Privacy policy

Effective Date: August 27, 2025

GIFQ (“GIFQ”, “we”, “our”, or “us”) respects your privacy and is committed to protecting personal data. This Privacy Policy explains how we collect, use, store, share, and protect information when you use our website, platform, APIs, and related services (collectively, the “Services”).

This policy applies to business customers, their authorized users, payout recipients, and website visitors.

1. Who We Are

GIFQ is a B2B payouts, rewards, and incentives platform that enables businesses to send payouts via a hosted claim page, allowing recipients to choose how they receive funds.

2. Information We Collect

2.1 Information You Provide Directly

Depending on your role, we may collect:

Business customers & authorized users

  • Full name
  • Business email address
  • Company name and role
  • Billing and invoicing details
  • Account credentials
  • Communications with support or sales

Payout recipients

  • Email address
  • Selected payout method
  • Country and currency
  • Required compliance data (where applicable)

Compliance & verification

  • Know-Your-Business (KYB) information
  • Identity or verification data required by law
  • Tax or regulatory information when applicable

2.2 Information Collected Automatically

When you visit our website or use our Services, we may collect:

  • IP address
  • Device and browser type
  • Operating system
  • Log files and usage data
  • Cookies and similar tracking technologies

3. How We Use Your Information

We process personal data only where there is a lawful basis and for legitimate business purposes, including to:

  • Provide, operate, and maintain the Services
  • Process payouts and claims
  • Verify businesses and prevent fraud
  • Comply with legal and regulatory obligations
  • Manage billing, invoices, and payments
  • Improve platform performance and security
  • Communicate with customers and recipients
  • Provide customer support
  • Enforce our Terms and Conditions

We do not sell personal data.

4. Legal Bases for Processing (GDPR)

Where applicable, we rely on the following legal bases:

  • Contractual necessity – to provide the Services
  • Legal obligation – compliance, AML/KYC, accounting
  • Legitimate interests – fraud prevention, platform security, service improvement
  • Consent – where required for cookies or marketing communications

5. Data Sharing & Third Parties

We may share personal data with trusted third parties strictly as necessary:

5.1 Service Providers

  • Cloud infrastructure and hosting
  • Analytics and monitoring tools
  • Customer support systems
  • Payment and payout providers

5.2 Compliance & Legal

  • Regulatory authorities
  • Auditors
  • Law enforcement when legally required

All third parties are contractually bound to protect data and process it only on our instructions.

6. International Data Transfers

Personal data may be processed outside your country of residence, including within the European Economic Area (EEA) and other jurisdictions.

Where required, we rely on:

  • Standard Contractual Clauses (SCCs)
  • Adequacy decisions
  • Other lawful safeguards

7. Data Retention

We retain personal data only for as long as necessary:

  • To provide the Services
  • To meet legal, accounting, and compliance requirements
  • To resolve disputes and enforce agreements

Retention periods vary depending on data type and regulatory obligations.

8. Security Measures

We implement appropriate technical and organizational measures, including:

  • Encryption in transit and at rest
  • Access controls and role-based permissions
  • Secure infrastructure and monitoring
  • Regular security reviews

No system is 100% secure, but we take reasonable steps to protect data against unauthorized access, loss, or misuse.

9. Your Rights

Depending on your jurisdiction, you may have the right to:

  • Access your personal data
  • Correct inaccurate or incomplete data
  • Request deletion (where legally permissible)
  • Restrict or object to processing
  • Data portability
  • Withdraw consent at any time
  • Lodge a complaint with a supervisory authority

Requests can be submitted using the contact details below.

10. Cookies & Tracking

We use cookies and similar technologies to:

  • Ensure website functionality
  • Analyze usage and performance
  • Improve user experience

You can control cookies through your browser settings. Disabling cookies may affect site functionality.

11. Children’s Privacy

GIFQ Services are not intended for individuals under 18. We do not knowingly collect personal data from minors.

12. Changes to This Policy

We may update this Privacy Policy periodically. Material changes will be posted on this page with an updated “Last updated” date.

Continued use of the Services after changes constitutes acceptance of the updated policy.

13. Contact Us

For privacy-related inquiries or data requests:

Email: privacy@gifq.com