Privacy Policy - BaeGifts

Last updated: 2026-08-14

This policy explains, in plain language, what BaeGifts collects when you shop with us, why we need it, and who else sees it. If anything here is unclear, ask us — the contact details are at the bottom.

This store is operated by BaeGifts (“we,” “us”). The fastest way to reach us is our contact form; our support mailbox is support@baegifts.com.

What we collect

Only what an order actually needs, plus what you choose to send us.

Order details: your name, email address, shipping address, billing address, and phone number if you provide one.
Personalization content: the names, dates, initials, messages, and photos you enter for a personalized item. We treat this as part of your order and pass it to the partner who makes the item.
Messages you send us: anything you write in our contact form or email us directly.
Account details: if you create an account, your email address and a password we never see in readable form.
Basic technical data: our web server records IP addresses, browser type, and requested pages in its standard logs, as almost all websites do.

How your payment is handled

Card payments are processed by Stripe. Your card number is entered into Stripe’s own payment fields and goes directly to Stripe — it does not pass through, and is not stored on, our website. We can see the last four digits, the card brand, and whether the payment succeeded. We never see or store full card numbers or security codes.

Stripe processes this data as an independent company under its own privacy policy.

We share the minimum needed to make and deliver your gift:

Fulfillment partners — ShineOn, Printify, and CJdropshipping. They receive the item ordered, your personalization details, and your shipping address so they can produce and ship it. They do not receive your payment details.
Shipping carriers — they receive the delivery address and contact details needed to deliver the parcel.
Stripe — for payment processing, as described above.
Our email provider — to send order confirmations, shipping notifications, and, if you opted in, marketing email.

We do not sell your personal information for money. We do, however, use advertising and analytics tools that under California law count as “sharing” personal information for cross-context behavioural advertising — specifically the Meta (Facebook) pixel and Google Ads conversion tracking described under Cookies and tracking below. You can opt out of these at any time, and we do not knowingly share the information of anyone under 16.

Cookies and tracking

BaeGifts uses Google Analytics 4 (through the Google Site Kit plugin) to understand how visitors use the site — which pages and products are viewed, how people arrive at the site, roughly where in the world they are (city or region level, estimated from their IP address), and which device and browser they use. On our store pages this also includes shopping activity, such as which products are viewed, added to the cart, and purchased, and the value of an order. This helps us improve the store and our gift recommendations.

This analytics data is about how the site is used, not about who you are — we do not send your name, email address, or postal address to Google Analytics. Google processes the data as a service provider under its own privacy policy. We have turned off Google’s optional data-sharing and advertising-personalization settings.

We also use Google Search Console to see how the site performs in Google Search — the search terms that bring people to us, and our clicks and rankings. Search Console reports on Google’s own search data and does not add tracking cookies to this site.

We use the Meta (Facebook) pixel, through the official Facebook for WooCommerce plugin, and Google Ads conversion tracking, through the official Google Listings & Ads plugin. These tell us which of our social posts and ads actually lead to someone buying a gift, and they let Meta and Google measure and target advertising. They can record pages you viewed, products you looked at, and that a purchase happened, together with an identifier for your browser or your Meta/Google account. Meta and Google act as independent controllers of that data under their own policies (Meta, Google). Some of this is sent directly from our server to Meta rather than from your browser (Meta calls this the Conversions API), and it can include a hashed version of contact details you gave us at checkout — hashed meaning scrambled into an irreversible string, not readable text. Whether that extra matching is switched on is controlled by Meta’s own configuration for our account, so it may or may not apply at any given time. Where consent is required and you have not accepted advertising, we hold both the browser pixel and the server-side sending — nothing goes to Meta at all.

Our own first-party measurement

We run a small amount of our own measurement rather than relying only on third parties. It stores no name, email or address, and it is never sold or shared:

bgm_v (30 days) — one random, opaque ID so we can tell that a visit which came from a particular post later became an order. It is how we know which content is worth making more of.
bgm_p (30 days) — if you arrived through a partner or affiliate link, this records which partner so we can pay them their commission. It records nothing about you, and the partner is never told who you are — only that a sale happened.
bgm_consent (180 days) — remembers whether you said yes or no to the above, so we do not ask again on every page. This one is strictly necessary: it exists to honour your choice.

The other cookies the site sets are:

Analytics cookies set by Google Analytics to measure visits and the shopping activity described above.
Advertising cookies set by Meta and Google for the conversion measurement described above.
Cart and session cookies set by WooCommerce, so your cart survives moving between pages. Blocking these breaks the cart and checkout.
Stripe cookies used for payment processing and fraud prevention on the checkout page.
WordPress login cookies, which only apply to store staff who sign in to the admin area.

If you are visiting from the UK, the EU/EEA or Switzerland, we ask before anything non-essential is stored on your device. Until you accept: our own measurement cookies are not set, the Meta pixel is not loaded at all, and Google’s tags run in consent mode with storage denied. Declining is one click and exactly as easy as accepting, and nothing is stored if you simply ignore the banner. Outside those regions we treat continued use as consent for these measurement cookies, which is the standard practice there — and everything in Your choices and rights still applies to you.

You can change your mind at any time by clearing this site’s cookies in your browser, which removes your recorded choice and makes us ask again. You can also block or clear cookies entirely in your browser settings, and you can opt out of Google Analytics on every site you visit using Google’s opt-out browser add-on. If we add further advertising tools later, we will update this section before turning them on.

Marketing email

We only add you to our marketing list if you ask us to, by entering your email in a signup form. Every marketing email includes an unsubscribe link, and unsubscribing does not affect the transactional emails about an order you have placed.

How long we keep it

We keep order records for as long as we need them to support the order, handle returns, and meet accounting and tax obligations. Contact-form messages are kept while the conversation is useful and then deleted.

In practice, order records are kept for up to seven years, consistent with US tax record-keeping requirements, and then deleted or anonymized.

Your choices and rights

You can ask us to:

tell you what personal information we hold about you;
correct anything that is wrong;
delete your information, where we are not required to keep it (for example, completed order records we must retain for tax);
send you a copy of your information;
stop sending you marketing email.

We will not treat you differently for making a request.

California residents

If you live in California, the California Consumer Privacy Act gives you the rights listed above, including the right to know what we collect, the right to have it deleted, the right to correct it, and the right to opt out of the sale or sharing of your personal information. We do not sell or share personal information for advertising, so there is nothing to opt out of, but the right to ask still stands. You may use an authorised agent to make a request on your behalf. We will verify a request by matching it to the email address and order details we already hold.

Security

The site is served over HTTPS, so information you submit is encrypted in transit. Payments are handled by Stripe rather than stored here. Admin access is limited to people who need it. No website can promise perfect security, and we will not pretend otherwise.

Children

BaeGifts is intended for adults buying gifts. We do not knowingly collect personal information from children. If you believe a child has given us their information, contact us and we will delete it.

Changes to this policy

If this policy changes, we will update the date at the top of the page. Significant changes will be described here rather than made quietly.

Contact us

For any privacy question or request, use our contact form or email support@baegifts.com.