Draft – please have this reviewed by a legal advisor before launch.
Who we are
MyBucketList.gifts is operated by [COMPANY NAME, ADDRESS, VAT/OIB – to be completed]. Contact: hello@mybucketlist.gifts.
What data we process
- Bucketlist owners: name, e-mail address and Google account identifier received from Google sign-in, and the date on which you accepted the Terms of use and this Privacy policy; the lists you create (occasion, title, welcome message, image, budget, categories, co-owner e-mails).
- Friends & Family: the e-mail address entered by the list owner, when the invitation was sent and opened, and the gift chosen together with an optional note.
- Mailing lists: e-mail address, name (if known), the group you belong to (owner, guest or shop), for guests the list owner and list that invited you, subscription status and the dates of opt-in / opt-out. Our mailing lists are managed with the AcyMailing plugin on our own server.
- Statistics: only with your consent, anonymous usage data via analytics cookies (see Cookie policy).
We do not process payment data – payments happen entirely on the partner shop’s website.
Why we process it (legal basis)
- To provide the gift-list service you asked for (contract, Art. 6(1)(b) GDPR).
- To send invitations on behalf of the list owner and keep the lists secure (legitimate interest, Art. 6(1)(f) GDPR).
- To send our newsletter (consent / legitimate interest – you can object at any time with one click).
- Statistics cookies only with your consent (Art. 6(1)(a) GDPR).
Who can see your data
Your list is visible only to you, your co-owners and the guests you invite; each guest reaches the list only through a personal secret link. List owners see which of their guests opened the list and which gift they chose. We use Google (sign-in, reCAPTCHA bot protection, optional analytics) and our e-mail delivery provider as processors. We never sell data.
How long we keep it
Lists and invitations are kept while your account is active; you can delete a list at any time from your dashboard, which also deletes its guests and choices. Newsletter data is kept until you unsubscribe (we keep only the opt-out record so we don’t e-mail you again).
Your rights
You have the right to access, correct, delete and port your data, to restrict or object to processing and to withdraw consent at any time. Write to hello@mybucketlist.gifts. You can also lodge a complaint with your data protection authority (in Croatia: AZOP, azop.hr).