Privacy & Data Protection

Your privacy matters to us. Learn about how we collect, use, and protect your personal data.

Privacy Policy

1. Introduction

Welcome to Santa Secret! We are committed to protecting your privacy and ensuring the security of your personal data. This privacy policy explains how we collect, use, and protect your information when you use our gift exchange platform.

2. Data We Collect

Account Information: Name, email address, password (encrypted)

Profile Data: Avatar, preferences, language settings

Gift Exchange Data: Wishlists, gift assignments, pool memberships

Communication Data: Anonymous messages within gift assignments

Usage Data: Platform usage analytics (anonymized)

3. How We Use Your Data

Service Delivery: To provide gift exchange functionality and matching

Communication: To send important updates about your gift exchanges

Improvement: To analyze usage and improve our platform (anonymized data only)

Security: To protect against fraud and ensure platform security

4. Legal Basis for Processing

Contract Performance: Essential functionality and account management

Legitimate Interest: Platform improvement and security measures

5. Data Sharing

We do not sell your personal data. We only share data within gift exchanges as necessary for the service (e.g., your wishlist with your Secret Santa). We may share anonymized analytics with third-party services to improve our platform.

6. Data Retention

Account Data: Retained until account deletion (up to 7 years for legal compliance)

Messages: Deleted after 3 years

Wishlists: Deleted after 3 years of inactivity

Analytics: Anonymized data retained for 2 years

7. Your Rights

Right of Access: Request a copy of your personal data

Right to Rectification: Correct inaccurate or incomplete data

Right to Erasure: Request deletion of your personal data

Right to Data Portability: Export your data in a machine-readable format

8. Security Measures

We implement industry-standard security measures including encryption, access controls, and regular security audits. All data is encrypted in transit and at rest. We regularly review and update our security practices.

9. Contact Information

For privacy-related questions or to exercise your rights:

Email: privacy@santasecret.com

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any material changes via email and update the "Last Updated" date. Your continued use of the platform constitutes acceptance of the updated policy.

For questions about privacy and data protection, contact us at: privacy@santasecret.com

Last updated: December 2024