Privacy Policy

Last Updated: November 10, 2025

This Privacy Policy covers Gifts for Good, LLC ("Gifts for Good," "we," "us," "our") policies on the collection, use, and disclosure of personal information and data as defined by applicable law (referred to as "Personal Information"), including, but not limited to, the California Consumer Privacy Act of 2018 (as amended by the California Privacy Rights Act of 2020) (collectively, the "CCPA") and the consumer privacy laws enacted in Colorado, Connecticut, Oregon (effective July 1, 2024), Texas, Utah and Virginia, and other consumer privacy laws enacted and effective after the date of this Privacy Policy (collective "U.S. State Privacy Laws") when visitors and customers (collectively "Users") access, use, or otherwise interact with www.giftsforgood.com (the "Site"), including personal information collected by the Gifts for Good® retail site and the GIFTforward® gifting software as a service (collectively the "Platform") and the software and services made available through the Platform (collectively the "Services").

Gifts for Good is a California corporation with offices in the United States. Gifts for Good collects Personal Information and processes, transfers and stores data within the United States. By optionally providing your Personal Information within the Platform, you consent to the collection, use and disclosure practices identified in this Privacy Policy. Users may withdraw their consent at any time by sending an email to hello@giftsforgood.com.

Section 8 is intended to provide the Notice of Collection required under the California Consumer Privacy Act.

1. Personal Information Collected by Gifts for Good

• Account Information. To purchase products through the Site, Users may optionally create an account, which will prompt customers to provide account-based information, including name, address, phone number, username and email. This information is necessary to facilitate account services and process purchase transactions. Gifts for Good will utilize email and/or cellular phone numbers provided to communicate with authorized users regarding purchases. Account information may also be used to (i) provide information regarding our Services; (ii) communicate material changes to our Terms of Service and Privacy Policy; and/or (iii) help us maintain and improve Services offered.
• Order Information. To process orders, Gifts for Good will require both payment and shipping information.
  • To make payments for the Services, Gifts for Good may collect debit or credit card account information, email and other information to verify the customer's identity, such as name, address, telephone number, and/or date of birth. Gifts for Good does not itself store debit or credit card information on its servers, but utilizes a third party payment processor to manage and process payments in order to guarantee the security of personal payment information.
  • To facilitate shipping, Gifts for Good will collect the name, email and shipping address of the order recipient.
• Email & Contact Information. Users may optionally provide their email address and/or other contact information (e.g., name, company name, job title, email and phone number) to Gifts for Good to contact us through the Platform with questions about our products, Platform and/or Services, or to book a demonstration of our GIFTforward® services. Users may also optionally subscribe to our newsletters and may unsubscribe at any time through the opt-out link contained within those communications.
• Partnership Applications. Gifts for Good will receive first and last name, email, phone number when prospective partners complete a Cause Partner application through the Site.
• Career Inquiries. Gifts for Good will receive the name and email address, along with employment and educational background information, when a User emails their resume to Gifts for Good in response to Career postings on the Site. We use personal information received to evaluate applications for employment.
• IP Address. A user's "IP Address" is identified and logged automatically in our server log files whenever you visit the Platform, along with the time of the visit and the page(s) that were visited. Gifts for Good uses IP Addresses for calculating usage levels of the Platform, helping diagnose server problems, and administering the Platform and Services.
• Web Beacons. Pages of our Site and/or emails from Gifts for Good may contain small electronic files known as "web beacons", "tags", or "pixels" that permit Gifts for Good, for example, to count users who have visited those pages or opened an email and for other related Site statistics. Gifts for Good uses Web Beacon technologies to: analyze trends, manage the website, enhance user experience, monitor how visitors navigate the website, and gather demographic information about users.
• Cookies. Gifts for Good's Site uses cookies to provide users with a better browsing experience -- cookies are only collected with your express consent. Cookies are files with a small amount of data, which may include an anonymous unique identifier. Some cookies are set by us and some are set by other companies we partner with (third party cookie providers).

  Our Site uses cookies for:

  • Necessary site functionality
  • Analytics and performance tracking
  • Advertising and marketing

  Cookies are sent to your browser from a website and transferred to your device. You can manage your cookie preferences through your internet browser to remove or reject cookies, cookie setting tools, or through the information provided below; however some Platform features or Services may not work properly without cookies.

  Users can set their browser to remove or reject the following essential cookies utilized by the Site, set by Shopify:

  • _session_id, unique token, sessional, Allows Shopify to store information about your session (referrer, landing page, etc).
  • _shopify_visit, no data held, Persistent for 30 minutes from the last visit, Used by our website provider's internal stats tracker to record the number of visits
  • _shopify_uniq, no data held, expires midnight (relative to the visitor) of the next day, Counts the number of visits to a store by a single customer.
  • cart, unique token, persistent for 2 weeks, Stores information about the contents of your cart.
  • _secure_session_id, unique token, sessional_storefront_digest, unique token, indefinite. If the shop has a password, this is used to determine if the current visitor has access.

  How You Can Control Advertising Cookies

  The table below lists the types of cookies and third party service providers currently used by Gift for Good but may not include all cookies or third party service providers. In addition, the below list of cookies and third party service providers is subject to change at any time.

  Provider	Purpose	Categories of Personal Information Collected	Opt-Out Options	More Information
  Google LLC	Used for search engine marketing and delivering targeted ads based on user behavior and interests.	Identifiers (e.g., IP address), internet activity, device and browsing data	Google Ad Settings Google Opt-Out Tool	Google Privacy Policy
  Meta Platforms, Inc.	Tracks conversions and user interactions to measure ad performance and target users with relevant ads. Uses cookies and pixels (e.g., "Visitor action pixels").	Identifiers, internet and network activity, user behavior on site (anonymized)	Facebook Account: Settings > Ad Preferences > Ad Settings	Meta Privacy Policy
  Pinterest, Inc.	Enables advertising across Pinterest's platform, including behavior-based targeting.	Device and usage information, activity on and off Pinterest	Device settings, Pinterest Ad Preferences	Pinterest Privacy Policy
  LinkedIn Corporation	Measures ad conversions and effectiveness through LinkedIn's ad services and cookies.	Identifiers, professional information, browsing history	LinkedIn Ad Preferences	LinkedIn Privacy Policy

  Even if you opt out of cookies/ads personalization, you may still see ads based on factors such as your general location derived from your IP address, your browser type, and your search terms. You can also manage cookies for any online advertising service via the consumer choice tools created under self-regulation programs, such as the US-based aboutads.info choices page or the European Union ("EU")-based Your Online Choices. See also the Network Advertising Consumer Opt-Out and/or the Digital Advertising Alliance Opt-Out.

2. Personal Information Received and Disclosed by Gifts for Good

We process your Personal Information for:

• Providing Services: Contract basis
• Order Processing & Delivery: Contract basis.
• Marketing and Communications: Consent basis.
• Improving Products and Analytics: Legitimate interest
• Fraud Prevention and Security: Legal obligation, legitimate interest.
• Compliance with Laws: Legal obligations.

For more detail, please see the "Personal Information Collected by Gifts for Good" section above.

We may disclose Personal Information that we collect or you provide to us as described below:

• Service Providers. Gifts for Good has engaged with third party service providers to facilitate the Gifts for Good Services and operate our business, including without limitation, vendors to facilitate order fulfillment and shipping, payment processors, data base management hosting, information technology, email/SMS delivery, customer support, analytics, data security and compliance services necessary to provide the Services. For each service provider, Gifts for Good will have in place written contracts that describes the purpose of the service and disclosure of Personal Information, and requires the service provider to both keep the Personal Information confidential and not use it for any purpose except performing the services pursuant to such contract, and includes provisions for data protection and security in accordance with applicable laws and regulations. Gifts for Good will also share with advertising partners to allow for the delivery of ads to your device. Gifts for Good may also disclose anonymized and/or aggregated information about visitors to the Platform or our Users' use of the Service that does not identify any individual.

• AI-Enabled Service Providers We may use automated tools, including artificial intelligence (AI) and machine learning technologies, to help provide and improve our Services, personalize your experience, and analyze trends and data. These technologies assist with functions such as customer support, product recommendations, and operational insights.

  We do not use these technologies to make decisions that produce legal or similarly significant effects about individuals without meaningful human involvement, and we do not permit these providers to use your data to train their AI or machine learning models.

  If you have any questions or would like more information, please contact us at: Gifts for Good, Inc., Attention: Privacy Department, 630 1st Ave #204, San Diego, CA 92101, or by email at: hello@giftsforgood.com

• Data Analytics Service Providers. Gifts for Good uses the following third party analytics services:

  • Google Analytics: Gifts for Good utilizes Google Analytics for data analytics to generate insights and recommendations. For more information please see Google's Privacy Policy. However, if you do not want your Personal Information to be used by Google Analytics, you may opt-out by installing Google Analytics Opt-out Browser Add-on.
  • Klaviyo: Gifts for Good utilizes Klaviyo for email and SMS campaign effectiveness and tracking and for user engagement. For more information, please see Klaviyo's Privacy Policy.

• Compliance with Laws and Data Protection. Personal Information may be disclosed to serve our legitimate business interests including:

  • As required by law, such as to comply with a subpoena, respond to a court order, subpoena or a government request (such as a search warrant, or similar legal process) for which we will use commercially reasonable efforts to notify you about law enforcement or court ordered requests for data, unless otherwise prohibited by law.
  • If Gifts for Good is involved in a merger, acquisition, or sale of all or a portion of its assets to transfer or assign your Personal Information as part of such merger, acquisition, sale, or other change of control.
  • To investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies.
  • Enforcing our agreements and polices against you, including for billing purposes.
  • Investigate and defend ourselves against any third-party claims or allegations.
  • To third-party business partners at your direction, if you access or request contact from the third-party business partners through the Services or Platform.

3. Personal Information of Minors

Gifts for Good does not knowingly collect Personal Information from anyone under the age of 13. If we learn we have collected or received Personal Information from anyone under the age of 16 without verification of parental consent, we will delete that information. If a parent or guardian becomes aware that his or her child under the age of 13 has provided Gifts for Good with Personal Information without their consent, he or she should contact Gifts for Good at hello@giftsforgood.com. Gifts for Good will delete such Personal Information from our files within a commercially reasonable time, but no later than required under the applicable law.

4. Retention and Deletion of Personal Information; De-Identified Data

Unless erasure is otherwise requested under applicable law or as otherwise stated in this Privacy Policy, Gifts for Good will retain Personal Information as long as it is necessary to provide services and fulfill our obligations. The criteria used to determine our retention periods include the nature of the information, the purposes for processing, and legal requirements. Personal Information obtained from Platform visitors will be maintained as long as it is necessary to provide requested communications and information-based services or until a visitor exercises the right to opt-out of requested communications or information-based services. Anonymized and pseudo-anonymized data will be retained as long as Gifts for Good determines such data is necessary for its legitimate business interests, but not longer than permitted under applicable data privacy laws.

To the extent Gifts for Good de-identifies any Personal Information, Gifts for Good shall maintain and use such de-identified data without attempting to re-identify the data.

5. Gifts for Good's Security Practices.

We have implemented appropriate administrative, technical and physical security measures that comply with industry standards and applicable laws and regulations to protect Personal Information against unauthorized access, destruction or alteration. However, although we endeavor to provide reasonable security for Personal Information we process and maintain, no security system can ever be 100% secure.

GFG utilizes only PCI-DSS compliant third party payment processors to ensure the security of your personal information. Credit/debit card information provided is encrypted using secure socket layer technology (SSL) and stored with AES-256 encryption.

6. Response To "Do Not Track" Signals

"Do Not Track" is a feature enabled on some browsers that sends a signal to request that a website disable its tracking or cross-website user tracking.

Gifts for Good shall treat any user-enabled Global Privacy Control, such as a browser plug-in or privacy setting, device setting, or other mechanism, that communicates or signals the consumer's choice to opt-out of the sale of their Personal Information as a valid request submitted pursuant to the CCPA for that browser or device, or, if known, for the consumer.

7. Changes to this Privacy Policy

If we make material changes to our Privacy Policy, we will notify you by (1) changing the Effective Date at the top of the Privacy Policy, (2) sending an electronic notification to all active account holders, and (3) adding a banner/notification to the Site itself.

8. Supplemental CCPA and U.S. State Privacy Laws Notices - Notice of Collection

This supplemental notice sets forth the disclosures and rights applicable to residents of California, Connecticut, Colorado, Virginia, Oregon, Texas and Utah. Such consumer privacy notices and rights shall also apply to other state residents to the extent other state consumer privacy laws are implemented following the last effective update to this Privacy Policy.

Gifts for Good collects, uses and/or discloses Personal Information as follows:

Personal Information Collected, Used and/or Disclosed in Preceding 12 Months
Categories of Personal Information	Source of Collection	Purpose of Use	Categories to Whom Gifts For Good Disclosed Personal Information	Purpose of Disclosure
Identifiers & Personal Information Name/Alias	User	Performing Services; Security	Service Provider	Performing Services; Security
Email	User	Performing Services; Security	Service Provider	Performing Services; Security
Address	User	Performing Services	Yes; Service Provider	Performing Services; Security
Cell or Telephone #	User	Performing Services	Service Provider	Performing Services
Unique/Online ID (cookies)	User	Performing Services; Auditing; Security	Service Provider	Performing Services; Auditing; Security; Cross-Context Behavioral Advertising
IP Address	Device	Performing Services; Auditing; Security	Service Provider	Performing Services; Auditing; Security
Credit or Debit Card #/ACH	User *stored as token only	Performing Services; Auditing	Yes; Service Provider *token only exchanged	Payment Processing
Commercial Information Products/Services Purchased-Obtained-Considered	Device Service Provider	Performing Services	Service Provider	Performing Services
Purchasing history/tendencies	Device	Performing Services	Service Provider	Performing Services
Internet/Network Activity Browsing/search history Interaction with site/advertisement	Device; Service Provider	Performing Services	Service Provider	Performing Services; Cross-Context Behavioral Advertising
Geolocation data (non-precise)	Device; Service Provider	Performing Services	Service Provider	Performing Services; Cross-Context Behavioral Advertising
Professional/Employment-Related	User	Employment Application Evaluation	N/A	N/A

Gifts for Good will retain a consumer's Personal Information for no longer than is reasonably necessary to fulfill the purposes outlined in this Privacy Policy, or as required or permitted by applicable law. Specific retention periods for different categories of Personal Information will be provided upon request.

Other Potential Third Party Disclosures: Personal Information may be disclosed to serve our legitimate business interests including:

• As required by law, such as to comply with a subpoena, respond to a court order, subpoena or a government request (such as a search warrant, or similar legal process, for which we will use commercially reasonable efforts to notify you about law enforcement or court ordered requests for data, unless otherwise prohibited by law.
• If Gifts for Good is involved in a merger, acquisition, or sale of all or a portion of its assets to transfer or assign your Personal Information as part of such merger, acquisition, sale, or other change of control.
• To investigate, prevent, or take action regarding suspected or actual illegal activities or to assist government enforcement agencies.
• Enforcing our agreements and polices against you, including for billing purposes.
• Investigate and defend ourselves against any third-party claims or allegations.
• To third-party business partners at your direction, if you access or request contact from the third-party business partners through the Services or Platform.

A. Sale of Personal Information; Sharing of Personal Information; Right to Opt-Out

Gifts for Good does not sell Personal Information collected. However, under the CCPA, some sharing of Personal Information necessary to provide you with personalized ads is considered a "sale," even if no money is exchanged.

Gifts for Good shares Personal Information with third parties for cross-context behavioral advertising purposes as detailed above.

You have the right to opt-out of the "sale" or "sharing" of your Personal Information with third parties who are not our service providers (as those terms are defined by applicable laws) and/or to opt out of cross-context behavioral advertising and targeted advertising. To exercise this right, click the "Do Not Sell or Share My Personal Information" link on the bottom of the Platform page where your information is being collected or go to your account settings. You can also submit a request to opt-out by emailing us at hello@giftsforgood.com with the subject line "Do Not Sell or Share." Finally, if your browser supports it, you can turn on the Global Privacy Control to opt-out of the "sale" or "sharing" of your Personal Information.

B. Collection of Sensitive Information

Gifts for Good does not collect Sensitive Information as that term is defined by the CCPA or applicable U.S. State Privacy Laws, including biometric or government identifiers.

C. Consumer Rights.

Consumers may contact Gifts for Good to exercise the following consumer rights:

1. Request Gifts for Good Disclose At No Charge ("Right to Know"):

• Specific pieces of personal information it has collected about you;
• categories of Personal Information collected, used, and/or disclosed about you;
• categories of sources from which Personal Information is collected;
• business and/or commercial purposes for collecting and disclosing your Personal Information;
• categories of third parties with whom your Personal Information has been disclosed/shared.

Right to Know Requests can be submitted to Gifts for Good by email at hello@giftsforgood.com.

2. Request Gifts for Good to Delete At No Charge ("Right to Delete"):

Deletion Requests can be submitted to Gifts for Good by mail to Gifts for Good at: Gifts for Good, LLC, Attention: Privacy Request to Delete, 630 1st Ave #204, San Diego, CA 92101 or by email at: hello@giftsforgood.com.

D. Request Gifts for Good Correct At No Charge ("Right to Correct"):

Requests that Gifts for Good correct any inaccurate Personal Information collected by Gifts for Good can be submitted by email to hello@giftsforgood.com.

E. Verified Request Process

Gifts for Good will verify all consumer requests prior to taking any action in response to such requests. For consumers that maintain an account with Gifts for Good, it may verify the identity of the consumer making the request by either matching information with the account information on file or through existing account authentication credentials.

Under the CCPA and applicable U.S. State Privacy Laws, you may exercise these rights yourself or you may designate an authorized agent to make these requests on your behalf. Authorized agents must demonstrate they have written authorization from you to make requests on your behalf. Gifts for Good may additionally require the consumer to confirm their identity and verify the authorized agent's permission before complying with any request.

F. Consumer Request Limitations

Please note that these rights are not absolute and in certain cases are subject to conditions or limitations as specified in the applicable state laws, including, but not limited to:

• Gifts for Good is obligated to disclose/delete only upon a verifiable Consumer request from the consumer or an authorized agent acting on behalf of Consumer.
• Consumers may only make a personal information request twice in a 12-month period.
• Deletion is not required if it is necessary for Gifts for Good to maintain the Personal Information to fulfill applicable permissible purposes enumerated pursuant to applicable state consumer privacy laws.

Gifts for Good will confirm and respond to all requests within the timeframe required under applicable state law. In responding to any request to disclose/delete, Gifts for Good shall maintain a record of the requests as required under applicable state law.

G. Non-Discrimination Policy

You have the right not to receive discriminatory treatment for exercising any rights conferred by the CCPA and applicable U.S. State Privacy Laws. Gifts for Good shall not discriminate against a consumer for exercising any statutory consumer privacy rights, including, but not limited to, (a) denying goods or services, (b) charging different prices or rates (including discounts/penalties) that is not directly related to the value provided to Gifts for Good for the Personal Information, (c) suggesting Consumer will receive a different rate/price or different level of quality of goods/services, or (d) providing a different level of quality of goods/services.

Gifts for Good employees, applicants and independent contractors have the right not to be retaliated against for the exercise of their CCPA rights.

H. Right to Appeal

If you are in a jurisdiction that recognizes your ability to appeal a decision made in connection with your attempt to assert a right under applicable U.S. State Privacy Laws, you may file an appeal of our decision refusing your request to exercise your rights under this privacy notice. You may request an appeal of such decision by contacting us at hello@giftsforgood.com. Please provide the state that you are writing from, accompanied with documentation you may have regarding the matter you are appealing. Gifts for Good will respond to your appeal request within the timeframe required under the U.S. State Privacy Laws applicable to your state of residence.

If we deny your appeal, you have the right to file a complaint with your state's consumer protection authority pursuant to the applicable consumer complaint process as set forth in the Appeal Notice.

I. Your California Privacy Rights under California Civil Code Section 1798.83 & Business and Professions Code Section 22581

California law permits Consumers to request and obtain from Gifts for Good once a year, free of charge, certain information about their Personally Identifiable Information ("PII") (as defined by California law) disclosed to third parties for direct marketing purposes in the preceding calendar year (if any). If applicable, this information would include a list of the categories of PII that was shared and the names and addresses of all third parties with which we shared information in the immediately preceding calendar year.

In addition, a business subject to California Business and Professions Code Section 22581 must allow California residents under age 18 who are registered users of online sites, services or applications to request and obtain removal of content or information they have publicly posted. Your request should include a detailed description of the specific content or information to be removed. Please be aware that your request does not guarantee complete or comprehensive removal of content or information posted online and that the law may not permit or require removal in certain circumstances.

J. Accessibility of this Policy.

• You can download and print a copy of this Notice here

K. Contact Us

If you have any questions regarding your Personal Information or about our privacy practices, please contact us at: Gifts for Good, LLC, Attention: Privacy Department, 630 1st Ave #204, San Diego, CA 92101 or by email at: hello@giftsforgood.com

9. Applicable EU GDPR Notices

Data Processor. Gifts for Good is the processor of all Customer Data (as defined in the applicable Terms of Service), including Personal Information input by a Customer, and its Authorized Users, in connection with a Customer's use of the Gifts for Good Services. Gifts for Good's Data Protection Offer can be reached at Gifts for Good, Attention: Privacy Department, 630 1st Ave #204, San Diego, CA 92101. You may contact us at any time by emailing us at hello@giftsforgood.com.

Data Controller. The Personal Information input by (a) visitors in general, and (b) Customer for purposes of establishing a commercial account with Gifts for Good, is controlled by Gifts for Good, 630 1st Ave #204, San Diego, CA 92101. You may contact us at any time by emailing us at hello@giftsforgood.com.

For applicable EU Users, we will only collect and process Personal Information about you where we have lawful bases. Lawful bases include consent (where you have given consent), contract (where processing is necessary for the performance of a contract with you, and "legitimate interests." Where we rely on your consent to process Personal Information, you have the right to withdraw or decline your consent at any time and where we rely on legitimate interests, you have the right to object. If you have any questions about the lawful bases upon which we collect and use your Personal Information, please submit a request through email Gifts for Good at hello@giftsforgood.com

When we transfer Personal Information of individuals from the European Economic Area ("EEA"), Switzerland or the United Kingdom ("UK"), we will enter into a Data Processing Agreement with customers incorporating current Standard Contractual Clauses and the UK Addendum. We also implement additional safeguards where appropriate, such as commercial industry standard secure encryption methods to protect customer data at rest and in transit and other appropriate contractual and organizational measures to ensure the confidentiality, integrity and security of a customer's Personal Information.

You may also have the right to make a GDPR complaint to the relevant Supervisory Authority. A list of Supervisory Authorities is available here: http://ec.europa.eu/justice/data-protection/bodies/authorities/index_en.htm. If you need further assistance regarding your rights, please contact us using the contact information provided below and we will consider your request in accordance with applicable law. In some cases our ability to uphold these rights for you may depend upon our obligations to process personal information for security, safety, fraud prevention reasons, compliance with regulatory or legal requirements, or because processing is necessary to deliver the services you have requested. Where this is the case, we will inform you of specific details in response to your request.

How to Review, Transfer, Restrict the Use of or Request Erasure of Personal Information

IF YOU WOULD LIKE TO:

• Access, review, restrict processing of, or otherwise request erasure of your Personal Information;
• Obtain the identity of the source of any Personal Information collected;
• Request correction of any errors contained within your Personal Information;
• Request Gifts for Good transfer your Personal Information to another service provider;
• Object to the manner in which your Personal Information is processed;
• Lodge a complaint with an EU supervisory authority; or
• Withdraw consent to the collection of your Personal Information

Requests under this Section can be made through email at hello@giftsforgood.com. We will respond in the timeframes required under applicable law.

For all requests made pursuant to this section, Gifts for Good will (a) respond as required under applicable law, (b) provide a copy of any requested Personal Information in a structured, commonly used and machine-readable format, and/or (c) transmit such Personal Information to another service provider without restriction in accordance with applicable law

10. Contact Us

If you have any questions regarding your Personal Information or about our privacy practices, please contact us at: Gifts for Good, LLC, Attention: Privacy Department, 630 1st Ave #204, San Diego, CA 92101 or by email at: hello@giftsforgood.com.

This Privacy Policy was last updated on November 10, 2025