Surprise Inc. Start Booking

Privacy

What I hold,
and what I don't

Short version: as little as I can get away with, and none of it goes anywhere.

What I ask you for

  • Your email address, so I can send you a sign in link and tell you when your gifts are ready.
  • The people you are wrapping for: a name or a nickname, how they are related to you, an age band rather than an age, and what they like. A nickname works just as well and I would rather hold a nickname.
  • Your gifts: what they are and roughly how big. There is no way to upload a photo, so there are no photos of your gifts here.
  • Your address, but only if I am coming to you, and only until that booking closes. If you choose to save it on your Gift Tree so you do not have to type it again, that copy stays until you clear it or close your account.
  • No phone number. Nothing on this site asks for one, and there is nowhere to put one.

What I never ask for and never keep

  • A password. There isn't one. Signing in is a link sent to your email, it works once, and it expires in ten minutes.
  • Card details. There is no card form on this site at all. Taylor takes payment directly, and nothing about how you pay is stored here.
  • Birth years or exact ages. A month and a day is enough for a reminder, and a band is enough to plan.

How long I keep it

  • What each gift was is deleted when its booking closes. Anything you wrote for their stocking goes with it. What survives is the count and the size, which is what I use to plan paper and ribbon for next year.
  • Your address is removed when your booking closes, along with the delivery notes that go with it. The only exception is an address you saved on your Gift Tree on purpose: that one is yours to keep or clear, and clearing the box and saving removes it.
  • Your family list stays as long as your account does, because that is the point of it. Next December it is already there.
  • Ask me to delete your account and everything that says who you are is gone for good: your email, your people, your dates, your gift lists, your addresses, and my own notes about you. What is left is the amount of any booking you paid for, with nothing on it that points to you, because I have to be able to account for money I was paid.

How it is protected

  • Names, emails, addresses and notes are encrypted before they are stored. A stolen copy of the database is unreadable.
  • Finding your account at sign in uses a one way code made from your email rather than the address itself, so nobody who steals the database gets a list of my customers out of it. I can of course see my own customers, and export my own records, the way any business can.
  • There is no analytics, no advertising pixel, no session recording and no embedded chat on this site. Nothing third party runs on these pages.

Who else sees anything

  • The service that sends my email, which needs your address to deliver a message to you.
  • Anyone you send a partner invite to. They get a link that opens one page: it lets them add gifts for you and shows them nothing else about your account, not your address, not your other people, not what anyone picked for them. You can end their access any time by clearing their address on step one.
  • If you sign in with Google or Apple, that company knows you signed in here. They tell me your email address and nothing else, and I ask them for nothing else. You can use a link from me instead and skip them entirely.
  • Nobody else. I do not sell anything to anyone, and there is nothing here to sell.

Your choices

  • I do not send marketing email at all. If that ever changes it will be something you turn on rather than something you are opted into, and every message will have a way out of it.
  • When you book you can say whether you want reminders to add gifts as you shop. I am not sending those yet. When I do, it will only be to people who asked for them.
  • I will not post a picture of your wrapped gifts anywhere without asking you first.
  • Ask me for a copy of what I hold, ask me to correct it, or ask me to delete it. If you have an account the delete button is on it and does all three in one press. If you do not, send me a message and I will do it by hand.

About children

  • Grown ups build the family list, not children. I ask for an age band rather than an age and a month and day rather than a birth date, and a nickname is always fine.
  • This site is not directed at children and I do not knowingly collect anything from one.

Questions about any of this, or want your details removed? Send me a message and I will sort it out. If you have an account, the delete button is on it. Surprise Inc. serves the Atlanta metro area.

Created & Designed by Gastronaut Labs