Who controls your data
Lokul tech and marketing is the data controller for personal data processed through Send A Smile Online. We decide why and how that data is used to provide the service.
Data we collect and why
- Account data: a sender’s name, email address, login information, and account identifiers, used to create and secure an account and provide the service under our contract.
- Gift and recipient data: recipient names and email addresses, gift selections, messages, delivery timing, and claim status, used to create, deliver, and track the gift box under our contract and our legitimate interest in operating the service.
- Support communications: messages and information you provide when requesting help, used to respond to you and resolve issues.
- Technical and usage data: device and browser information, IP address, timestamps, security logs, and interactions with the service, used for security, fraud prevention, reliability, and product improvement based on our legitimate interests.
- Marketing preferences: where offered, your choice to receive or stop receiving marketing, processed with consent or as otherwise permitted by law.
Stripe, our payment provider, handles payment details. We do not receive or store your full payment-card details.
How we share data
We share only what is reasonably needed with:
- hosting, database, email, analytics, security, and customer-support service providers;
- Stripe, for payments, invoicing, tax calculation, refunds, and fraud prevention;
- professional advisers such as legal and accounting providers;
- authorities or other parties when required by law, to protect rights and safety, or in connection with a business transfer.
We do not sell personal data.
Retention
We keep account, gift, transaction, and support information only as long as needed to provide the service, meet legal and tax obligations, resolve disputes, prevent fraud, and enforce agreements. When it is no longer needed, we delete or anonymise it. Retention periods may differ by data type and legal requirement.
Your choices and rights
Depending on where you live, you may ask to access, correct, delete, restrict, or receive a copy of your personal data, object to certain processing, or withdraw consent. You may also complain to your local data-protection authority. Where UK or EEA law applies, we normally respond within one month.
To make a privacy request, use the support contact or account-help option provided in Send A Smile Online and clearly label the request “Privacy request.” We may need to verify your identity before acting.
International transfers
Some providers may process data outside your country, including outside the UK or EEA. Where required, we use recognised safeguards such as adequacy decisions or standard contractual clauses.
Security
We use appropriate technical and organisational measures, including access controls, protected connections, private recipient links, and restricted account access. No online system can be guaranteed completely secure.
Cookies and local storage
Send A Smile Online uses essential cookies or similar storage for sign-in, security, checkout, and core functionality. If analytics or marketing cookies are introduced, they will be identified and, where required, offered through a preference choice. You can also control cookies through your browser, although blocking essential cookies may stop parts of the service from working.
Changes
We may update this notice as the service or law changes. The date above shows the latest revision.