Privacy Policy
A clear overview of how CupyGift handles information across the website, customer support and personalized digital gift services.
Last updated · August 1, 2026This Privacy Policy applies to visitors and customers located in the United States. It should be read together with our Data Protection Notice and Cookie Policy.
CupyGift is operated from Türkiye. We aim to handle information about our US customers in a manner consistent with applicable US federal and state privacy laws, including the specific rights available to California residents described in our Data Protection Notice.
Who We Are
Netgrap Bilişim Hizmetleri Ticaret Limited Şirketi operates CupyGift and determines why and how personal information is processed for the activities described in this Policy.
Information We Collect
- Identity and contact data: name, email address, telephone number and billing details.
- Order data: selected product, personalization choices, order number, price, payment status and delivery history.
- Creative materials: photographs, video, audio, names, dates, stories, messages and instructions supplied for production.
- Payment data: payment status, transaction references and limited billing information. Full card details are handled by the payment provider, and CupyGift does not intend to store them.
- Support data: emails, WhatsApp messages, revision requests, complaints and other correspondence.
- Technical data: IP address, device and browser information, security logs, pages visited and referral information.
- Preference data: language, cart contents, cookie choices, marketing permissions and portfolio permissions.
How We Use Your Information
- to create, personalize, revise and deliver the product you ordered;
- to manage payment, invoicing, order confirmation and customer support;
- to verify instructions and prevent fraud, misuse or unauthorized access;
- to maintain website functionality, security and service availability;
- to meet accounting, tax, consumer protection and other legal duties;
- to establish, exercise or defend legal claims;
- to measure website use and advertising only where the required permission has been given;
- to send marketing messages only where you have opted in or another lawful basis applies.
Your Photos and Creative Materials
Creative materials are used to fulfill the specific order, make requested revisions, deliver the finished digital product and provide support. They are not published as examples, advertising or social media content unless separate, optional permission is obtained.
A customer who supplies information about another person must have a lawful basis and the authority to share it. Anyone who believes their material was submitted without authority may contact us to request a review, restriction or deletion.
How We Share Information
Information may be shared only as necessary with hosting and infrastructure providers, payment providers, email and communication providers, analytics and advertising providers used with permission, professional advisers and competent public authorities. To prepare personalized products, we may use video, image, audio, music, animation, file storage, file transfer, rendering or AI-assisted production services.
We do not sell your personal information, and we do not share it for cross-context behavioral advertising, other than through the consent-based analytics and advertising-measurement tools described in our Cookie Policy.
International Processing
Because the controller is established in Türkiye, information you submit will be processed in Türkiye. Some service providers may also process data in the United States or other countries as part of hosting, payment, analytics or communication services.
We take reasonable steps to require service providers to protect information appropriately regardless of where it is processed.
Retention and Security
Information is retained only for the period required for the relevant purpose. Order and accounting records are kept for statutory retention periods. Creative materials are kept for production, revisions, delivery and a limited support period, then deleted or isolated unless a dispute, legal duty or separate portfolio permission requires longer storage.
We use access controls, restricted administrative access, encryption in transit, logging and reasonable technical and organizational measures appropriate to the nature of the data. No internet service can guarantee absolute security.
Your Choices and Rights
Depending on where you live, you may be able to request access to, correction of, or deletion of your personal information, opt out of certain uses, or ask about the categories of information we have collected and shared. You may withdraw a consent-based permission (such as marketing or optional analytics) at any time; this does not affect processing that already took place while the permission was active.
Full details, including the specific rights available to California residents, are provided in the Data Protection Notice.
Contact and Changes
We may update this Policy when services, providers or legal requirements change. Material changes will be highlighted through an appropriate notice or, where required, by asking you to confirm your choices again.