Privacy

Privacy Policy

Last updated: October 2026

This policy explains what personal information a365gift collects, why we collect it, who we share it with, and what you can ask us to do with it.

Who is responsible

a365gift is a trade name of Lumen365, a business registered in the Netherlands. Lumen365 is the data controller for the information described here. Write to us at hello@a365gift.com with any question about your data.

What we collect

• When you buy a journey: your email address, and the payment and billing information you give to our payment processor. We receive confirmation that a payment succeeded and the details needed to identify your order; we never receive or store your full card number.
• When you complete the form after payment: the recipient’s first name and email address, the start date you choose, and the optional personal message you write.
• When you sign up for offers and new journeys: your email address, your first name if you choose to give it, and the single-use welcome code we send you.
• When emails are delivered: ordinary delivery information such as whether a message was delivered, opened, or bounced, so that we can tell when something has gone wrong.
• When you visit the site: basic technical information such as your IP address, browser type and pages visited, used to keep the site secure and working.
• When you share your experience: your first name, your email address, the place you live if you choose to give it, and the answers you write in the form.
• When you write to us: your email address and whatever you choose to tell us, kept only as long as we need it to deal with your question.

Why we use it

• To take your payment and send your order confirmation.
• To deliver the journey to the right inbox, on the right date, with your personal message in the first email.
• To tell you about new journeys and occasional offers, if you have signed up for them.
• To answer you when you contact us.
• To meet our legal and tax obligations.
• To keep the site secure and prevent fraud.

Our legal grounds for this are the performance of our contract with you, our legitimate interest in running a secure and functioning business, our legal obligations, and, for offers and new journeys, your consent. We do not sell personal information, and we do not share it for cross-context behavioural advertising.

If someone bought a journey for you

Your name and email address reached us because someone who knows you chose to send you a gift. We use them to deliver that journey and the short follow-up emails that come at three, six and twelve months after it ends. Every email has a one-click unsubscribe link, and unsubscribing stops the journey immediately. You can also write to us and ask us to delete your details entirely.

Offers and new journeys

If you sign up at the bottom of our pages, we use your email address to let you know when a new journey opens and to send occasional offers. We rely on your consent for this, and you can withdraw it at any time with the unsubscribe link in every email.

We first send a confirmation email; you are only added once you confirm. Your address is stored with MailerLite, our email provider. Your single-use welcome code is created with Stripe, our payment provider; the code is not linked to your name or email address there.

Our website keeps a record of which address received a code. Ten days after the code expires, the address is removed and only a one-way encoded version remains, so the same address does not receive a second code. If you unsubscribe, we keep only what we need to make sure you don’t receive these emails again.

Sharing your experience

If you use the form on our Share your experience page, we receive your first name, your email address, the place you live if you choose to give it, and your answers. Your message is sent to our inbox and stored on our website. We use your email address only to reply to you; it is never shown on the site.

We only publish your words, with your first name and the place you gave, if you tick the box that allows it. Your answer to the last question is never published. You can ask us at any time to remove your words from the site or to delete your message.

Who we share it with

We use a small number of service providers, each of which processes data on our instructions:

• Stripe — payment processing and fraud prevention.
• MailerLite — sending and scheduling the journey emails, and the emails about offers and new journeys.
• MailerSend — sending the emails from this website, such as order confirmations.
• Kinsta — hosting for this website.
• Google Workspace — our own business email.

We may also disclose information where the law requires it. We do not share your information with anyone else.

International transfers

We are based in the Netherlands and our website is hosted in the United States. Our providers operate in both the European Economic Area and the United States, which means your information may be transferred between them. Where that happens, transfers are covered by appropriate safeguards such as the European Commission’s standard contractual clauses.

How long we keep it

We keep order and payment records for at least seven years, as Dutch tax and accounting law requires.

We keep recipient details for as long as the journey and its follow-up emails are running, and afterwards for as long as we reasonably need them to answer questions or resolve issues about that journey.

The copy of the form completed after payment that is kept on our website is deleted automatically after a limited period; the details needed to deliver the journey are held by MailerLite.

If you have signed up for offers and new journeys, we keep your email address for as long as you remain subscribed.

You can ask us at any time to delete information we hold about you, and we will do so unless the law requires us to keep it. Every journey email also carries a one-click unsubscribe link, which stops all further emails immediately.

If our business changes hands

If Lumen365 is ever sold, merged, or transferred in whole or in part, the information described in this policy may transfer to the new owner as part of that transaction. Any new owner would remain bound by a policy at least as protective as this one.

Cookies

We use one cookie, __cf_bm, set by Cloudflare, the security network that protects this site against automated traffic. It is strictly necessary for the site to work safely and does not track you across websites. We do not use analytics, advertising or any other tracking cookies, so there is nothing here to consent to.

Your rights

You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to our use of it. Residents of California and other US states with comparable laws have equivalent rights, including the right to know, the right to delete, and the right not to be discriminated against for exercising them.

Write to hello@a365gift.com and we will respond within 30 days. If you are in the European Union and you are unhappy with our response, you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).

Children

This site is not intended for children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us their information, please contact us and we will delete it.

Changes

If we change this policy we will update the date at the top of this page.