Privacy Policy

Effective date: 17 June 2026 · Version 1.0

1. About this policy

GatherGift ("we", "us", "our") is an Australian-based web platform that allows parents and organisers to create shareable group gift pages for children's birthday celebrations.

This Privacy Policy explains what personal information we collect, how we use and store it, where it is held, and your rights in relation to it. We are committed to complying with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

By using GatherGift, you consent to the practices described in this policy. If you do not agree, please do not use the platform.

2. Who we are

GatherGift is operated by GatherGift ABN: 17 168 292 435 gathergift.au@gmail.com, based in Sydney, Australia. For all privacy-related enquiries, contact us at: gathergift.au@gmail.com

3. What information we collect

We collect the following personal information:

  • Account information: name and email address when you register as a Recipient.
  • Gift page content: title, message text, and photos uploaded by Recipients to their GatherGift pages. Please note that this content is publicly accessible to anyone with your shared link.
  • Payment link information: external payment URLs provided by Recipients (e.g. PayPal, Stripe Link, or PayID). We do not collect, store, or process any payment card details, bank account numbers, or financial transaction data.
  • Contribution data: where a Contributor selects a gift item preference, we record that preference and the contribution amount. No financial data is collected by GatherGift directly.
  • Usage data: IP address, browser type, device type, pages visited, and interaction data collected automatically through cookies and analytics tools.
  • Communications: any messages or enquiries you send to us directly.

We do not knowingly collect personal information from children under the age of 18. The platform is intended for use by adults only.

4. How we use your information

We use your personal information to:

  • Create and manage your GatherGift account.
  • Display your GatherGift page to Contributors via your unique shared link.
  • Record gift item preferences submitted by Contributors.
  • Communicate with you about your account, your gift pages, or platform updates.
  • Improve and develop the platform using aggregated analytics data.
  • Comply with our legal obligations under Australian law.
  • Investigate and respond to suspected fraud or misuse of the platform.

5. Disclosure of information to third parties

We do not sell your personal information to third parties.

We may disclose your information to:

  • Base44 Inc. (USA): GatherGift is built and hosted on the Base44 platform. All application data, including account information and gift page content, is stored on Base44 servers located in the United States. See Section 6 for full details of this cross-border disclosure.
  • Analytics providers: third-party tools used to understand how users interact with the platform. Data shared is aggregated and de-identified where possible.
  • Law enforcement or regulators: where required by Australian law, or to protect the rights, property, or safety of GatherGift, our users, or the public.
  • Successors: in the event of a business sale, merger, or acquisition, personal information may be transferred to the successor entity subject to equivalent privacy protections.

6. Overseas disclosure — Base44 (United States)

GatherGift is built on Base44, a software platform operated by Base44 Inc., a company incorporated in the United States.

Important: By using GatherGift, your personal information will be transferred to and stored on servers located in the United States, operated by Base44 Inc. This is an overseas disclosure for the purposes of Australian Privacy Principle 8.

We are required under APP 8 to take reasonable steps to ensure that Base44 Inc. handles your personal information in a manner consistent with the Australian Privacy Principles. We have satisfied ourselves of this in the following ways:

  • Base44 Inc. maintains a Data Processing Agreement (DPA) that governs the handling of personal data and requires compliance with applicable international data protection laws.
  • Base44 Inc. uses approved cross-border data transfer mechanisms including Standard Contractual Clauses (SCCs) and participation in the EU-US Data Privacy Framework (DPF) where applicable.
  • Base44 Inc. implements technical and organisational security measures including encryption, access controls, annual penetration testing, and an annual security training program for all personnel.
  • Base44 Inc. does not sell personal data received through its platform.

You can review Base44's privacy policy at base44.com/privacy-policy and their Data Processing Agreement at base44.com/dpa.

By consenting to this Privacy Policy, you expressly consent to the transfer of your personal information to the United States for storage and processing by Base44 Inc. as described above. If you do not consent to this transfer, please do not use GatherGift.

7. Public gift pages

GatherGift pages are accessible to anyone who has your unique link. The link is not published or indexed by search engines by default, but it can be shared freely and there is no access restriction once the link is known.

We strongly recommend that you:

  • Do not include your full address or any location-specific information on your gift page.
  • Exercise care when including photos that identify a child's school, suburb, or routine.
  • Only share your unique link with people you trust.
  • Do not post your link publicly on open social media feeds or public groups.

GatherGift is not responsible for the consequences of a user sharing their unique link beyond their intended audience.

8. Payment processing

GatherGift processes all contributions through Stripe, a third-party payment provider. We use Stripe Connect to route funds between Contributors and Recipients.

Card data: When a Contributor makes a payment, they are redirected to Stripe's secure checkout page. GatherGift does not collect, store, or handle credit card or bank account details. All payment card information is processed entirely by Stripe in accordance with the Stripe Privacy Policy.

Transaction breakdown: Each contribution is itemised on the Stripe checkout page as separate line items, which may include the gift contribution, an optional platform tip, an optional charity donation, and an estimated Stripe processing fee. This breakdown is visible to the Contributor before payment is confirmed.

Fund routing: The gift portion is transferred by Stripe directly to the Recipient's connected Stripe Express account via a destination charge. Optional tips and charity donations are collected as a platform application fee and held in GatherGift's Stripe operating account. GatherGift manually remits charity donations to the selected charity after the collection closes.

Payouts: Funds are released to the Recipient's bank account either manually by the Recipient or automatically on a scheduled date, via Stripe's payout system. Stripe typically holds funds for approximately 2 business days for clearing before the payout is released.

Transaction records: GatherGift stores transaction metadata received from Stripe, including the contributor's name, email, message, gift item preference, contribution amounts (gift, tip, charity, fee, total), and payment status. This information is used to display contributions on the gift page, provide Recipients with contribution summaries, and maintain records for dispute resolution and platform integrity.

Recipient onboarding: Recipients must complete Stripe Express onboarding and provide their bank account details directly to Stripe before their gift page can accept contributions. GatherGift does not store bank account numbers — these are held securely by Stripe.

9. Cookies and analytics

We use cookies and similar tracking technologies to understand how users interact with the platform and to improve functionality. Cookies may collect your IP address, browser type, device type, and pages visited.

You can control cookie preferences through your browser settings. Disabling cookies may affect some features of the platform.

We do not use cookies to serve advertising or to track users across third-party websites.

10. Data security

We take reasonable technical and organisational steps to protect your personal information from misuse, loss, unauthorised access, modification, and disclosure.

Security measures applied by Base44 to data stored on their platform include encryption in transit and at rest, restricted personnel access, annual penetration testing, and documented information security policies reviewed annually.

However, no method of internet transmission or electronic storage is completely secure. We cannot guarantee the absolute security of your personal information and encourage you to take care when sharing sensitive information online.

11. Data retention

We retain your personal information for as long as your account is active or as needed to provide the platform, comply with legal obligations, or resolve disputes.

Gift pages and associated contribution preference data are retained for a minimum of 12 months after the page is closed or deactivated, for the purposes of dispute resolution and platform integrity.

You may request deletion of your account and associated data at any time by contacting gathergift.au@gmail.com. Note that some information may be retained where required by law or for legitimate fraud prevention purposes.

12. Children's privacy

GatherGift is a platform for use by adults (18+). Children are not intended users and should not create accounts.

The platform is designed to help parents and family members organise group gifts for children's birthday celebrations. If you upload photos or information relating to a child, you confirm that you are the parent or legal guardian of that child, or that you have obtained appropriate consent, and that the content you upload is appropriate.

We recommend avoiding content that could compromise a child's privacy or safety, including images that identify a child's school, address, or regular location.

13. Your rights under the Australian Privacy Principles

Under the Privacy Act 1988 (Cth) and the Australian Privacy Principles, you have the right to:

  • Access the personal information we hold about you.
  • Request correction of inaccurate, incomplete, or out-of-date information.
  • Request deletion of your personal information, subject to legal retention obligations.
  • Opt out of direct marketing communications at any time.
  • Make a complaint about how we have handled your personal information.

To exercise any of these rights, please contact us at gathergift.au@gmail.com. We will acknowledge your request within 5 business days and respond in full within 30 days.

14. Complaints

If you believe we have breached the Australian Privacy Principles or mishandled your personal information, we encourage you to contact us first at gathergift.au@gmail.com so we can attempt to resolve the matter directly.

If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC):

  • Website: www.oaic.gov.au
  • Phone: 1300 363 992
  • Post: GPO Box 5218, Sydney NSW 2001

15. Changes to this policy

We may update this Privacy Policy from time to time to reflect changes in our practices, the platform, or applicable law. Where changes are material — including any changes to overseas data storage arrangements — we will notify registered users by email and display a prominent notice on the platform.

The updated policy will be effective from the date stated at the top of this page. Continued use of GatherGift after that date constitutes your acceptance of the updated policy.

We recommend reviewing this policy periodically. The version history is maintained below the effective date for reference.

16. Contact us

For all privacy-related questions, access requests, or complaints:

Email: gathergift.au@gmail.com

Website: https://gathergift.com.au