGE-NOTICE PROCEDURE — to be confirmed]

This document remains a draft until the missing disclosures and applicable Bulgarian/EU requirements are resolved.