Privacy

At a glance

• VORNIC AI LABS LTD is the controller of your personal data. Privacy questions go to info@airgifty.com.
• We collect what is needed to run your account, wallet and orders. Full card details never reach us.
• We do not sell your data and we do not use it to train AI models.
• You can complain to the ICO or to the supervisory authority in the EU country where you live or work.

This notice explains how AirGifty handles personal data. The gift card store at https://airgifty.com is run by VORNIC AI LABS LTD (Company No. 17347919), the data controller for the personal data described here. Our processing follows the UK GDPR, the Data Protection Act 2018 and, where applicable, the EU GDPR.

When you register and shop

Who is responsible

VORNIC AI LABS LTD controls the personal data covered by this notice. Any privacy question, request or complaint can be sent to info@airgifty.com.

What we collect

Depending on how you use AirGifty, we may process:

• account details: your name if you give one, your e-mail address, and your password stored as a hash;
• wallet and order data: top-up transactions, movements in your wallet balance, the orders you place, and the brands, regions and amounts of the cards you buy;
• payment information, limited to transaction metadata from the authorised third-party company that processes our payments: the transaction reference, the last four digits of the card, the card brand, the settlement amount, the SEPA reference for bank transfers, and any VAT identifier you supply. Full card details never reach our servers;
• delivery information: the e-mail address each code was sent to and the delivery timestamps;
• technical records of your visits: IP address, browser and device information, session identifiers and log timestamps;
• what you send to support and the records we make while handling it, including the reason for and outcome of any refund or code-replacement request.

Special-category data is not something we knowingly collect. AirGifty is not a service aimed at children.

Our lawful bases

• Contract: to run your account, hold your wallet balance, process orders, deliver codes, replace faulty codes and refund where the Refund Policy allows.
• Legal obligation: to keep tax and accounting records, meet anti-money-laundering and fraud-prevention duties, and answer lawful requests from authorities.
• Legitimate interests: to protect the marketplace from fraud and abuse, measure reliability, improve the product and defend legal claims.
• Consent: for optional cookies and marketing communications, which you can withdraw at any time.

Fraud, sanctions and AML screening

AirGifty runs a prepaid wallet funded by third-party payment methods, so we screen top-ups and orders automatically for signals of fraud, chargeback abuse, use of stolen cards, coordinated abuse and sanctions matches. The screening rests on our legitimate interest and, once a match occurs, on a legal obligation. If a top-up or an order is flagged, we may block that purchase, pause the account while we review it, or close the account.

While we hold your data

Who receives it

We share personal data only where it is necessary, and always under written data-processing terms that comply with UK/EU GDPR. Recipients are:

• the authorised third-party company that processes our payments, to take payments and detect payment fraud;
• our upstream gift card suppliers and code-fulfilment partners, limited to what they need to fulfil an order, usually just the order reference and, where relevant, the region and amount;
• the hosting, e-mail delivery, security, monitoring and analytics providers that keep the marketplace running;
• our auditors, insurers and professional advisers;
• courts, regulators and law enforcement, when the law requires or justifies disclosure;
• the parties to a corporate transaction and their advisers.

Your personal data is never sold, and it is not used to train AI models.

The brand that issued a code (Netflix, Amazon, Steam and so on) has no direct relationship with us concerning your redemption. Redeeming a card on a brand's platform is covered by that brand's own privacy policy.

Transfers outside the UK

Part of the processing by our providers takes place outside the UK. In those cases, where data protection law calls for it, the transfer is covered by one of these safeguards: adequacy decisions, the UK International Data Transfer Agreement, or Standard Contractual Clauses combined with technical measures such as encryption in transit and at rest.

How long we keep it

Keeping it safe

We use encryption in transit and at rest, isolated tenancy, least-privilege access, monitoring, staff training and reviews of our vendors. No online service is free of all risk, so please protect your login details and watch out for phishing attempts.

Cookies and browser storage

How we use cookies and related browser technologies is set out in a separate Cookie Policy.

Your rights at any time

Requests you can make

The UK GDPR and EU GDPR let you ask us to:

• tell you whether we hold data about you and send you a copy of it;
• correct inaccurate or incomplete information;
• erase information where a legal ground for erasure applies, bearing in mind that fraud, accounting and AML retention duties may rule out full deletion;
• limit some processing, or object to it;
• give you the data you provided in a portable format;
• withdraw consent, which does not affect processing already carried out on that basis.

Once we have verified a request, you get our answer within 30 days.

Raising a complaint

If our answer leaves you unsatisfied, you can complain to the UK Information Commissioner's Office (ICO) at ico.org.uk, or to the supervisory authority of the EU country where you live or work.

Under-18s

AirGifty is not aimed at anyone under 18 and is not meant to be used by children, and we do not knowingly collect personal data from children. If we find that a child has given us personal data through the marketplace, we delete it and close the account. If you think this has happened, write to info@airgifty.com so we can act.

Changes to this notice

This notice may change as the marketplace, our providers or the law change. If an update is material and the law requires notice, we tell you before it takes effect.

The company behind AirGifty

VORNIC AI LABS LTD, company number 17347919
Registered office: Dept 6940, 43 Owston Road, Carcroft, Doncaster, England, DN6 8DA
Telephone: +44 7458 197348
E-mail: info@airgifty.com