Privacy Policy

1. Who we are

KindFinch Ltd is a digital card company. For privacy questions, contact us at info@kindfinch.com.

KindFinch Ltd is the data controller for personal information handled through kindfinch.com. Our company number is 17344448 and our registered office is 71–75 Shelton Street, Covent Garden, London, WC2H 9JQ, United Kingdom.

2. Information we may collect

When you use the website or contact us, we may receive:

• information you send to us by email or WhatsApp;
• basic technical information such as IP address, browser type, device type, access time and security logs generated by our hosting providers;
• cookie, local-storage and similar technology information described in our Cookie Policy;
• after optional consent, advertising-measurement information generated by Meta Pixel, such as page views, card-design views, checkout starts, completed purchase value and technical browser or device identifiers. KindFinch does not intentionally send card messages, recipient names or email addresses in Meta Pixel events.

For orders, we collect the buyer email, card personalisation details, recipient name, an optional recipient email for one-off direct card delivery, support or redelivery, order reference and support correspondence. Personalisation data is submitted to a secure KindFinch server function and stored in encrypted Netlify Blobs so it can be matched to Stripe payment, delivered across devices and recovered for a limited period. Payment card information is processed by Stripe; KindFinch Ltd does not intentionally store full card numbers or security codes. Corporate and contact form submissions may be processed through Netlify Forms.

3. Why we use personal information

We may use personal information to:

• respond to enquiries and provide support;
• create, personalise and deliver digital cards;
• process orders, refunds, disputes and fraud checks;
• keep accounting, tax and legal records;
• protect the website, investigate misuse and maintain security;
• send marketing only where the law permits and, where required, you have consented;
• measure advertising performance through Meta Pixel only after optional consent.

4. Lawful bases

Depending on the activity, we rely on performance of a contract, steps taken at your request before entering a contract, compliance with legal obligations, our legitimate interests in operating and securing the service, or consent. Where we rely on consent, you may withdraw it at any time.

5. Recipient information

If a buyer supplies another person's name or email address, the buyer must have a reasonable and lawful basis to provide it. The finished card is available through a private, time-limited recovery link after successful payment. Recipient information is used only for personalisation, one-off transactional delivery, support, redelivery, security and legal purposes. Transactional delivery may be handled by a specialist email provider acting on KindFinch Ltd’s instructions. We will not add recipients to marketing lists merely because they received a card.

6. Sharing information

We may share only the information reasonably necessary with service providers that support hosting, security, payment processing, email or messaging delivery, analytics or advertising measurement used with valid consent, accounting, legal compliance and customer support. When optional Meta Pixel measurement is accepted, event and technical data may be shared with Meta Platforms. We may also disclose information where required by law, court order or a competent authority.

7. International transfers

Some service providers may process information outside the United Kingdom. Where required, we will use an approved safeguard such as an adequacy regulation, the UK International Data Transfer Agreement or an approved addendum to standard contractual clauses.

8. How long we keep information

• General enquiries: normally up to 24 months after the last meaningful contact.
• Payment, refund, dispute and accounting records: generally up to 6 years where needed for tax, accounting or legal obligations.
• Card personalisation and delivery data: normally deleted after 90 days, unless a dispute, fraud review, legal hold or support case requires longer retention.
• Private card recovery links: normally expire after 30 days and are access-limited.
• Corporate and contact form submissions: retained only as long as needed to respond and administer the enquiry.
• Security logs: retained for a proportionate period based on risk and provider settings.
• Your optional-tracking choice: stored on your device for up to 180 days unless you change it or clear browser data. Meta controls the retention of information it receives under its own settings and policies.

We may keep information longer where a dispute, legal hold, fraud investigation or regulatory requirement applies.

9. Your rights

Depending on the circumstances, you may have rights to access, correct, erase, restrict or object to the use of your personal information, and to receive certain information in a portable format. You may also withdraw consent where consent is the lawful basis. Rights are not absolute and legal exemptions may apply.

To exercise a right, email info@kindfinch.com. We may need to verify your identity before acting on a request.

10. Complaints

Please contact us first so we can try to resolve your concern. You also have the right to complain to the UK Information Commissioner's Office (ICO).

11. Children

The service is not designed for children to purchase independently. We do not knowingly collect personal information from children without an appropriate lawful basis and, where required, parental or guardian involvement.

12. Security

We use reasonable technical and organisational safeguards, but no internet service can promise absolute security. Please do not send sensitive documents or payment card details by ordinary email or WhatsApp unless we specifically provide a secure method.

13. Changes to this notice

We may update this notice as the service, providers or law changes. The date at the top shows the latest revision. A material change will be highlighted where appropriate.