Privacy policy
Privacy Policy
Courtesy translation. In the event of any discrepancy, the Spanish version of this policy (available here) shall prevail.
This Privacy Policy governs the terms and conditions under which NIQUELAO S.L. (hereinafter, "OKGIFT") processes the data collected through the website https://okgift.es (hereinafter, the "Website"). It applies to the personal information collected in connection with the services provided by OKGIFT through the Website.
It is important that you read this Privacy Policy carefully, because every time you access and use our services you will be accepting the practices described in it. If you do not accept them, you should not access the Website or contract our services. If we update the Privacy Policy, we will give notice of relevant changes on the Website; the most up-to-date version will always be available at https://okgift.es/en/privacy-policy. You can check the "effective date" published at the end to see when it was last updated.
Data controller
The data controller is NIQUELAO S.L., with tax ID (CIF) B40616260 and registered office in Valencia, Camino Casas de Bárcena 79, Spain. You can contact the controller at the email address [email protected].
For what purposes do we process your information?
- Provision of the service: managing the purchase of the REGALOCARD gift card, its delivery to the recipient (by email, SMS or PDF), the confirmation of the chosen brand and the delivery of the final gift card, as well as the associated customer service.
- Invoicing and compliance with accounting and tax obligations.
- Fraud prevention and identity verification (KYC): in high-risk transactions we may verify the purchaser's identity through our biometric verification provider Veriff (identity document and proof of life) and verify via WhatsApp or SMS the mobile number provided during the process, in compliance with anti-money-laundering regulations and to protect the holder of the payment method.
- Commercial communications: only if you expressly authorise it on the corresponding form, sending information about services, promotions and offers by email, electronic messages or post. You can revoke this consent at any time as set out in the "Data Subject Rights" section.
What information do we collect?
The information indicated on the data collection forms of the Website, which may include, by way of example: name and surname, email address, mobile phone number, billing details (including the tax ID when an invoice is requested) and, in identity verification processes, the image of the identity document and the proof of life managed by our verification provider. For payments, the payment gateways communicate to us the result of the transaction and masked payment method data (never the full card number, which we do not store). We also collect IP addresses and technical device data associated with transactions, as a security and fraud prevention measure.
The form fields are mandatory: if you do not provide the requested data, OKGIFT will not be able to process the corresponding request. When completing the forms, the Customer guarantees the authenticity, accuracy and truthfulness of the information provided and undertakes to keep it up to date, being solely responsible for any false or inaccurate statements and for any damage they may cause to OKGIFT.
In addition to the information you provide, we may collect information about your use of the Website in accordance with our Cookie Policy.
Who do we disclose your information to?
We will not disclose Customers' personal data to third parties without their consent, except where permitted by law or requested by a competent authority. To provide the service, we use providers that process data on behalf of OKGIFT or as independent controllers, as the case may be:
- Issuers and suppliers of the brands' gift cards, for the purposes strictly necessary for their issuance.
- Payment gateways (Redsys/CaixaBank, Bizum, PayPal) for payment processing.
- Veriff (identity verification), only in the KYC processes described.
- Infrastructure, hosting and security providers (among others, Cloudflare and Amazon Web Services — EU region).
- Google Analytics, for Website usage statistics.
We take reasonable precautions to ensure that employees with access to Customer data have received appropriate training and process it exclusively in accordance with this Policy and data protection regulations.
International transfers
Some of the providers mentioned may process data outside the European Economic Area (for example, infrastructure or analytics providers headquartered in the USA). In such cases, transfers are covered by appropriate safeguards under the GDPR: adequacy decisions (including the EU-US Data Privacy Framework for adhered entities) or standard contractual clauses approved by the European Commission.
How long do we keep your data?
Personal data will be processed for the duration of the contractual relationship giving rise to the processing. Once it has ended, OKGIFT will block the data for the periods necessary to respond to requests from judicial or administrative authorities and to the liabilities arising from the services provided (including the applicable tax and commercial periods). In particular, gift cards issued by third parties and delivered after brand confirmation are kept for only SIX months from the exchange, as indicated in the general terms; identity verification data is kept for the time necessary to demonstrate compliance with anti-fraud and anti-money-laundering regulations.
Data Subject Rights
The Customer may at any time exercise their rights of access, rectification, erasure, restriction of processing, objection and data portability by writing to OKGIFT's postal address indicated in this Policy or to the email address [email protected]. Likewise, they have the right to lodge any complaints they deem necessary with the Spanish Data Protection Agency (AEPD), the competent supervisory authority.
What do we do to keep your information secure?
We have implemented reasonable technical and organisational measures to protect the information collected through the Website and to ensure that data is processed lawfully, fairly, transparently, adequately, relevantly, in a limited, accurate and up-to-date manner. However, please note that no website, Internet transmission, computer system or wireless connection is absolutely secure.
Links
Our Website may contain links to third-party websites beyond our control. We are not responsible for the security or privacy of any information collected on third-party websites or services. Exercise caution and review the privacy policies applicable to the third-party sites you use.