Last updated: August 2026
This policy explains what personal information a365gift collects, why we collect it, who we share it with, and what you can ask us to do with it.
Who is responsible
a365gift is a trade name of Lumen365, a business registered in the Netherlands. Lumen365 is the data controller for the information described here. Write to us at info@a365gift.com with any question about your data.
What we collect
When you buy a journey: your email address, and the payment and billing information you give to our payment processor. We receive confirmation that a payment succeeded and the details needed to identify your order; we never receive or store your full card number.
When you complete the form after payment: the recipient’s first name and email address, the start date you choose, and the optional personal message you write.
When emails are delivered: ordinary delivery information such as whether a message was delivered, opened, or bounced, so that we can tell when something has gone wrong.
When you visit the site: basic technical information such as your IP address, browser type and pages visited, used to keep the site secure and working.
We do not ask for, and do not want, any information about your health, your medical history, or your treatment. Please do not send us any.
Why we use it
- To take your payment and send your order confirmation.
- To deliver the journey to the right inbox, on the right date, with your personal message in the first email.
- To answer you when you contact us.
- To meet our legal and tax obligations.
- To keep the site secure and prevent fraud.
Our legal grounds for this are the performance of our contract with you, our legitimate interest in running a secure and functioning business, and our legal obligations. We do not sell personal information, and we do not share it for cross-context behavioural advertising.
If someone bought a journey for you
Your name and email address reached us because someone who knows you chose to send you a gift. We use them only to deliver that journey. Every email has a one-click unsubscribe link, and unsubscribing stops the journey immediately. You can also write to us and ask us to delete your details entirely.
Who we share it with
We use a small number of service providers, each of which processes data on our instructions:
- Stripe — payment processing and fraud prevention.
- Brevo — sending and scheduling the journey emails.
- Kinsta — hosting for this website.
- Google Workspace — our own business email.
We may also disclose information where the law requires it. We do not share your information with anyone else.
International transfers
We are based in the Netherlands and our website is hosted in the United States. Our providers operate in both the European Economic Area and the United States, which means your information may be transferred between them. Where that happens, transfers are covered by appropriate safeguards such as the European Commission’s standard contractual clauses.
How long we keep it
We keep order records for as long as tax and accounting law requires, which in the Netherlands is seven years. We keep journey delivery data for the duration of the journey and a reasonable period afterwards in case of questions, and we delete it sooner on request where we are not legally required to keep it.
Cookies
This site uses only the cookies needed to function and stay secure. We do not use advertising cookies and we do not track you across other websites.
Your rights
You can ask us for a copy of the information we hold about you, ask us to correct it, ask us to delete it, ask us to restrict how we use it, or object to our use of it. Residents of California and other US states with comparable laws have equivalent rights, including the right to know, the right to delete, and the right not to be discriminated against for exercising them.
Write to info@a365gift.com and we will respond within 30 days. If you are in the European Union and you are unhappy with our response, you may complain to the Dutch Data Protection Authority (Autoriteit Persoonsgegevens).
Children
This site is not intended for children, and we do not knowingly collect information from anyone under 18. If you believe a child has given us their information, please contact us and we will delete it.
Changes
If we change this policy we will update the date at the top of this page.