Privacy Policy

Hiba Gifts is the registered business name of Synergaid Pty Ltd (ABN 63 682 263 001), a proprietary limited company incorporated in Australia. References in this Privacy Policy to "Hiba Gifts", "we", "our", or "us" mean Synergaid Pty Ltd, trading under the registered business name Hiba Gifts.

Synergaid Pty Ltd is the data controller responsible for the personal information collected through hibagifts.com and its associated services. We comply with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs). For donors and recipients in the European Union and United Kingdom, we apply the GDPR / UK GDPR as supplementary protections.

Privacy enquiries: privacy@hibagifts.com.

Synergaid Pty Ltd, trading under the registered business name Hiba Gifts ("we", "our", or "us"), is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our charity gift card platform.

Personal information

When you use Hiba Gifts, we may collect:

• Name and email address (when you create an account or make a donation)
• Payment information (processed securely via Stripe)
• Recipient details you provide (name, email, personal messages)
• Organisation information (for charity partners)

Automatically collected information

• Device and browser information
• IP address and approximate location
• Usage data and analytics

We use your information to:

• Process donations and deliver gift cards
• Send donation receipts and gift card notifications
• Provide customer support
• Improve our platform and services
• Comply with legal obligations
• Prevent fraud and maintain security

Important: We are committed to protecting recipient privacy. By default, gift card recipients will not see the donation amount. They only receive the gift card with the sender's name, personal message, and cause details. Donors may opt in to show the amount on the gift card during checkout.

We share your information only with:

• Charity partners: To process and fulfil donations (excluding recipient personal details)
• Payment processors: Stripe for secure payment processing
• Service providers: Email delivery, hosting, and analytics services
• Legal requirements: When required by law or to protect our rights

We implement industry-standard security measures including encryption, secure connections (HTTPS), and regular security audits. Payment information is processed by Stripe and never stored on our servers.

Under applicable privacy laws, including the Australian Privacy Act, GDPR (EU/UK), CCPA (California), PDPA (Singapore), and POPIA (South Africa), you have the right to:

• Access your personal data
• Correct inaccurate data
• Request deletion of your data ("right to be forgotten")
• Export your data in a portable format (data portability)
• Opt out of marketing communications
• Object to or restrict processing of your data
• Withdraw consent at any time (where processing is based on consent)

You can exercise these rights through your account settings or by contacting us at privacy@hibagifts.com.

Region-specific rights

European Union & United Kingdom (GDPR): If you are in the EU or UK, you have additional rights under GDPR including the right to lodge a complaint with your local supervisory authority. We process data lawfully based on consent, contractual necessity, or legitimate interests.

California (CCPA/CPRA): California residents have the right to know what personal information we collect, request deletion, opt-out of the sale of personal information (we do not sell personal information), and non-discrimination for exercising your rights.

Singapore (PDPA): Singapore residents can request access to and correction of personal data. You may withdraw consent for the collection, use, or disclosure of your data at any time.

South Africa (POPIA): South African residents have rights under POPIA including the right to access, correct, and delete personal information. You may lodge complaints with the Information Regulator.

We use cookies and similar technologies to enhance your experience:

• Essential cookies: Required for authentication, security, and basic functionality
• Analytics cookies: Help us understand how visitors use our platform (optional)
• Marketing cookies: Used for advertising purposes (optional)

You can manage your cookie preferences through our cookie banner or your browser settings. For EU/UK visitors, we obtain explicit consent before setting non-essential cookies as required by GDPR.

We operate globally and may transfer your data to countries outside your jurisdiction. When transferring data from the EU/UK, we use appropriate safeguards such as Standard Contractual Clauses. We ensure all international transfers comply with applicable data protection laws.

We retain your data for as long as your account is active or as needed to provide services. Financial records are retained as required by law (typically 7 years for tax purposes in most jurisdictions). You can request deletion of your account and personal data at any time, subject to legal retention requirements.

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or through our platform. Continued use after changes constitutes acceptance.

If you have questions about this Privacy Policy or wish to exercise your rights, please contact: