1. Who we are and who this covers
Emerald Gift Cards is operated by Anchorflow Studios. This notice covers our marketing website, business accounts, gift-card pages, buyer delivery-management pages and related support communications.
We decide how account administration, billing, security and our own enquiries are handled. A participating merchant decides why its customers’ gift-card information is collected and how its gift-card programme operates. For those activities, we handle information on the merchant’s behalf to provide the service. The merchant’s own privacy notice also applies.
The contracting entity and business address must be identified in the merchant agreement before these draft notices are adopted. For privacy enquiries, contact [email protected].
2. Information handled by the service
- Business and account information: business and contact names, email addresses, business locations, account roles and permissions, and optional profile or branding uploads.
- Gift-card information: card identifiers, value, currency, balance, status, expiry and redemption rules; buyer or recipient email; and optional recipient/sender names and gift messages.
- Activity and delivery records: issuance, redemption, refund and void events; staff actions; payment method and receipt/reference details; delivery selections, schedules, attempts and outcomes.
- Security and support information: sign-in and recovery events, IP addresses, request identifiers, operational logs and information you choose to include in an enquiry.
Information may come from you, your business administrator, a merchant, a gift buyer or service activity. The platform records payment references; it does not provide a field for payment-card numbers, security codes or online-banking passwords. Do not put these, identity documents, health information or other sensitive information in gift messages, receipt references or staff notes.
3. Why information is used
We use information to create and administer accounts, operate gift-card balances and transaction records, fulfil requested delivery, manage schedules, provide support, calculate platform fees, prevent misuse and maintain security and accountability.
A recipient’s email may be supplied by a buyer or merchant. It is used for the requested gift delivery and related service communications; receiving a gift does not enrol the recipient in a marketing mailing list.
Depending on the activity and applicable law, processing may be needed to provide an agreed service, follow a merchant’s lawful instructions, meet legal obligations, protect the service or act on consent. We do not treat every activity as being based on consent. Merchants must establish the appropriate authority and notices for information they submit.
5. Gift links and information you share
A gift-card redemption link provides access to the card’s details and redemption code. A buyer-management link provides control over that gift’s delivery options. Anyone you give the relevant link to may be able to use those capabilities. Keep links private, share them only with intended people and avoid posting them publicly.
Email may be forwarded by its recipient. Printed copies and shared links are outside the platform’s control after you share them. Contact the issuing merchant promptly if a card or link is lost, misdirected or used without authority.
6. Cookies, browser storage and external sites
The marketing website does not set its own cookies or use browser storage for advertising or analytics. Fonts and images in this build are served by the website itself or use your device’s system fonts; no external font service is required.
The business console uses essential session and request-security cookies. It uses local storage for appearance preferences and session storage to recover certain interrupted operations and avoid accidental duplicate requests. Browser storage can contain details of an operation you were completing. Use a trusted device and sign out of shared devices. Disabling essential cookies can prevent sign-in or other features from working.
Hosting and email providers may create their own operational records. Links to Anchorflow Studios, your email application or a merchant’s website take you to services with their own privacy practices. A future introduction of optional tracking would require an updated notice and any legally required choices.
7. Retention and account closure
Retention depends on the purpose of the record, the merchant agreement, outstanding gift-card obligations, security needs and applicable accounting or legal requirements. Closing an account does not itself erase outstanding card balances or the evidence of transactions.
The current system retains transaction and audit history and does not automatically purge it when an account closes. Deletion, restriction or de-identification requests need a controlled review that preserves records we or a merchant must lawfully keep. Backup expiry and specific retention schedules must be confirmed for the production deployment. Contact us or the issuing merchant for the retention criteria relevant to your information.
8. Security and international processing
The application includes role-based access, business-specific data access, hashed password storage, protected recovery links and records of relevant user and system activity. These are safeguards, not a guarantee that a service, device or email system can never be compromised.
Hosting or support may involve processing outside your country. Applicable locations, providers and any required transfer safeguards must be established in the deployment arrangements and the merchant’s data-processing agreement. No certification, blanket GDPR compliance or local-only hosting is claimed by this notice.
9. Your requests and choices
You may ask about information held about you, request correction, or request access, restriction, deletion or other actions available under applicable law. Where processing depends on consent, you may ask to withdraw it for future processing. We may need to verify identity and authority without asking you to email a password or redemption code.
For a gift-card purchase, recipient detail, refund or merchant-held record, start with the issuing merchant. We assist with platform-controlled information and route merchant-directed requests appropriately. Some requests may be limited by another person’s rights, required transaction records or other applicable legal obligations. We will explain the outcome and respond within the period required by applicable law.
The service is not directed at children creating business accounts. A gift may be addressed to a young person through an adult buyer or merchant. Contact us if you believe information was submitted without appropriate authority. You may also raise concerns with a competent authority where applicable.
10. Contact and updates
Contact Anchorflow Studios at [email protected] with the subject “Privacy enquiry — Emerald Gift Cards”. For a merchant-specific request, include the merchant name and a non-sensitive reference. Do not send passwords, full payment-card details or private gift-management links.
Changes to the notice will be published here with a new review date. Material changes will be communicated through an appropriate service channel where required. This is a review draft; it is not a claim that deployment, retention or contractual details have already been approved.