Privacy Policy

Last updated: September 2026

This policy explains what personal information Born Gifted collects when you visit our website or order from us, what we do with it, who we share it with, how long we keep it, and your rights.

1. Who we are

Born Gifted Ltd is responsible for (the “controller” of) the personal information described in this policy. We are registered in England and Wales, company number 04595525. Our address is Trafalgar House, 223 Southampton Road, Portchester, Portsmouth PO6 4PY.

Born Gifted Ltd is registered with the Information Commissioner’s Office (ICO) as a data controller, registration number ZC255154

For anything about your personal information, email orders@borngifted.co.uk or write to us at that address.

2. The information we collect

When you order, we collect your name, email address, phone number, billing address and delivery address, and the name of the person you are sending to if different.
We collect the personalisation you ask for — for example names, dates or a message — and any photo you upload for a personalised product. These may include information about the person the gift is for, who is often a child. Please only send us photos and details you have the right to share.
We never see or store your full card details. Payments are handled by Stripe (see section 5).
If you create an account, we keep your order history there. Your password is stored only in scrambled form, which we cannot read.
When you browse our website, we and our service providers receive technical information such as your IP address, your browser type and the pages you visit. See section 7.

3. How we use it, and why we are allowed to

To take, make and deliver your order, and to keep you updated about it. This is necessary to perform our contract with you.
To keep the records the law requires, such as order and VAT records. This is a legal obligation.
To keep our website secure, prevent fraud and answer your questions about orders. These are our legitimate interests.
With your consent: to use optional statistics and marketing technologies to measure how our website and advertising perform and, where applicable, to show you relevant adverts. For some marketing emails we may instead rely on our legitimate interests where the electronic-marketing rules allow the “soft opt-in” (see section 9). You can withdraw consent or object to direct marketing at any time.

4. Where your information is kept

Our website and customer records are kept on servers in the UK run by our hosting company. Some of the service providers in section 5 are based in, or send information to, other countries including the USA. Where that happens, your information is protected by safeguards approved under UK data protection law. Information is always sent between your browser and our website encrypted (HTTPS).

5. Who helps us, and what they receive

Our suppliers and couriers

Most of our personalised gifts are made by specialist suppliers and sent straight to the recipient. To make and send your gift, we give the supplier the recipient’s name and delivery address, your personalisation (and your photo, if the product uses one), and, where they need it to sort out a delivery problem, your phone number. Couriers such as Royal Mail and DPD receive the delivery name and address. Our suppliers may use this information only to make and deliver your order.

Payments — Stripe

Payments are processed by Stripe. We never see or store your full card details. Stripe receives the payment information and also uses information about your device to help prevent fraud. Stripe’s privacy policy: stripe.com/privacy.

Email — IONOS

Our emails to you — order confirmations, despatch updates, password resets and order look-up links — are sent through IONOS, which also hosts our email accounts.

Hosting and security — hosting.com and Cloudflare

Our website is hosted by hosting.com and protected by Cloudflare. Both process your IP address and basic connection details, to deliver pages quickly and to block attacks.

Reviews — eKomi

About ten days after your order, our review partner eKomi may email you once to ask for a review of your order and the products you bought. We give eKomi only what it needs for this: your name, email address, order number and the products ordered. You can ignore the email, or tell us if you would rather not be asked. eKomi’s privacy policy: ekomi.co.uk.

Fonts and our review badge

Our pages use fonts from Google Fonts and display our review rating from eKomi. To show these, your browser contacts their servers, which receive your IP address.

6. Photos you upload

If you upload a photo for a personalised gift, we keep it on our website’s server at a long, hard-to-guess web address that is not listed anywhere, and share it only with the supplier making your gift. We delete it automatically four months after your order. Photos added to a basket that is never ordered are deleted after a few days.

7. Cookies and similar technologies

Cookies are small files a website stores on your device. When you first visit, we ask which kinds you are happy with. You can choose Reject all, Allow all, or pick categories. You can change your mind at any time with the “Cookie settings” link at the foot of every page.

Necessary cookies keep the shop working: your basket, your login, secure checkout and Stripe’s fraud checks, and remembering your cookie choice. These are always on.
Statistics cookies (Google Analytics) help us understand how the website is used.
Marketing cookies (Google Ads, Microsoft Advertising, and a record of how you arrived, such as which advert) help us measure and improve our advertising.

If you decline statistics or marketing cookies, Google may still receive limited information without cookies, such as that a page was viewed. This may be used in an aggregated or modelled way to help estimate how our website and adverts perform. Microsoft receives nothing from our website until you allow it: Microsoft Clarity only if you allow statistics cookies, and Microsoft Advertising only if you allow both statistics and marketing cookies. Your list of recently viewed products is kept only in your own browser and is never sent to us.

The full, up-to-date list of the cookies we use, and how long each one lasts, is at the end of this page.

Google Analytics

With your consent, we use Google Analytics to see how visitors use our website — for example which pages are popular — so we can improve it. Google Analytics keeps this information for 14 months. Google’s privacy policy: policies.google.com/privacy.

Microsoft Clarity

If you allow statistics cookies, we use Microsoft Clarity to see how visitors use our pages — for example where people click and scroll, and where they get stuck — so we can improve the shop. Anything typed into forms is hidden from these recordings. See Microsoft’s privacy statement for how Microsoft handles this information.

Google Ads

With your consent, we use Google Ads to measure which of our adverts lead to orders, and to show our adverts to people who have visited our website before (“remarketing”). When you place an order, we may send Google a securely hashed version of your email address to help measure whether an advert led to an order. You can control personalised adverts at myadcenter.google.com. We never sell your information.

Microsoft Advertising

With your consent, we use Microsoft Advertising to measure which of our Bing and Microsoft adverts lead to orders, and to show our adverts to previous visitors. Microsoft’s privacy statement: privacy.microsoft.com.

How you found us

With your consent, when you place an order we note how you found us (for example a Google advert, an email link or another website) and what type of device you used. This stays in our own records and helps us judge which advertising is worth paying for.

YouTube videos

Some product pages include videos from YouTube, shown in YouTube’s privacy-enhanced mode. When a page with a video loads, YouTube’s player may store a little information in your browser, even if you don’t play the video. If you play a video, Google’s privacy policy applies.

Links to our Pinterest page take you to Pinterest, whose own privacy policy then applies.

8. Your account and looking up orders

You can shop as a guest or create an account. Accounts from our previous website have been carried across; for your security you will be asked to set a new password the first time you sign in. To protect accounts, we keep a short-lived record (about one hour) of repeated sign-in or look-up attempts from the same internet address or email address.

Without an account, you can look up an order with its order number and your email address, or ask for a secure link, valid for 30 minutes, to be emailed to you showing all your orders.

9. Marketing emails

We may send you marketing emails in two situations. First, if you have actively asked to receive them. Second, where the law allows us to use the “soft opt-in”: for example, if you give us your email address while placing or trying to place an order, we may send a limited follow-up about that unfinished order or similar Born Gifted products, provided we gave you a clear opportunity to opt out when we collected your details. Every marketing email includes a simple way to unsubscribe, and if you have already told us you do not want marketing we keep that preference and do not send you marketing emails. Marketing preferences carried across from our previous website are used only where we can establish what the recorded preference meant and that it remains valid.

10. How long we keep your information

Your account, and the order history in it: for as long as your account is open. You can ask us to close it at any time.
Order records: 10 years after the order, or longer while they are part of an open account. Customers often come back to us years later — for a matching gift for a brother or sister, an anniversary, or to check what was personalised last time — and this also covers the records tax law requires us to keep.
Uploaded photos: four months after your order.
Your cookie choices: 12 months.

When we moved to our new website in 2026, we brought across orders placed on our previous website since 2019, so returning customers can see their order history. A copy of our previous system is kept securely for two years after the move, and will then be deleted.

11. Your rights

Under UK data protection law you can ask us for a copy of your information, to correct it, to delete it, to restrict or object to how we use it, and to receive it in a portable form. Where we rely on your consent, you can withdraw it at any time.

To use any of these rights, email orders@borngifted.co.uk or write to us at the address in section 1. We will normally respond within one month; in the limited circumstances allowed by law, we may take longer and will tell you if that applies.

If you are unhappy with how we have handled your information, you can complain to the Information Commissioner’s Office: ico.org.uk, 0303 123 1113.

12. If something goes wrong

If a security incident puts your information at risk, we will tell you promptly and report it to the ICO where the law requires.

13. Changes to this policy

We may update this policy from time to time. The date at the top shows when it last changed.

You can change or withdraw your consent at any time with the Cookie settings link at the foot of every page.