Privacy policy

Last updated October 2025

Little Starts Gift Cards Ltd (“we”, “us”, “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, and safeguard your information when you visit our website www.littlestartsgiftcards.com, purchase or redeem a gift card, subscribe to our mailing list, or otherwise interact with us.
 

1. Who We Are

Little Starts Gift Cards Ltd is a company registered in England and Wales (Company No. 15960758), with its registered office at Oculis House, Eddystone Road, Southampton, SO40 3SA.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR).

You can contact us regarding this policy or any data privacy matter by email at [email protected]
 

2. Personal Data We Collect

We collect and process the following categories of personal information:

Category Examples Source
Contact Data Name, email address, postal address, phone number You (when purchasing or contacting us)
Transactional Data Payment details (processed securely by Stripe), purchase history, order values You / Stripe
Technical Data IP address, browser type, device information, time zone settings, operating
system
Automatically via cookies / analytics
Marketing Preferences Consent to receive emails or newsletters via Mailchimp You
Partner Redemption Data Card redemptions and partner locations (no children’s data) Our partners / systems

We do not collect personal data directly from children. All transactions are made by parents or guardians.
 

3. How We Use Your Personal Data

We use your data for the following purposes and lawful bases under GDPR:

Purpose Lawful Basis (Article 6 UK GDPR)
To process and deliver your gift card order Performance of a contract
To manage payments and prevent fraud Legitimate interests / legal obligation
To communicate with you about your order or account Performance of a contract
To send you marketing communications (where you have opted in) Consent
To improve our website and user experience (analytics, cookies) Consent / legitimate interests
To comply with legal obligations (e.g. accounting, tax) Legal obligation

You can withdraw your consent for marketing or cookies at any time.
 

4. How We Share Your Data

We only share your personal data where necessary to deliver our services:

  • Stripe (payment processor) – to process secure payments.
  • Mailchimp (email provider) – to send marketing communications you’ve opted into.
  • Google Analytics – to analyse website usage and performance.
  • Partner Activity Providers – limited data provided by you to aid with gift card redemption.
  • Professional advisors (e.g. accountants, legal) and government authorities where legally required.

All processors act on our instructions and comply with GDPR standards.
 

5. International Data Transfers

Our servers are EU-based. Some third-party providers (e.g. Google, Mailchimp) may transfer data outside the UK and EU. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO or adequacy decisions.
 

6. Data Retention

We keep personal data only as long as necessary for the purpose it was collected.

  • Transaction and financial records: 6 years (for accounting/legal reasons).
  • Marketing data: until you withdraw consent or unsubscribe.
  • Website analytics data: up to 26 months (Google Analytics default).

After these periods, data is securely deleted or anonymised.
 

7. Cookies and Tracking

We use cookies and similar technologies to improve website performance and measure usage.

You can control or withdraw consent using our cookie banner or by adjusting your browser settings.

For more detail, please see our Cookie Policy.
 

8. Your Rights

Under UK GDPR, you have the following rights regarding your personal data:

  • Access – to request a copy of your data.
  • Rectification – to correct inaccuracies.
  • Erasure – to request deletion where data is no longer needed.
  • Restriction – to limit how we process your data.
  • Data Portability – to request transfer of your data to another provider.
  • Objection – to object to certain processing (e.g. marketing).
  • Withdraw consent – where processing is based on your consent.

To exercise any of these rights, contact us at [email protected].

We will respond within one month as required by law.
 

9. Security of Your Data

We apply appropriate technical and organisational measures to protect your data, including:

  • SSL encryption for transactions
  • Secure EU-based hosting
  • Access control and staff confidentiality agreements
  • Regular security reviews

However, no method of online transmission is completely secure; we cannot guarantee absolute security.
 

10. Your Right to Complain

If you have any concerns about how we handle your data, please contact us first at [email protected].

You also have the right to complain to the Information Commissioner’s Office (ICO): www.ico.org.uk | Tel: 0303 123 1113
 

12. Updates to This Policy

We may update this Privacy Policy periodically. The latest version will always be available at www.littlestartsgiftcards.com/privacy.

Thank you

Suggest an activity

Activity details

We use a limited number of cookies to enhance your experience, serve personalised content and analyse traffic.

More info Decline Accept