Privacy Policy

Last updated: 14 February 2026

GreetingKards (“we”, “us”, or “our”) respects your privacy and is committed to protecting your personal data. This Privacy Policy explains how we collect, use, store, and protect your information when you use our website and services.

1. Who we are

GreetingKards is a UK-based digital greeting card service.

If you have any questions about this policy or how we handle your data, you can contact us at:
Email: hello@GreetingKards.com

2. What personal data we collect

Depending on how you use GreetingKards, we may collect the following information:

Account data: email address and login details if you register an account
Order data: email address, order reference, purchased card details
Card content: messages, names, images or GIFs added to cards
Recipient data: recipient name and email address (if provided)
Payment data: payment confirmation and transaction references (we do not store card numbers)
Technical data: IP address, browser type, device information
Cookie data: session identifiers and preferences

Please note that greeting card content is user-generated and may include personal messages entered voluntarily by you or others you invite to sign a card.

3. How we use your data

We use your data to:

Provide and operate the GreetingKards service
Create and manage orders and digital cards
Enable card editing, viewing, and scheduled send-outs
Send order confirmations and service-related emails
Process payments and prevent fraud
Maintain site security and performance
Comply with legal obligations

4. Legal basis for processing (UK GDPR)

Under UK data protection law, we rely on the following legal bases:

Contract: processing necessary to fulfil your order and provide the service
Legitimate interests: running and improving our business securely
Consent: where required (for example, non-essential cookies)
Legal obligation: where required by law (e.g. accounting records)

5. Payments

Payments on GreetingKards are processed by third-party payment providers (such as Adyen). We do not store or process your payment card details.

Payment providers receive only the information necessary to complete the transaction and are responsible for their own compliance with data protection laws.

6. Sharing your data

We may share your data with trusted third parties only where necessary, including:

Payment service providers (for payment processing)
Email delivery services (to send order confirmations and card notifications)
Hosting and infrastructure providers

We do not sell your personal data and never share it for advertising purposes.

7. Cookies

GreetingKards uses cookies and similar technologies to ensure the website functions correctly. These include essential cookies required for:

Maintaining user sessions
Managing shopping carts
Enabling card editing for guests

For more information, please see our Cookie Policy.

8. How long we keep your data

We retain personal data only for as long as necessary to provide the service and meet legal requirements. This includes:

Order and payment records retained for accounting and legal purposes
Card content retained while cards are active or accessible
Inactive or obsolete data deleted or anonymised periodically

9. Your rights

Under UK data protection law, you have the right to:

Request access to your personal data
Request correction of inaccurate data
Request deletion of your data
Object to or restrict certain processing
Withdraw consent where processing is based on consent
Lodge a complaint with the UK Information Commissioner’s Office (ICO)

To exercise your rights, please contact us at hello@GreetingKards.com.

10. Data security

We take reasonable technical and organisational measures to protect your data against unauthorised access, loss, or misuse. However, no online service can be guaranteed to be completely secure.

11. Changes to this policy

We may update this Privacy Policy from time to time. Any changes will be posted on this page, and the “Last updated” date will be revised accordingly.