Privacy Policy

Last updated: July 2027

1. Who We Are

Ribbon Route ("Ribbon Route", "we", "our", or "us") is a gift purchasing, gift wrapping, and delivery service based in Germany.

We are the data controller responsible for processing your personal data in accordance with the General Data Protection Regulation (GDPR) and other applicable data protection laws.

Data Controller

Ribbon Route
Megan Stone
48 Leopoldstraße, Munich, 80802
Email: megsstone1207@hotmail.com

2. The Information We Collect

When you use our website or place an order, we may collect the following information:

Information you provide

• Name

• Email address

• Billing address

• Delivery address

• Recipient's name

• Gift message

• Bespoke gift wrapping preferences

• Product links for items you would like us to purchase

• Any additional information you choose to include with your order or enquiry

  
  

Payment information

Payments are securely processed by Stripe. We do not store or have access to your full payment card details.

Website information

When you visit our website, we may automatically collect limited technical information, including:

• IP address

• Browser type

• Device information

• Pages visited

• Cookie data (where applicable)

3. How We Use Your Information

We use your personal information to:

• Process and manage your order.

• Purchase gifts on your behalf.

• Prepare, wrap and deliver your order.

• Contact you about your order.

• Respond to enquiries and provide customer support.

• Prevent fraud and protect our business.

• Comply with legal and accounting obligations.

• Improve our website and services.

Where you have given your consent, we may also send you marketing communications. You can unsubscribe at any time.

4. Legal Basis for Processing

We process your personal information on one or more of the following legal bases:

• Performance of a contract with you.

• Compliance with legal obligations.

• Our legitimate interests in operating and improving Ribbon Route.

• Your consent, where required (for example, marketing communications or non-essential cookies).

5. Who We Share Your Information With

We only share your personal information where necessary to provide our services.

This may include:

• Tally, to securely collect and process information submitted through our order forms.

• Stripe, to securely process payments.

• Shipping and courier providers responsible for delivering your order.

• Retailers from whom we purchase your selected gifts.

• Professional advisers, such as accountants, where required for legal or financial purposes.

• Government authorities where required by law.

All third-party service providers are expected to process personal information securely and in accordance with applicable data protection laws.

We do not sell your personal information.

6. International Transfers

Some of our service providers may process personal information outside the European Economic Area (EEA).

Where this occurs, appropriate safeguards are implemented in accordance with GDPR requirements to protect your personal information.

7. How Long We Keep Your Information

We retain personal information only for as long as necessary to fulfil the purposes described in this Privacy Policy or to comply with legal obligations.

For example:

• Order information may be retained to meet accounting and tax requirements.

• Customer enquiries may be retained to provide ongoing support.

• Marketing preferences are retained until you withdraw your consent.

When information is no longer required, it is securely deleted or anonymised.

8. Cookies

Our website may use cookies to improve functionality, analyse website performance and enhance your browsing experience.

Where required by law, we will ask for your consent before placing non-essential cookies on your device.

You can manage your cookie preferences through your browser settings.

9. Your Rights

Under the GDPR, you have the right to:

• Request access to your personal information.

• Request correction of inaccurate or incomplete information.

• Request deletion of your personal information in certain circumstances.

• Restrict or object to the processing of your information.

• Withdraw your consent where processing is based on consent.

• Request a copy of your personal data in a portable format where applicable.

• Lodge a complaint with a supervisory authority.

To exercise any of these rights, please contact us using the details provided below.

10. Data Security

We take appropriate technical and organisational measures to protect your personal information against unauthorised access, alteration, disclosure or destruction.

However, no method of transmitting or storing data electronically can be guaranteed to be completely secure.

11. Third-Party Websites

Our website may contain links to third-party websites.

We are not responsible for the privacy practices or content of those websites and encourage you to review their privacy policies before providing any personal information.

12. Children's Privacy

Ribbon Route is intended for customers aged 18 or over.

In some cases, orders may be sent to children as recipients. Where this occurs, we process only the personal information necessary to prepare and deliver the order, such as the recipient's name and delivery address, on behalf of the purchasing customer.

We do not knowingly collect personal information directly from children or provide services directly to individuals under the age of 18.

13. Changes to This Privacy Policy

We may update this Privacy Policy from time to time to reflect changes in our business or legal requirements.

The most recent version will always be published on our website with the updated revision date shown at the top of this page.

14. Complaints

If you have any concerns about how Ribbon Route handles your personal information, we encourage you to contact us first so we can try to resolve the issue.

You also have the right to lodge a complaint with the competent data protection supervisory authority if you believe your personal data has been processed in breach of applicable data protection laws.

15. Contact Us

If you have any questions about this Privacy Policy or how Ribbon Route processes your personal information, please contact us:

Ribbon Route
Megan Stone
48 Leopoldstraße, Munich, 80802
Email: megsstone1207@hotmail.com