Privacy Policy
Australia Privacy Addendum
This addendum supplements the eGifter Global Privacy Policy and applies to residents of Australia. It is provided in accordance with the Privacy Act 1988 (Cth), including the Australian Privacy Principles and the Notifiable Data Breaches scheme.
This addendum should be read together with the eGifter Global Privacy Policy, which describes our general data practices, categories of personal information, and sources of data.
Last Updated: July 9, 2026
A. Who We Are and How to Contact Us
I. APP Entity Responsible for Your Personal Information
GroupGifting.com, Inc. d/b/a eGifter, 315 Main Street, 2nd Floor, Huntington, NY 11743, USA, is the APP entity that collects and handles personal information in connection with the eGifter gift card platform and storefront services in Australia.
For privacy enquiries: privacy@egifter.com
II. Privacy Officer
eGifter has designated a Privacy Officer responsible for privacy compliance. To exercise your rights or raise a privacy concern, contact: privacy@egifter.com with the subject line "Australia Privacy Request."
III. Relationship Between eGifter and Merchants
When you purchase a gift card directly from eGifter through an eGifter-operated storefront, eGifter handles your personal information in connection with providing the Services and is responsible for that handling under the Privacy Act.
When you purchase a gift card through a merchant-branded storefront powered by eGifter, both eGifter and the applicable merchant generally handle personal information. The respective responsibilities of each party depend on the context of the transaction, the services provided, and applicable law. In many circumstances, eGifter and the merchant are separately responsible for their own handling of personal information.
B. Your Rights Under the Privacy Act
As an Australian resident, you have the following rights under the Privacy Act and the Australian Privacy Principles:
| Right | Description |
|---|---|
| Right of Access (APP 12) | Request access to personal information we hold about you, subject to applicable law. |
| Right to Correction (APP 13) | Request correction of personal information that is inaccurate, out of date, incomplete, irrelevant, or misleading. No charge applies for correction requests. |
| Right to Opt Out of Direct Marketing (APP 7 and the Spam Act 2003 (Cth)) | Opt out of receiving direct marketing communications at any time by using the unsubscribe mechanism provided or by contacting privacy@egifter.com. |
| Right to Complain | Lodge a complaint about our handling of your personal information, as described in the eGifter Global Privacy Policy. |
To exercise these rights, please contact privacy@egifter.com. We will respond within the timeframe required by applicable law.
C. Why We Collect Personal Information and How Long We Retain It
We collect and use personal information where it is reasonably necessary for our business functions and activities, including to provide the Services, process transactions, prevent fraud, maintain platform security, and comply with legal obligations. We do not generally collect sensitive information (as defined in section 6 of the Privacy Act 1988 (Cth)) about Australian users. Where collection of sensitive information is necessary, we will obtain your consent in accordance with APP 3.3, unless an exception applies. At or before the time we collect personal information from you (or as soon as practicable afterwards), we provide notice of the matters required under APP 5, including our identity and contact details, the purposes of collection, the consequences if personal information is not provided, the types of third parties to whom we usually disclose personal information, and details of any overseas disclosure (including the countries where recipients are likely to be located, where practicable). More information about the types of personal information we collect, how we use it, and how long we retain it is described in the eGifter Global Privacy Policy. Consistent with APP 11.2, we take reasonable steps to destroy or de-identify personal information when it is no longer needed for any purpose for which it may be used or disclosed under the APPs, unless we are required by law or a court/tribunal order to retain it.
D. Cross-Border Disclosure of Personal Information
Personal information that we collect from Australian users may be disclosed to recipients located outside Australia, including in the United States (where eGifter is headquartered) and other jurisdictions where our service providers operate. Before disclosing personal information to an overseas recipient, we take reasonable steps to ensure that the recipient does not breach the Australian Privacy Principles in relation to that information, as required by APP 8.1.
E. Cookies and Tracking Technologies
We use cookies and similar tracking technologies on our platform. You can manage your cookie preferences through our cookie preference tool. Disabling certain cookies may affect your ability to use some platform features.
We do not use tracking technologies to collect sensitive information or to make automated decisions with significant legal effects without providing you an opportunity for human review.
F. Automated Decision-Making
We use automated processing to support fraud prevention and transaction security. Where automated processing produces legal or similarly significant effects, you may have rights related to such processing as required by applicable law.
To exercise these rights, contact privacy@egifter.com. We will respond within the timeframe required by applicable law.
G. Data Security
We maintain reasonable technical and organizational measures designed to protect personal information from misuse, interference, loss, unauthorized access, modification, or disclosure, as required by APP 11. Despite these measures, no system is completely secure.
H. Direct Marketing and the Spam Act
We comply with the Spam Act 2003 (Cth) and the Do Not Call Register Act 2006 (Cth). You may opt out of receiving direct marketing communications at any time using the unsubscribe mechanism provided or by contacting privacy@egifter.com.
I. Complaints
If you have a complaint about our handling of personal information, please contact us at privacy@egifter.com. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner (OAIC).
Office of the Australian Information Commissioner (OAIC)
GPO Box 5218, Sydney NSW 2001
Telephone: 1300 363 992
Website: www.oaic.gov.au
J. Contact
For all Australian Privacy Act-related enquiries:
Email: privacy@egifter.com
Subject line: "Australia Privacy Request"