Privacy Policy

This policy explains how DOCH FX INC, trading as Luvngift ("we", "us"), handles personal information when you use our website, our mobile app, or contact us. It covers two groups of people: buyers, who order gifts, and recipients, the people in Nigeria those gifts are delivered to.

We are the organisation responsible for your information. Questions go to our Privacy Officer at info@luvngift.com (details in section 12).

1. What we collect

When you create an account

• Your name, email address, username and password (stored only as a one-way hash)
• Your date of birth, used only to confirm you are 18 or older
• Optionally, your phone number
• If you sign in with Google: your name, email address and profile picture from your Google account. We do not receive your Google password.
• Two-factor authentication settings, if you turn them on

When you buy a gift or subscribe

• Your billing address and country. We use them to set the currency you pay in and to keep the records our accounting and tax obligations require.
• Payment details. Card payments are handled by Stripe. We never see or store your full card number or security code. We receive only limited details such as the card brand, the last four digits and the expiry date, so you can recognise saved cards.
• Your order history, invoices, refunds and any messages about a custom gift request

About the person receiving the gift

To deliver a gift we need the recipient's name, phone number and delivery address in Nigeria, along with any personal message you write for them. For grocery subscriptions you can also tell us about dietary needs, such as allergies, or religious requirements, such as halal food. This information can reveal health or religious details, so we ask for it only to keep the delivery safe and suitable, and use it for nothing else.

When a gift is delivered, our delivery partner may take a photo as proof of delivery. We show it to you, the buyer.

If you are a buyer, please give us only the recipient details needed for delivery, and only where the recipient would expect you to share them. If you are a recipient and have questions about your information, contact us at info@luvngift.com.

When you contact us

• Messages you send through our contact form, by email or in the support chat
• If you use the support chat without an account and ask to speak to a person: your name and email address, so we can reply

When you apply to work with us

• Job applicants: your name, email address, phone number, CV and cover letter
• Vendor applicants: your business name, contact name, email address, phone number, business address and state
• Roadmap updates: your email address, if you ask to be told when a feature launches

Collected automatically

• Technical information such as your IP address, browser and device type, and the pages you request. This is recorded in our server logs for security, fraud prevention and fixing faults.
• Error reports. When a page breaks in your browser we receive a technical report so we can fix it. These reports exclude cookies and form contents.
• Visit and page-speed statistics, only if you accept analytics in our cookie banner. See our Cookie Policy.

We do not collect your precise location, and the mobile app does not track you.

2. How we use it

• To create and secure your account, sign you in, and confirm you are 18 or older
• To take payment, calculate tax, and source, pack and deliver your gift, including arranging substitutions when an item is unavailable
• To send you messages about your orders by email and SMS: confirmations, invoices, delivery updates, quotes and replies
• To answer questions and support requests
• To review job and vendor applications
• To prevent fraud, keep our services secure, and find and fix faults
• To keep the tax and accounting records the law requires

We do not sell personal information, we do not use it for targeted advertising, and we do not make decisions about you by automated means alone. Our support chat assistant only answers from help content we have written, and passes anything it cannot answer to a person.

We do not currently send marketing emails. If we start, we will ask for your permission first, and every message will include an unsubscribe link.

3. Our legal reasons for using it

Where the law asks us to identify a legal basis (for example in the UK and the European Union), we rely on:

• Contract: to provide the account, the gift or the subscription you asked for
• Legal obligation: to keep tax and accounting records and respond to lawful requests
• Legitimate interests: to deliver a gift to its recipient, prevent fraud, secure our systems and fix faults
• Consent: for analytics and for dietary or religious requirements. You can withdraw your consent at any time.

In Canada we rely on your consent, which you give when you use the services for the purposes described here, and on the exceptions the law allows, such as fraud prevention.

4. Who we share it with

Delivery partners in Nigeria

The independent vendor who prepares and delivers a gift receives what they need for that delivery: the recipient's name, phone number and address, the items, your personal message, and any dietary or religious requirements. They do not receive your name, contact details or payment information.

Service providers who work on our behalf

These companies process personal information only to provide their service to us:

• Stripe: payments and saved cards
• Resend: sending email
• Twilio: sending SMS
• Cloudinary: storing images, delivery photos, invoices and CVs
• Neon: database hosting
• Railway: hosting our servers
• Vercel: hosting our website, and analytics if you accept them
• Upstash: the job queue that sends emails and messages
• Sentry: website error reports
• Axiom: server logs
• Google: sign-in, if you choose to sign in with Google

Others

We may disclose information where the law requires it, to protect people from harm or fraud, or as part of a sale or reorganisation of our business. In a sale or reorganisation, the new owner must honour this policy.

5. International transfers

We are based in Canada. Most of our service providers store data in the United States, and recipient details go to delivery partners in Nigeria so the gift can be delivered. Some of these countries have different data protection laws from yours. Where the law requires it, we rely on our providers' data processing terms. Those terms include the safeguards required for international transfers, such as the EU and UK standard contractual clauses.

6. How long we keep it

• Your account: until you delete it. How to delete your account.
• Orders, payments, refunds and invoices: six years after the end of the tax year they relate to, as Canadian tax law requires, including after you delete your account
• Support chats: with your account, and deleted when you delete it. Chats started without an account are kept for up to 24 months.
• Job applications: up to 12 months after the role is filled or closed, unless you ask us to delete them sooner
• Vendor applications: for as long as you work with us, and up to 12 months after that if your application is not accepted
• Server logs and error reports: up to 90 days

7. How we protect it

We encrypt information in transit, store passwords only as one-way hashes, offer two-factor authentication, and limit staff access to what each person needs. Our logs automatically remove passwords, tokens and authentication details. No system is completely secure. If a breach puts you at real risk, we will tell you and the relevant regulator as the law requires.

8. Your rights

Depending on where you live, you have the right to:

• see the personal information we hold about you and get a copy of it
• have it corrected
• have it deleted. You can delete your account yourself from your account page or the app.
• object to or restrict how we use it, or withdraw consent you have given
• receive your data in a portable format

To use these rights, email info@luvngift.com. We will confirm your identity and reply within 30 days. Exercising your rights will never affect the price or service you receive. If you are unhappy with our response, you can complain to your data protection authority: in Canada, the Office of the Privacy Commissioner of Canada; in the UK, the Information Commissioner's Office; in the EU, your local supervisory authority; in Nigeria, the Nigeria Data Protection Commission.

9. Children

Our services are for adults. You must be 18 or older to create an account or place an order. When you sign up with email we ask for your date of birth and do not open accounts for anyone under 18. Anyone signing in with Google must confirm they are 18 or older. We do not knowingly collect information from children. A gift may be for a child, in which case we collect only the delivery details a parent or other adult buyer provides. If you believe a child has given us their information, contact us and we will delete it.

10. Cookies

We use essential cookies to keep you signed in and to process payments. Analytics run only if you accept them, and you can change your choice at any time using Cookie settings in the footer. Details are in our Cookie Policy.

11. Changes to this policy

If we change this policy, we will update the date at the top. If a change materially affects how we use your information, we will tell you by email or in the app before it takes effect.

12. Contact us

Privacy Officer
DOCH FX INC
3354 Woodroffe Avenue
Nepean, Ontario K2J 0A8
Canada
Email: info@luvngift.com