Privacy Policy

Last Updated: 6 February 2026

1. Information We Collect

1.1 Personal Information You Provide

When you register for an account or use our Service, we may collect:

• Account Information: Name, email address, password (encrypted), and phone number
• Payment Information: Payment card details (processed securely by our payment providers), billing address
• Transaction Information: Gift card purchases, cashback earned, withdrawal requests
• Communication Data: Messages you send to our support team

1.2 Information Collected Automatically

When you access our Service, we automatically collect:

• Device Information: Device type, operating system, unique device identifiers
• Log Data: IP address, access times, pages viewed, app features used
• Location Data: General location based on IP address (we do not collect precise GPS location)

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Service Delivery

• Creating and managing your account
• Processing gift card purchases and delivering digital gift cards to your account
• Calculating and crediting cashback rewards
• Processing withdrawal requests to your bank account

2.2 Transactional Communications

We send transactional emails that are essential to operating our Service. These include:

• Account Verification: Email verification upon registration (double opt-in confirmation)
• Password Reset: Security emails when you request to reset your password
• Order Confirmations: Purchase receipts and order status updates
• Gift Card Delivery: Notifications when your purchased gift cards are ready (sent only to your registered email address)

Important: We only send transactional emails triggered by your actions. We do not sell, rent, or share your email address with third parties for marketing purposes. We do not send promotional or bulk marketing emails via our transactional email system.

2.3 Security and Fraud Prevention

• Verifying your identity and preventing fraudulent transactions
• Monitoring for suspicious activity and protecting against abuse
• Enforcing our terms of service

2.4 Service Improvement

• Analysing usage patterns to improve our app and website
• Troubleshooting technical issues
• Developing new features based on user needs

3. Legal Basis for Processing (UK GDPR)

We process your personal data under the following legal bases:

• Contract Performance: Processing necessary to provide our Service (account management, transactions, gift card delivery)
• Legitimate Interests: Fraud prevention, security, service improvement, and customer support
• Legal Obligation: Compliance with applicable laws and regulations
• Consent: Where you have provided explicit consent (e.g., for optional marketing communications, if offered in the future)

4. Data Sharing and Disclosure

We may share your information with:

4.1 Service Providers

• Payment Processors: To process your payments securely
• Gift Card Suppliers: To fulfil your gift card purchases (we share only the minimum information necessary)
• Email Service Provider: We use Amazon Web Services Simple Email Service (AWS SES) to send transactional emails
• Cloud Hosting: Our infrastructure is hosted on secure cloud platforms

4.2 Legal Requirements

We may disclose your information if required by law, court order, or government request, or to protect our rights, property, or safety.

4.3 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement appropriate technical and organisational measures to protect your personal data:

• Encryption of data in transit (TLS/SSL) and at rest
• Secure password hashing
• Regular security assessments and updates
• Access controls limiting employee access to personal data
• Email authentication (SPF, DKIM, DMARC) on our sending domain

6. Data Retention

We retain your personal data for as long as necessary to:

• Maintain your account and provide our Service
• Comply with legal obligations (e.g., tax and accounting requirements)
• Resolve disputes and enforce our agreements

When you delete your account, we will delete or anonymise your personal data within 30 days, except where we are required to retain it for legal purposes.

7. Your Rights (UK GDPR)

You have the following rights regarding your personal data:

• Access: Request a copy of the personal data we hold about you
• Rectification: Request correction of inaccurate or incomplete data
• Erasure: Request deletion of your personal data ("right to be forgotten")
• Restriction: Request restriction of processing in certain circumstances
• Portability: Receive your data in a structured, machine-readable format
• Objection: Object to processing based on legitimate interests
• Withdraw Consent: Where processing is based on consent, withdraw it at any time

To exercise any of these rights, please contact us at enquiry@handysave.co.uk.

8. Email Communication Preferences

You will receive transactional emails that are necessary for your use of our Service. These cannot be opted out of while your account is active, as they contain important information about your purchases and account security.

If we introduce optional marketing communications in the future:

• You will be asked for explicit consent before receiving them
• Every marketing email will include a one-click unsubscribe link
• We will honour opt-out requests promptly

9. International Data Transfers

Our Service may involve transferring your data to countries outside the UK. Where this occurs, we ensure appropriate safeguards are in place, such as Standard Contractual Clauses or adequacy decisions.

10. Children's Privacy

Our Service is not intended for children under 18 years of age. We do not knowingly collect personal information from children. If you believe we have collected data from a child, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the new policy on this page and updating the "Last Updated" date. We encourage you to review this policy periodically.

12. Contact Us

If you have questions about this Privacy Policy or wish to exercise your data rights, please contact us:

13. Complaints

If you are not satisfied with how we handle your personal data, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO):

Website: ico.org.uk
Telephone: 0303 123 1113