Privacy Policy
Last updated: November 4, 2026
Last updated: November 4, 2026
GuessGift ("GuessGift", "we") runs guessgift.com and delivers gifts in Fredericton, New Brunswick. This policy explains what personal information we collect, why, who sees it, and your choices. We follow Canada's Personal Information Protection and Electronic Documents Act (PIPEDA).
Person responsible for privacy: Privacy Officer, GuessGift, hello@guessgift.com, Fredericton, New Brunswick, Canada.
1. Whose information we hold
- Buyers — people who order a gift.
- Recipients — people a gift is sent to. Their details come from the buyer, not from them.
- Visitors — people who browse the website.
2. What we collect and why
| Information | From | Why we need it |
|---|---|---|
| Buyer name, e-mail, phone | Buyer at checkout | Confirm the order, ask for payment, send updates, sort out problems |
| Billing record: amount, date, payment reference, sender name/e-mail shown on the e-Transfer | Your bank's e-Transfer notice | Match payment to the order; tax and accounting records |
| Recipient name, address, delivery notes | Buyer | Deliver the gift |
| Recipient phone (optional) | Buyer | Only to reach the recipient on the delivery day |
| Recipient phone or e-mail (no-address gifts only) | Buyer | E-mail the recipient a private link where they can enter a delivery address, or call them once to ask |
| Address given by the recipient (no-address gifts) | Recipient | Deliver the gift; never shown to the buyer |
| Card message, occasion, delivery date | Buyer | Make and deliver the gift as asked |
| Allergy notes, if you choose to give them | Buyer | Avoid unsuitable items |
| Proof of delivery: time, first name of the person who took the gift, or a photo of the gift where it was left | The person who delivers the gift | Show the gift was delivered; handle complaints |
| Messages you send us | You | Answer you |
| Technical data: IP address, browser, pages viewed, error logs | Your browser | Keep the site working and secure |
We do not collect more than we need. We do not buy lists of people, and we do not collect payment card numbers ourselves.
3. Consent
- By placing an order you agree that we use your and your recipient's information as described here.
- When you give us a recipient's details, you confirm you are entitled to share them for this purpose. We use them only to deliver that gift.
- You may withdraw consent at any time; if that means we can no longer complete an order, we will tell you what happens (see the Refunds and Cancellations Policy).
4. E-mails and messages
- Order messages (confirmation, payment request, delivery updates, problems) are sent because you placed an order.
- Marketing (news, offers) is sent only if you tick a separate box asking for it; the box is never ticked in advance. We keep a record of what you agreed to (the wording and its version, and the date). You can unsubscribe with one click in any marketing e-mail, and we stop within 10 business days; we keep a record that you unsubscribed so we do not write to you again.
- Recipients never receive marketing from us. We only contact them when it is needed for the delivery.
- Our e-mails contain no tracking pixels: we do not track whether or when you open them.
5. How long we keep it
| Information | Kept for |
|---|---|
| Order and payment records (including the buyer's details and the recipient's name and delivery address, which are part of the sale record) | Until 6 years after the end of the tax year of the order, as Canadian tax law requires; then deleted or anonymised. During that time they are used for nothing else. |
| Recipient phone | Erased 30 days after delivery (the time allowed for problems with an order) |
| No-address gifts: recipient contact details and the address they gave | Deleted 30 days after delivery or cancellation |
| Delivery photos | 90 days after delivery, unless needed for an open complaint |
| "Do not deliver anonymous gifts" requests (Anonymous Gift Policy §4) | Until the person asks us to remove them |
| Records of senders blocked under the Anonymous Gift Policy | 3 years |
| Server logs | 30 days |
| Details typed into an order form that was not completed | 30 days |
| Backups | A request to delete information applies to our working database. Archive copies are kept only as long as tax-record law requires (6 years), are never used for anything else, and are then deleted. |
6. Who we share it with
We do not sell or rent personal information. We share it only with:
- Service providers who help us run the business, under contracts or terms that require them to protect it: our web hosting provider (Hostinger), our e-mail provider (Hostinger), and later a card payment processor. They may only use it to provide their service to us.
- Partners and couriers who deliver your gift or part of it (for example a florist, a bakery or a trusted courier): only the recipient's name, delivery address, delivery window and phone (if given), and only for that delivery.
- Your bank and ours, as part of an Interac e-Transfer.
- Authorities, when the law requires it (see the Anonymous Gift Policy §7).
- A buyer or successor of the business, if the business is sold, under the same protections.
Shops we buy sealed products from do not receive buyer or recipient details.
Card messages, allergy notes and the occasion are seen only by the people who prepare your gift, and are never used for anything else.
7. Where your information is stored
Our website and its database are hosted on a server in the United States. Our e-mail provider and, when card payments are added, our payment processor may also process information outside Canada. We keep a copy of our sales records in Canada, as tax law requires. Information stored outside Canada may be accessed by the courts, law enforcement and national security authorities of that country.
8. How we protect it
Encrypted connections (HTTPS), access limited to those who need it to fulfil orders, strong passwords and two-step login for team accounts, regular backups, and photos kept in private storage, not on public web addresses. If a breach creates a real risk of significant harm, we will tell the people affected and report it to the Office of the Privacy Commissioner of Canada. We keep a record of every breach, however small.
9. Cookies
We use only the cookies needed for the site to work (your cart and session, security). We do not use advertising cookies. If we add analytics, we will update this policy first and tell you which tool and why.
10. Your rights
You may ask to see the personal information we hold about you, ask us to correct it, or withdraw consent. A recipient may ask what we hold about them, ask us to correct or delete it (we keep only what tax law requires, and use it for nothing else), refuse a gift, or ask us not to deliver any more gifts to them. Write to hello@guessgift.com; we answer within 30 days (if we need more time, we tell you, and take no more than 30 more). If you are not satisfied, you can complain to the Office of the Privacy Commissioner of Canada.
11. Children
The site is for adults. We do not knowingly collect information from children, except a child's name and address given by a parent or guardian as a gift recipient.
12. Changes
We will post any change here with a new "last updated" date. If a change affects how we use information we already hold, we will tell buyers by e-mail.