Privacy policy

Reef Commerce & Technology Ltd
Trading as The Good Gift
Registered Address: 85 Great Portland Street, First Floor, London, W1W 7LT
Company Number: 16063260
Contact Email: hello@thegoodgift.co.uk

Last updated: 26th November 2025

1. Introduction

This Privacy Policy explains how we collect, use, store and protect your personal data when you use our website or purchase our products. We are committed to handling your data responsibly and in accordance with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

By using our website, you agree to the terms of this Privacy Policy.

2. Who We Are (Data Controller)

Reef Commerce & Technology Ltd is the data controller responsible for your personal information.

If you have any questions, you can contact us at: hello@thegoodgift.co.uk

3. Personal Data We Collect

We may collect and use the following categories of personal data:

3.1 Information you provide

  • Name
  • Email address
  • Billing address
  • Delivery address
  • Order details
  • Payment details (processed securely by our payment provider — we do not store card numbers)
  • Messages you send to us (e.g., customer service enquiries)
  • Personalisation details for customised items (e.g., names or messages for postcards)

3.2 Information collected automatically

When you browse our website, we may automatically collect:

  • IP address
  • Device type
  • Browser type
  • Pages viewed
  • Time spent on pages
  • Cookies and similar tracking technologies (see Section 11)

3.3 Information from third parties

We may receive information from:

  • Shopify and its integrated payment providers
  • Delivery partners (e.g., Royal Mail)
  • Analytics providers (e.g., Google Analytics)

4. How We Use Your Data

We use your personal data for the following purposes:

4.1 To process and deliver your orders

  • Managing payments
  • Delivering products
  • Processing returns and refunds
  • Sending service and dispatch notifications

4.2 Customer support

  • Responding to your enquiries
  • Resolving issues

4.3 Website operations & improvements

  • Monitoring website performance
  • Improving navigation, layout and features
  • Preventing fraud and ensuring site security

4.4 Marketing (only with your consent where required)

  • Newsletters
  • Special offers
  • Product updates
  • Abandoned basket reminders

You can unsubscribe from marketing at any time.

4.5 Legal, regulatory, and business obligations

  • Maintaining accurate financial records
  • Complying with tax and consumer law
  • Protecting our legal rights

5. Legal Bases for Processing

We rely on the following legal bases under UK GDPR:

  • Contract – processing your order and providing customer service.
  • Legitimate Interests – improving our website, preventing fraud, and sending relevant product updates to existing customers.
  • Consent – for marketing communications where required.
  • Legal Obligation – tax and accounting requirements.

6. How Long We Keep Your Data

We keep your personal data only for as long as necessary for the purposes outlined in this policy, including:

  • Order information: 6 years (legal/tax purposes)
  • Customer service messages: up to 2 years
  • Marketing data: until you unsubscribe
  • Cookies: retention varies by type (see Section 11)

We securely delete or anonymise data when it is no longer required.

7. Sharing Your Personal Data

We only share your data when necessary to provide our services. This includes:

  • Shopify (our ecommerce platform)
  • Payment providers integrated through Shopify
  • Delivery partners such as Royal Mail
  • Email and communication platforms (e.g., Shopify Email, Klaviyo if added later)
  • IT and hosting providers
  • Analytics services (e.g., Google Analytics)

All third parties must comply with UK GDPR and only process data following our instructions.

We do not sell your personal data to anyone.

8. International Transfers

Some partners (e.g., Shopify, analytics providers) may transfer personal data outside the UK.

Where this occurs, it is protected by:

  • UK adequacy regulations, or
  • Standard Contractual Clauses and equivalent safeguards ensuring your data remains protected.

9. Your Rights

Under UK GDPR, you have the right to:

  • Access your personal data
  • Correct inaccurate data
  • Delete your data (in certain cases)
  • Restrict or object to processing
  • Withdraw consent at any time (for marketing)
  • Data portability – to request a copy of your data

To exercise your rights, email: hello@thegoodgift.co.uk

You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk

10. Keeping Your Data Secure

We take security seriously and use appropriate technical and organisational measures, including:

  • Encryption
  • Secure hosting
  • Access controls
  • Regular monitoring and audits

No method of transmission is 100% secure, but we take steps to minimise risk.

11. Cookies & Tracking

We use cookies to:

  • Enable essential site functionality
  • Improve performance
  • Understand how visitors use the site
  • Deliver relevant marketing (with consent)

You can manage cookies through your browser settings or through our on-site cookie banner.

A detailed Cookie Policy can be added if you’d like one.

12. Children’s Privacy

Our website is not aimed at children under 16.

We do not knowingly collect children’s data.

13. Changes to This Policy

We may update this Privacy Policy occasionally.

Changes will be posted on this page with the updated date.

14. Contact Us

If you have any questions about how we use your data, please contact us at:
hello@thegoodgift.co.uk