Privacy
How GiftCodeBox handles the details you give us. Last updated 24 September 2026.
What we collect
Only what the form asks for: your email address, and your name if you choose to give it. The name field is optional — leaving it blank still works.
Our server also records the IP address and browser user-agent of each submission. That is used to stop bots and nothing else.
Why we collect it
To set up your order and to email you about it. That is the whole purpose.
We do not send marketing email, we do not build advertising profiles, and we do not sell or rent your details to anyone.
Who else sees it
Your name and email are stored in our Shopify store, because that is where the order lives. Shopify processes it on our behalf under their own data terms.
If bot protection is switched on, Cloudflare Turnstile checks that the submission came from a person. Cloudflare sees the challenge result and your IP, not your name or email.
Nobody else. No analytics trackers, no advertising pixels, no third-party scripts beyond the two named here.
How long we keep it
Order records stay in Shopify for as long as we need them for accounting and support.
The bot-protection log of IP addresses is deleted automatically after one hour.
Your rights
Email baba@ccabuy.com and ask us to show you what we hold, correct it, or delete it. We will action it and write back.
If you are in the UK or the EU you also have the right to complain to your data protection authority.
Cookies
The public page sets no cookies at all — there is no cookie banner because there is nothing to consent to.
The staff admin area sets two cookies, one to keep the signed-in session and one to block cross-site request forgery. Customers never reach that area.