Privacy Policy

Last Updated: August 2026

Givtogo ("we," "us," or "our") respects your privacy and is committed to protecting your personal data in accordance with Thailand's Personal Data Protection Act B.E. 2562 (2019) ("PDPA"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website givtogo.com.

1. Personal Data We Collect

• Account Data: Email address, hashed passwords, and email verification status when you register or sign in.
• Third-Party Authentication Data: Basic profile information (such as your email address and full name) provided via Google Sign-In.
• Technical & Usage Data: IP address, browser type, operating system, and click events when interacting with our gift recommendations or redirect links.
• Preferences & Interaction Data: Gift search preferences, budget selections, and saved favorites.

2. Purpose and Legal Basis for Processing

We process your personal data under the following legal bases under the PDPA:

• Contractual Necessity: To create and manage your account and deliver tailored gift recommendations.
• Consent: To send promotional updates, newsletters, or marketing communications (which you may unsubscribe from at any time).
• Legitimate Interests: To operate, analyze, and improve our platform, prevent fraud, and track affiliate referral link performance.

3. Disclosure of Personal Data

We do not sell your personal data. We may share information with trusted third-party service providers only as necessary to run our service:

• Email Services: Transactional and marketing email delivery providers (e.g., Resend).
• Authentication Partners: Google OAuth services for single sign-on functionality.
• Affiliate Partners: Anonymous click-through data shared with partner platforms (such as Shopee, Lazada, Central, etc.) solely for conversion verification.

4. Data Retention

We retain your personal data for as long as your account remains active or as required to fulfill the purposes outlined in this policy. Unverified or inactive accounts may be deleted automatically after a standard retention window.

5. Your Data Subject Rights under PDPA

Under Thailand's PDPA, you have the right to:

• Request access to or receive a copy of your personal data.
• Request correction or updating of incomplete or inaccurate data.
• Request the deletion, destruction, or anonymization of your data.
• Object to or restrict the processing of your personal data.
• Withdraw your consent at any time for consent-based processing.

6. Contact Us

To exercise any of your privacy rights or if you have questions regarding this Privacy Policy, please contact us at:

Email: support@givtogo.com