Trust Center

Gift on Cue is operated by Stride World LTD. Our privacy notice explains the information we use and your choices.

For services where we process recipient information on a business customer’s instructions, our Data Processing Agreement forms part of the business service terms. An ordinary business purchase does not automatically need a separate DPA.

Our main application, customer-data databases and private artwork storage use AWS in Ireland. Customer-data databases are encrypted at rest with KMS; private artwork uses server-side encryption and storage that blocks public access. Application and provider connections use HTTPS.

The databases have point-in-time recovery with a 35-day recovery window. Older private artwork versions normally expire after 30 days; current saved artwork follows its retention purpose. The privacy notice explains retention and recovery copies.

Payment, checkout and fulfilment partners have their own processing arrangements. Ireland hosting does not mean every provider processes all information there.

Message-writing assistance uses Amazon Bedrock in Ireland. Only include the information needed in notes you provide. Recipient details, private gift messages and artwork are not used to train AI models.

Suggestions are drafts for you to check. You approve gifts, messages, artwork and payment scope before we proceed.

We work with Amazon Web Services (AWS), Shopify, Stripe, Printful and Brandfetch, alongside gift suppliers and delivery partners. We share only the information needed to provide your chosen service.

Read more in our privacy notice. The DPA provider list covers relevant business services.

For privacy questions, security concerns or relevant security information, email privacy@giftoncue.com. For orders and returns, use our contact page.