Privacy Policy

This policy applies when you browse or use RibiStore, create an account, buy or receive a gift card, list or claim a business, manage a merchant storefront, contact support, or otherwise interact with our services. A merchant may separately process information when you contact or buy from that merchant directly.

We may collect account and identity information; contact details; gift sender and recipient details; transaction and payment-related information; business and verification information; catalogue content; support communications; device, browser, IP address and usage data; approximate location derived from your device or IP where permitted; and preferences such as language or market. Payment-card details may be collected directly by our payment provider rather than stored by RibiStore.

We may use publicly available business information to create or maintain factual directory listings, including business name, category, location, public contact information, opening hours and public website or social links. An unclaimed listing does not imply a partnership with RibiStore. Business owners can request corrections, claim a listing or contact us about removal.

We use information to provide accounts and storefronts; process and deliver gift cards; support redemption; route ordinary product or service enquiries to merchants; verify business claims; prevent fraud and abuse; enforce transaction limits; provide customer support; improve search and discovery; maintain security; comply with legal obligations; communicate service updates; and, where permitted, measure and improve our services.

Where data-protection law requires a legal basis, we rely as appropriate on performance of a contract, legitimate interests, compliance with legal obligations and consent. Our legitimate interests include operating and securing the service, preventing fraud, maintaining accurate business listings and improving discovery. You may withdraw consent where processing is based on consent.

Gift-card payments may be processed by third-party payment providers. We and our providers may use transaction, device and account information for payment processing, authentication, fraud screening, sanctions or other compliance checks. RibiStore may apply transaction minimums, maximums or other controls for risk, compliance and operational reasons.

We may share information with participating merchants where necessary to fulfil or redeem a gift; payment, hosting, communications, analytics, identity-verification and security providers; professional advisers; authorities where legally required; and a buyer or successor in connection with a corporate transaction. We do not sell personal information as a standalone business model.

RibiStore is designed for businesses and customers across multiple markets. Your information may therefore be processed outside the country where you live. Where required, we use appropriate safeguards for international transfers and require service providers to protect information consistently with applicable law.

We keep personal information only for as long as reasonably necessary for the purposes described in this policy, including account operation, transaction records, fraud prevention, dispute handling and legal, tax or accounting requirements. Retention periods can differ by data type and jurisdiction.

We use reasonable technical and organisational safeguards designed to protect information against unauthorised access, loss, misuse or alteration. No internet service is completely secure, so we cannot guarantee absolute security. Keep account credentials confidential and contact us promptly if you suspect unauthorised access.

Depending on where you live, you may have rights to access, correct, delete, restrict or object to processing, obtain a portable copy of certain information, withdraw consent, or complain to a data-protection authority. Some rights are subject to legal exceptions, including where we must retain transaction or compliance records.

We may use essential technologies to operate sessions and security and, where permitted, analytics or preference technologies to understand use of the service. Where consent is required, non-essential technologies should not be used until the relevant choice is made.

RibiStore is not intended for children who cannot lawfully enter into the relevant transaction or consent to data processing in their jurisdiction. We do not knowingly seek to collect personal information from children in breach of applicable law.

We may update this policy as RibiStore develops or legal requirements change. We will post the updated version here and change the effective date. Material changes may also be communicated through the service or by email where appropriate.

For privacy questions, rights requests or concerns, contact support@ribistore.com. We may need to verify your identity before completing certain requests.