Privacy Policy

1. Introduction

This Privacy Policy explains how Triagiftcardbalance handles personal data in connection with the website and related communications. It describes the categories of data that may be processed, the purposes of processing, the legal bases that may apply, the way data may be stored, and the choices available to individuals. This policy applies to information submitted through the website, information generated through technical interaction with the site, and administrative records linked to the operation of the website.

2. Data Controller Context

Triagiftcardbalance acts as the controller of personal data processed through this website for the purposes described in this Privacy Policy. This means the website determines the purpose and general manner in which personal data is handled in connection with contact requests, website administration, security review, and policy management. Where third-party service providers are used for technical or operational support, they may act as processors under appropriate instructions limited to the relevant purpose.

3. Categories of Personal Data

The personal data processed through this website may include name, email address, phone number where provided, subject line, message content, correspondence history, IP address, browser type, device-related data, cookie identifiers, and technical log information. The exact categories depend on how the website is used and what information a user chooses to provide when making contact. The website is structured to avoid collection of unnecessary data and to limit processing to information relevant to the identified purpose.

4. Sources of Personal Data

Personal data may be obtained directly from the individual when a contact form is completed or an email is sent to the website. Technical information may be generated automatically through interaction with the site, including server records, browser requests, cookie preferences, and standard usage data linked to page access. Some information may also arise from follow-up correspondence where a previous message needs to be reviewed for continuity of communication.

5. Purposes of Processing

Personal data may be processed for handling enquiries, preparing and sending replies, maintaining communication records, managing website administration, reviewing technical performance, supporting security controls, maintaining internal records, and applying cookie choices where relevant. Data may also be processed where necessary to maintain the integrity of the website, review misuse of communication channels, or keep records linked to operational obligations.

6. Legal Bases for Processing

Processing may rely on one or more legal bases depending on the context. These may include consent where a user voluntarily submits an enquiry through the contact form and confirms the related statement, legitimate interests where processing is necessary for website administration or communication handling and those interests are balanced against individual rights, legal obligation where processing is required by applicable law, and contractual necessity where a communication relates to a requested pre-contractual step or comparable interaction. The applicable basis may vary according to the type of data and the specific purpose involved.

7. Special Category Data

This website is not intended for the routine collection of special category personal data. Users should not submit information concerning health, biometric data, racial or ethnic origin, political opinions, religious beliefs, trade union membership, sex life, or sexual orientation through the contact form unless this is strictly necessary and expressly requested in advance. If special category data must be processed, this will take place only where an additional lawful condition applies and, where required, separate consent or specific notice is provided.

8. Children’s Data

This website is not directed at children. If personal data relating to a person under 18 is submitted through the website, this should be done by or with the agreement of a parent or legal guardian where such involvement is required by applicable law or the nature of the request. Where consent is relied on for the processing of a child’s personal data, confirmation from a person with legal responsibility may be required before the relevant processing continues.

9. Disclosure and Processors

Personal data may be shared internally with persons responsible for communication handling, technical support, policy management, or website administration where access is necessary for the stated purpose. Data may also be shared with service providers acting on behalf of the website in areas such as hosting, secure storage, email transmission, analytics configuration, or technical maintenance. Such disclosure is limited to what is necessary for the relevant function and subject to appropriate handling arrangements.

10. International Transfers

Where personal data is transferred outside the United Kingdom, the transfer will be carried out only where an appropriate safeguard or lawful transfer mechanism is in place. This may include adequacy arrangements, contractual measures, or another recognised basis under applicable data protection requirements. Any such transfer will be limited to the specific purpose for which the data is processed.

11. Retention

Personal data is retained only for as long as necessary for the purpose for which it was collected, together with any related administrative, security, or record-keeping need. Contact enquiries may be retained for a reasonable period to allow review, reply, follow-up communication, and internal record management. Technical logs may be retained for security, troubleshooting, and system administration for a period appropriate to those purposes. When retention is no longer necessary, data may be deleted, anonymised, or otherwise rendered no longer identifiable.

12. Security Measures

The website uses administrative, organisational, and technical measures intended to support the confidentiality, integrity, and availability of personal data. These measures may include restricted access controls, secure storage arrangements, authentication procedures, logging, and review of technical systems. No system can be described as entirely free from operational risk, but steps are taken to reduce unauthorised access, loss, alteration, or disclosure.

13. Individual Rights

Subject to applicable law, individuals may request access to personal data, correction of inaccurate data, deletion of data, restriction of processing, portability of data where applicable, objection to certain processing, and withdrawal of consent where consent is the basis used. A request relating to any of these matters may be submitted using the contact details listed above. Where a request is received, it may be necessary to verify identity and review the scope of the request before action is taken.

14. Policy Updates

This Privacy Policy may be updated from time to time to reflect changes to website operation, communication processes, technical arrangements, or legal context. The current version is identified by the Last Updated date shown at the top of this page.

For more information, please use the contact details above.