Skip to main content
Corporate Gift Experts
PrivacyTermsCookiesAccessibility

Privacy Policy

Last updated: July 6, 2026

Corporate Gift Experts ("we", "us", or "our") operates the website app.corporategiftexperts.com and related services (collectively, the "Service"). This Privacy Policy describes how we collect, use, share, and protect information about you when you use the Service.

This Policy is designed to comply with the California Consumer Privacy Act as amended by the California Privacy Rights Act ("CCPA/CPRA"), the California Online Privacy Protection Act ("CalOPPA"), and analogous laws in other U.S. states. If you are located outside the United States, please note that we transfer, process, and store data in the United States.

1. Information we collect

1.1. Information you give us

  • Account information: your name, email address, company name, phone number, and password (managed by our authentication provider, Clerk).
  • Order and gift configuration: gift builder selections, artwork you upload (logos, hang tag artwork, postcard artwork), gift messages, recipient names and addresses for drop-shipping, and preferred delivery dates.
  • Payment information: card or bank details are collected and stored by our payment processor, Stripe, and never touch our servers. We receive a token, the last four digits, and the payment method type.
  • Communications: emails, messages, and support requests you send us.

1.2. Information we collect automatically

  • Log data: IP address, browser type and version, pages viewed, and timestamps.
  • Device information: operating system, device identifiers, and browser fingerprint characteristics.
  • Cookies and similar technologies: see our Cookie Policy for details.

1.3. Information we collect from third parties

  • Address validation: we validate shipping addresses through UPS. Recipient addresses are sent to UPS to confirm deliverability.
  • Product catalog data: sourced from PCNA (Polyconcept North America) via PromoStandards SOAP APIs. This is not personal data about you.
  • AI features: prompts you enter into the AI gift assistant are sent to Anthropic's Claude API to generate suggestions. Anthropic does not use API traffic to train models.

2. Categories of personal information we collect (CCPA/CPRA)

In the past 12 months, we have collected the following categories of personal information, as defined by the CCPA/CPRA:

  • Identifiers — name, email, IP address, account ID.
  • Customer records — company name, phone number, billing address.
  • Commercial information — orders, gifts configured, purchase history.
  • Internet/network activity — pages viewed, click events, session data.
  • Geolocation — approximate location derived from IP.
  • Professional information — company name and job title if provided.
  • Inferences — preferences derived from your activity (e.g. which gift categories you browse).

We do not knowingly collect sensitive personal informationas defined by the CPRA (SSN, driver's license, precise geolocation, race, religion, health, sexual orientation, or biometric data).

3. How we use your information

  • To operate the Service, including account management and order fulfillment.
  • To process payments (via Stripe) and issue invoices.
  • To communicate with you about orders, quotes, and support.
  • To send administrative alerts to internal super-admins about new orders, quotes, and messages (subject to per-user notification preferences).
  • To validate shipping addresses via UPS.
  • To generate gift suggestions using AI (Anthropic Claude API).
  • To improve the Service, prevent fraud, and enforce our Terms.
  • To comply with legal obligations.

4. How we share your information

We do not sell your personal information. We share personal information with the following categories of third-party service providers, each of whom is contractually obligated to protect your information and use it only for the purposes we specify:

  • Clerk — authentication and user management.
  • Stripe — payment processing.
  • Vercel — hosting and content delivery.
  • Neon — Postgres database hosting.
  • Vercel Blob — storage for uploaded artwork, logos, and card images.
  • Resend — transactional email delivery.
  • Anthropic — AI gift assistant (Claude API).
  • UPS — address validation and shipping.
  • PCNA — product catalog data (no personal information transmitted to PCNA).

We may also disclose information to comply with a subpoena or court order, to respond to lawful requests from public authorities, or to protect our legal rights or the safety of others. If we are involved in a merger, acquisition, or asset sale, your information may be transferred as part of that transaction.

5. Your privacy rights

5.1. California residents (CCPA/CPRA)

You have the right to:

  • Know what personal information we have collected about you.
  • Delete personal information we have collected from you.
  • Correct inaccurate personal information.
  • Opt out of the sale or sharing of your personal information (we do not sell or share your data as those terms are defined).
  • Limit the use of sensitive personal information (we do not collect such information).
  • Not be discriminated against for exercising your privacy rights.

To exercise these rights, submit a request through our Data Subject Request form or email us at privacy@corporategiftexperts.com. We will verify your identity before responding. You may also designate an authorized agent to submit requests on your behalf.

We honor the Global Privacy Control (GPC) browser signal as a valid opt-out preference for the sale or sharing of personal information.

5.2. Residents of other U.S. states

Residents of Virginia, Colorado, Connecticut, Utah, Texas, Delaware, Iowa, Montana, Oregon, and Tennessee have similar rights under their respective state laws. Use the same request form or email to exercise them.

6. Do Not Sell or Share My Personal Information

Corporate Gift Experts does not sell your personal information for monetary consideration, and does not share your personal information for cross-context behavioral advertising. You may still submit a request to confirm this at Do Not Sell or Share My Personal Information.

7. Data retention

We keep your personal information for as long as your account is active or as needed to provide the Service. After deletion, we may retain limited records to comply with legal, tax, and accounting requirements (typically 7 years for transaction records) or to resolve disputes.

8. Security

We use industry-standard encryption in transit (TLS) and at rest, restrict access to personal information on a need-to-know basis, and rely on PCI-compliant payment processors so we never handle raw card data. No system is perfect, however, and we cannot guarantee absolute security.

9. Children

The Service is intended for use by businesses and is not directed at children under 16. We do not knowingly collect personal information from anyone under 16. If you believe we have collected information from a child, please contact us so we can delete it.

10. International users

The Service is operated in the United States. If you access it from outside the United States, you consent to the transfer, processing, and storage of your information in the United States, where privacy laws may differ from those of your country of residence.

11. Changes to this Policy

We may update this Policy from time to time. Material changes will be communicated through the Service or by email. The "Last updated" date at the top of this page reflects the most recent revision.

12. Contact us

Corporate Gift Experts
{{BUSINESS_MAILING_ADDRESS}}
Email: privacy@corporategiftexperts.com

This policy is a solid starting draft but has not been reviewed by counsel. Placeholders in {{TOKEN}} format must be filled in before launch. Consult a lawyer to confirm state-by-state coverage and to adapt language to your specific business practices, including alcohol shipping licensure disclosures if applicable.