Privacy Policy

New accounts are limited to people aged 18 or over. Before requesting your name, email or password, we ask for your birth date to screen eligibility. The server checks the declared date again. This is a self-declared age screen, not identity verification. We do not save the full birth date in your account; we record the successful check time and applicable policy version.

An ineligible result stops registration before account details are requested. This browser may retain a session-only blocked-registration flag, not the birth date. Existing accounts are not treated as age-verified by this change. If you believe a child has provided personal information, contact us so we can investigate and take appropriate action.

Our application serves its web font from GuluGift itself and uses device fonts as fallbacks; it does not request fonts from Google Fonts or another font CDN. GuluGift does not install session-replay or keystroke-recording tools on its pages. Necessary hosting logs and payment-provider security checks are separate from session replay.

Creating an account or paying for an order does not subscribe you to marketing. Promotional email requires a separate recorded permission. Each promotional email identifies the operator and its postal address and includes a link to stop all marketing email without signing in or paying. We store the opt-out so it is checked before later promotional sends; an email already being transmitted may still arrive.

Necessary order, account and security messages are separate and are not stopped by marketing opt-out. Unsubscribe links contain an opaque opt-out token rather than your email address; visiting a link displays a confirmation page, while the email client’s one-click unsubscribe request can submit the opt-out directly.

If you create an account, we process your email address, display name, password hash, account status, and membership details. Account registration is optional for purchases that support guest checkout. Passwords are stored as hashes rather than readable passwords.

When you place an order, we process your buyer name, email address, selected streamer, food or gift selections, quantities, messages you choose to include, and order, payment, delivery, and refund records. If you provide a social-media handle or contact us for help, we also process the information you choose to share.

For streamer services and fulfilment, we process streamer profile details and recipient contact and delivery information where needed. Our hosting and security services may also process technical information, such as IP addresses, request timestamps, and error logs, to operate and protect the service.

We use personal information to create and protect accounts, apply membership benefits, process food and gift orders, arrange fulfilment, confirm payments, provide order tracking, handle refunds, and answer support requests.

We also use relevant records to prevent misuse, resolve disputes, maintain service reliability, and meet applicable accounting and legal obligations. Order confirmations and other necessary service messages are separate from any marketing communications that require your consent.

Payments are handled through the payment provider selected at checkout, such as Stripe or PayPal, depending on the available payment channel. The provider processes payment credentials under its own privacy policy. GuluGift does not store your full payment-card number or card security code.

We retain information needed to reconcile purchases and refunds, including the provider, transaction or checkout reference, amount, currency, payment status, and relevant provider responses. Please review the selected provider’s privacy information when completing a payment.

Information relevant to your order may be made available to authorised GuluGift operators, the recipient streamer, and fulfilment partners to process and deliver your purchase. Order messages and display names may be seen by the recipient streamer; please avoid including sensitive information or another person’s private details in a message.

We use service providers for hosting and database storage, payments, and, where configured, transactional email and internal order notifications. For example, order confirmations may be sent through Resend, and operational order information may be sent through Feishu/Lark. Relevant information may also be disclosed when required by law or needed to address fraud, disputes, or security incidents.

The storefront uses browser local storage to retain your sign-in token and language preference. A language-preference cookie helps preserve your selected language. These features support account access and the browsing experience.

Signing out removes the storefront sign-in token from that browser. You can also clear site data or manage cookies through your browser settings, which may sign you out or reset your preferences. A payment provider may use its own cookies or similar technologies during checkout.

Our operator is based in Hong Kong, and GuluGift serves users internationally. Hosting, payment, communication, and fulfilment providers may process information in other countries or regions. Relevant records may therefore be processed outside your place of residence, where privacy laws may differ. You can contact us for information about the arrangements relevant to your use of the service.

We retain personal information for as long as needed to provide the service, manage account and membership records, fulfil orders, handle refunds and disputes, and meet applicable legal obligations. Different records may need to be retained for different periods; deleting an account does not necessarily remove transaction records that must be kept.

We use measures such as password hashing and access controls to protect information. No online service or storage system can guarantee absolute security. Please protect your login credentials and avoid sending passwords or payment-card details in order messages or support emails.

You may contact us to request access to, correction of, or deletion of your personal information, or to ask about other rights available under applicable law. We may need to verify your identity and the relevant account or order before acting on a request. Some records may need to be retained for legal, fraud-prevention, or dispute-resolution purposes.

You can browse without registering, use guest checkout where available, sign out, and clear browser site data. If you believe a child has provided personal information without appropriate consent, please contact us so we can review the situation.

These terms and conditions and any separate agreements whereby we provide you services shall be governed by and construed in accordance with the laws of Hong Kong.

For privacy questions or requests, contact us using the email or registered address below. Please describe your request and include only the account or order details necessary for us to identify the relevant records.

We may update this policy as our services or legal requirements change. The date at the top of this page identifies the latest revision; where required, we will provide additional notice of material changes.