Privacy Policy

Back to Privacy Policy

Canada Privacy Addendum

This addendum supplements the eGifter Global Privacy Policy and applies to the collection, use, and disclosure of personal information of residents of Canada. It is provided in accordance with the Personal Information Protection and Electronic Documents Act (PIPEDA) and, for residents of Quebec, Quebec's Act Respecting the Protection of Personal Information in the Private Sector (Law 25).

This addendum should be read together with the eGifter Global Privacy Policy, which describes our general data practices, categories of personal information, and sources of data.

Last Updated: July 9, 2026

1. Our Privacy Commitment

eGifter is committed to protecting the personal information of Canadian residents in accordance with PIPEDA, Quebec's Law 25, and other applicable provincial privacy laws. We collect, use, and disclose personal information only for the purposes identified in this Addendum and our Global Privacy Policy and with your knowledge and consent, except where otherwise required or permitted by law.

2. Purposes of Collection

We collect personal information for the following purposes:

  • Processing gift card orders and delivering gift cards
  • Processing payments securely
  • Fraud detection and prevention
  • Customer support
  • Sending order confirmations and service communications
  • Sending marketing communications where you have provided consent
  • Improving our platform and Services
  • Complying with applicable laws and regulations

We may use personal information to analyze or predict your preferences, behaviors, or characteristics (profiling), including for purposes such as fraud detection and prevention and service optimization. We will identify the purposes for collection at or before the time of collection. We limit the collection of personal information to that which is necessary for the identified purposes, and we collect personal information by fair and lawful means. We will not use your personal information for purposes other than those identified without your consent, except where permitted by law.

3. Consent

We obtain your meaningful consent for the collection, use, and disclosure of personal information, except where the law provides that we may collect, use, or disclose personal information without consent. Your consent may be express or implied depending on the sensitivity of the information and the circumstances. You may withdraw your consent at any time, subject to legal or contractual restrictions, by contacting us at privacy@egifter.com. Before giving effect to a withdrawal of consent, we will inform you of the likely consequences of that withdrawal, which may include the termination or limitation of services where the personal information is necessary to provide those services.

4. Your Rights Under PIPEDA

As a Canadian resident, you have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete personal information
  • Withdraw consent to collection, use, or disclosure (subject to legal restrictions)
  • File a complaint with the Office of the Privacy Commissioner of Canada if you believe your privacy rights have been violated

When responding to an access request, we will provide information about the personal information we hold, and, where applicable, explain how it has been used and to whom it has been disclosed.

To exercise these rights, contact us at privacy@egifter.com. We will respond to access requests within 30 days, as required by PIPEDA, or such other timeframe required by applicable law.

5. Quebec Residents — Additional Rights Under Law 25

If you are a resident of Quebec, you have additional rights under Quebec's Law 25 (Act Respecting the Protection of Personal Information in the Private Sector):

Right to Access and Portability

You have the right to access personal information we hold about you and, where the information was collected from you (and not created or inferred by us) and is in a computerized format, to receive it, or have it transmitted to a third party, in a structured, commonly used technological format (data portability).

Right to Correction

You have the right to request correction of inaccurate, incomplete, or ambiguous personal information we hold about you.

Right to De-indexing and Cessation of Dissemination

Where personal information has been disseminated online in the context of our Services, you may request that we cease such dissemination or de-index any hyperlink to that information, where required by applicable law and where such dissemination causes you serious harm.

Automated Decision-Making

If we use automated processing to make a decision based solely on your personal information that produces legal or other significant effects on you, you have the right to be informed of this and to request human review of the decision.

Privacy Impact Assessments

Where required by Quebec's Law 25, we conduct a privacy impact assessment (PIA) prior to acquiring, developing, or overhauling any information system or electronic service delivery project involving personal information, and prior to communicating personal information outside Quebec. We implement appropriate safeguards based on the results of the assessment.

Breach Notification

In the event of a confidentiality incident involving your personal information that poses a risk of serious harm, we will notify you and the Commission d'accès à l'information (CAI) without delay.

6. Cross-Border Data Transfers

Your personal information may be transferred to and processed in the United States or other jurisdictions outside Canada. While transferred or stored outside Canada, your personal information may be subject to the laws of the receiving jurisdiction, including lawful requests for access by foreign courts, law enforcement, and government authorities. Where required by applicable law, including Quebec's Law 25, we conduct a privacy impact assessment of the transfer and implement contractual, technical, and organizational safeguards designed to provide an adequate level of protection for personal information.

7. Retention

We retain personal information only as long as necessary to fulfill the identified purposes for the services and as required by applicable law.

8. Contact and Complaints

We have designated a person in charge of the protection of personal information (as required by Quebec's Law 25). You can contact this individual by writing to:

Privacy Officer
eGifter
privacy@egifter.com

For privacy inquiries or to exercise your rights: privacy@egifter.com

If you are unsatisfied with our response, Canadian residents may contact:

Office of the Privacy Commissioner of Canada: www.priv.gc.ca

Quebec residents may also contact: Commission d'accès à l'information (CAI): www.cai.quebec.ca