Privacy

What we collect

• When you buy: your e-mail address, your name if you give it, what you ordered, and technical details of the request (IP address, approximate country, browser) used to prevent fraud.
• When you send a gift: the recipient’s e-mail address and name, your note, and the delivery date. We use these only to deliver the gift.
• Payment: card details are entered on our payment processor’s form and go straight to them. We receive the result, the card brand and its last four digits, never the full number.
• Businesses selling here: the business and contact details given in the application.

What we use it for

• Delivering your order and showing you its status.
• Preventing fraud and meeting our legal obligations.
• Answering you when you write to us.
• Sending news and offers, only if you ticked the box at checkout. You can stop these at any time.

Cookies and storage

The shop does not use advertising or tracking cookies. Your cart is kept in your own browser. A cookie is set only when you sign in (to view your orders, or to a business or staff account) and is removed when you sign out.

Who we share it with

Only those needed to run the service: the payment processor that takes your payment, the issuer of the card you bought (to issue and deliver it), our e-mail delivery provider, and our hosting providers. When you buy a card sold by a business on cardyay, that business sees the order, including the buyer’s and recipient’s e-mail addresses and any reference you entered. We do not sell personal data.

How long we keep it

Order records are kept for as long as accounting and anti-fraud rules require. Card links and codes are stored encrypted.

Your choices

You can ask for a copy of your data, a correction, or deletion where the law allows, by writing to help@cardyay.com.