Privacy policy

1. Data controller

Min Gavepartner is a service from Min Gavepartner ApS, Danish company registration number (CVR) 46712994, Østerbæksvej 21, 2. th., 5230 Odense M, Denmark. The company is the data controller for the information we process about you and about your gift recipients.

Contact us at support@mingavepartner.com or by phone +45 25 71 71 98.

2. What information we process

About you as a customer: name, email, phone number, language, your plan choices and budgets, and your payment history. Your card details are stored with our payment provider Stripe, never with us.

When you tick the boxes and pay, we store alongside your acceptance: the time, the exact version of the text you said yes to, the IP address your connection came from, and which browser you used. The last two are there for one reason. An agreement made by ticking a box has no signature, and if anyone were one day to dispute who ticked it, that is what we have to hold it up against. We never use them for anything else, neither to measure you nor for marketing.

If you give your partner access to your shared gift plan, we also process information about your partner as a user: email address, language, login and the time of invitation and acceptance, as well as their own payment method if they add a surprise card. You share one account, but neither of you can see the gifts you add for each other: everything that concerns you is hidden from you, and the other way round. That also covers reminders, receipts and the data export each of you can download.

About your gift recipients: name, relation to you, age, interests, occasions and what you choose to tell us about them. This is information about people who have not signed up themselves, and we treat it with special care.

If the recipient is a child, we store the least we can: first name or nickname, age, relation and interests. We never ask for more about a child than about an adult, and the information is only used to choose the gift.

You may choose to add a photo of a recipient in your account. It is entirely optional, it is only used to show the person to you, and neither our gift pickers nor any third party uses it to choose the gift. The photo is stored in our database in the EU, never at a public address, and it is cleared along with the rest of the profile. You can remove it again with one tap.

Never write sensitive information about your recipients, for example about health, religion or sexuality. We do not ask for it, and it does not make the gifts better.

3. Why and on what basis

We process your own information to deliver the agreement you have made with us. We process information about your recipients based on our legitimate interest in delivering the service you have asked for: finding and delivering good gifts to them.

We do not contact your recipients to tell them that we hold information about them. It would reveal the gift and ruin the very thing you asked us for, and for most people an unexpected message from a company they do not know would feel more intrusive than the information itself. So we put the openness here on this page instead, where anyone can read it. The assessment behind this is written down, and you or a recipient can always ask to see it.

We use your mobile number in one place, and only there: if a payment for a gift does not go through, or if your bank wants you to approve it. Then we send you a text, and if we do not hear from you within 48 hours, we call you. The reason is time: from a payment failing until the gift can no longer be made, only a few days pass, and an email can sit unread that long. We never send marketing or reminders by text.

Marketing, for example newsletters, is only sent if you have separately said yes, and you can always withdraw your consent.

4. How long we store

A gift plan you do not complete is deleted automatically after 30 days. Your customer information is stored for as long as you are a member. Payment records are kept for 5 years after the end of the financial year, as required by the Danish Bookkeeping Act.

Your acceptance of the terms, the power of attorney and the payment mandate belongs to those records, and it is kept just as long, with the time, the text version, the IP address and the browser. It is the documentation of the agreement we have with you, and it must be possible to find for as long as that agreement can matter.

If you remove a recipient from the plan, we stop everything going forward straight away. 30 days later we remove the profile information about them: interests, personality, notes, year of birth and past gifts. The 30 days are there so you have time to change your mind. The name stays on the gifts that have already been delivered, because they belong to your receipts and your own history.

If your membership has ended, we remove the profile information about your recipients 12 months later. Until then you can come back to your gift plan exactly as you left it, without filling everything in again. The name stays on the gifts that have already been delivered, because they belong to your receipts.

If you remove your partner's access to your shared gift plan, we close and anonymise your partner's login immediately and detach any surprise card with Stripe. The people and gifts your partner has added stay on the account, and your partner's acceptances are kept as documentation. Gifts your partner has added for you become visible to you again.

5. Who we share with

We never sell your information, and we never use it for anything other than finding and delivering the gifts. We only share with those who are necessary to run the service, and they may only use the information on our instruction:

Stripe: payments. Your card details are held by them, never by us.

Supabase: database and login. Hosted in the EU (Frankfurt).

Vercel: running the website itself. The server runs in the EU (Frankfurt).

Better Stack: monitoring of our operations. If something breaks while you are using the site, our server or your browser sends them an error report, and they also check from the outside that the site is answering at all. The report is cleaned before it leaves us: no name, email, address, phone number, payment details, cookies, anything you have typed into a field, or your IP address travels with it. What does travel with it is the error message, where in the code it happened, which page you were on, and an internal customer number, so we can see whether the error hit one person or many. That number does not in itself say who you are.

Resend: the emails we send you, for example receipts and messages about upcoming gifts.

GatewayAPI: the few text messages we send you about a payment that did not go through. They receive your mobile number and the message itself, nothing else. The messages are sent through their European platform.

Anthropic: a technical tool, both when we build and in daily operations. We use AI as an aid when we develop and fix bugs, and as part of the gift choice itself, where the gift is chosen from what you have told us about the person. The information involved is pseudonymised: name, address, email, phone number, photo and payment details never travel with it, neither yours nor your recipient's. A human selects every gift and completes the purchase, and no purely automated decisions are ever made about you or your recipient.

Meta: only if you have said yes to marketing cookies, and only on our public pages. Meta never receives information about your recipients, and measurement is switched off while you are signed in to your account.

The web shop, when we buy the gift on your behalf: your name as the buyer and the delivery address you have chosen.

Several of them are US companies, and Better Stack is European but uses US subprocessors. Transfers of information to the US are made under the European Commission's standard contractual clauses or the EU-US Data Privacy Framework, and we have a data processing agreement with each of them.

6. Your and your recipients' rights

You can always get access to the information we hold about you, have it corrected, have it handed over, or ask us to delete it. The same applies to a recipient who contacts us about information about themselves.

You do not have to ask us for access: on My plan you can download all your information as a file straight away, including what we have stored about your recipients.

Write to support@mingavepartner.com and we will help. You can also complain to the Danish Data Protection Agency via datatilsynet.dk, where we are registered as Min Gavepartner ApS, CVR 46712994.

7. Cookies and measurement

We only set what is strictly necessary in your browser to make the site work, for example your language choice and your ongoing gift plan. Before we add measurement or marketing cookies, we ask for your consent.

If you say yes, we place Meta's pixel on our public pages so we can see which ads work. It is switched off on your own account and on our internal pages. You can always change your choice at the bottom of the page.