Privacy Policy

1. Who we are

ValeGifts UK, operated by Valeria Estefania Martinez Trujillo (trading as ValeGifts UK), is responsible for the personal information described in this policy. You can contact us at enquiries@valegifts.co.uk. Our postal business and returns address is available in our Returns & Refunds Policy.

2. Information we collect

Depending on how you use the site, we may collect your name, email address, telephone number, delivery address, order details, product choices, personalisation instructions, gift messages, correspondence and information needed to resolve an order issue.

When you upload a photo or design for a personalised product, we collect that file only to create your item. The file is stored privately and is not made publicly available.

Payment card information is processed by the secure payment provider at checkout. ValeGifts does not store your full card number or security code.

If you choose to accept optional analytics cookies, Google Analytics may collect pseudonymous website-use information such as pages viewed, device type, approximate location and referral source. If you choose Accept all in the cookie notice, the Pinterest Tag may collect pseudonymous information about pages viewed and Pinterest referral or advertising interactions to measure Pinterest performance. ValeGifts does not enable Pinterest enhanced matching or send customer emails or email hashes to Pinterest through the tag.

3. Why we use your information

• To accept, prepare, deliver and support your order.
• To communicate about your order, delivery, returns or enquiries.
• To prevent fraud, protect our services and meet legal or accounting obligations.
• To send marketing only where you have separately agreed to receive it.
• To understand and improve the website through optional analytics, where you have chosen to accept it.

For orders, we use your information because it is necessary to take steps at your request and perform the sales contract. For fraud prevention and record-keeping, we rely on legitimate interests and/or legal obligations as appropriate. Marketing uses consent where required.

4. Who we share it with

We share only what is necessary with service providers that help us operate the business, such as secure payment providers, delivery companies, private cloud-storage and website-hosting providers, Google Analytics where you have accepted optional analytics, Pinterest where you have chosen Accept all, and professional advisers where needed. They must handle information securely and only for the relevant purpose.

ValeGifts does not sell personal information. We only use the Pinterest Tag for Pinterest advertising measurement where you have chosen Accept all in the cookie notice. We do not enable Pinterest enhanced matching or send customer emails, email hashes or checkout details to Pinterest through the tag.

5. How long we keep it

Uploaded photos and designs for personalised products are kept in private cloud storage for up to 30 days and are then automatically deleted. We do not make routine local copies of those uploads. We keep order and transaction information for as long as needed to provide support and meet tax, accounting and legal obligations. We keep customer-service correspondence for as long as needed to resolve the matter and maintain appropriate business records. We delete or anonymise information when it is no longer needed.

6. Your rights

You may ask to access, correct, erase, restrict or receive a copy of your personal information, or object to certain processing. You can withdraw marketing consent at any time. To make a request, email enquiries@valegifts.co.uk.

For Instagram messages and ValeGifts Automation, see our data deletion instructions. You do not need a shop account or a special form to make a request.

If you are unhappy with how we handle your data, please contact us first. You also have the right to complain to the UK Information Commissioner’s Office at ico.org.uk.

7. Security and changes

We take appropriate measures to protect personal information. No online service can be guaranteed completely secure, so please avoid sending sensitive information by ordinary email unless it is necessary. We may update this policy when our services or legal obligations change.

8. Instagram messages — ValeGifts Automation

ValeGifts Automation is our application for responding to messages that you initiate with @valegiftsuk. The first pilot is being tested in dry-run mode: it does not send live automated replies. The intended response uses a simple keyword rule: MUG selects a link to our Good Things Take Time Mug. It does not use artificial intelligence, OpenAI or any other AI provider.

Information and purpose

Instagram supplies the message content and the technical information needed to handle it, such as the sender's Instagram-scoped identifier, message identifier and time. Content may include a name or other details if you choose to send them. Cloudflare Workers processes the incoming event temporarily to recognise the keyword and, when live replies are enabled, address the relevant product-link response. We do not need your payment details, password, identity documents or sensitive personal information for this service. Please do not send them in a message.

We use this information to answer your enquiry. For a request about buying a product, the lawful basis is taking steps at your request before entering a contract. For other enquiries and protecting the messaging service from misuse, we rely on our legitimate interests in providing customer support and operating a secure service, balanced against your rights.

A message to us is not consent to unrelated promotional messages or a mailing list. The keyword rule selects a product link; it does not make a purchase, decide payment eligibility, or make a decision with legal or similarly significant effects on you. You can contact a person at enquiries@valegifts.co.uk instead. Using Instagram messaging is optional and is not required to browse or buy from our website.

Retention of messages and technical data

In this initial version, the automation handles message content and identifiers only for the duration of processing the event. It does not keep a separate conversation archive, or store message text, customer names or personal identifiers in Cloudflare KV or D1. Our application logging must not record message text, user identifiers or access tokens. This does not mean that Cloudflare produces no operational or security metadata when providing its service.

The original messages remain on Instagram under Meta's terms, policies and account controls. The 30-day period for uploaded product photos in section 5 does not apply to Instagram messages. For correspondence we manage in our business inbox or copy into a customer-support record, we retain only what is needed to answer the enquiry, deal with any outstanding order, complaint or dispute, or meet a legal obligation. When those reasons no longer apply, we delete information under our control that is no longer needed. Records retained for an order remain subject to section 5.

Persistent duplicate-prevention storage is not part of this initial version. If we introduce it, we will first specify the minimum technical data and its short retention period, implement expiry, and update this notice. We will not use it to archive message content.

Your choices

You can object to processing based on legitimate interests, including our use of your information for automated enquiry handling. Contact us using the email above; we will consider your objection and arrange human assistance. You can also request access, correction or deletion using our data deletion instructions. These rights apply even if the automation does not retain a separate copy of your messages.

9. Instagram providers and international processing

Cloudflare provides the technical processing for ValeGifts Automation on our behalf. Meta operates Instagram and delivers messages and responses through its platform; it also processes information for its own platform purposes under the Meta Privacy Policy. We do not send these messages to an AI provider.

Cloudflare and Meta operate internationally, so processing may take place outside the UK, including in the United States. Cloudflare's Data Processing Addendum describes its processing obligations and international-transfer mechanisms, including applicable adequacy arrangements and contractual safeguards with the UK Addendum where required. Meta describes its international processing and safeguards in its own privacy policy. Contact us at enquiries@valegifts.co.uk to ask about the safeguards applicable to our processing or how to obtain a copy.