Privacy



Givvtmark Privacy Policy


Last updated: 1 June 2026

Givvt Pty Ltd ("Givvt", "Givvtmark", "we", "our" or "us") is an Australian company that operates the Givvtmark mobile application, website and related services, including wishlist, board, product-saving and social-sharing features (together, the "Platform").

This Privacy Policy explains how we collect, use, disclose, store and protect personal information when you use the Platform. Our primary legal obligations are under Australian law. Where the Platform is accessed by users in other countries, we have included relevant information for those users below.

By using Givvtmark, you acknowledge that you have read this Privacy Policy.


1. Our Primary Legal Framework

Givvt Pty Ltd is an Australian company. Our primary privacy obligations are governed by the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

The Platform is currently in an MVP (minimum viable product) phase and is not actively marketed or directed at users in the European Union, United Kingdom or United States. If you are accessing the Platform from one of those regions, please refer to Section 16 (International Users) for further information relevant to you.

We are committed to handling personal information responsibly and in a manner consistent with applicable Australian privacy law.


2. Information We Collect

We collect only the information reasonably necessary to provide, operate, secure and improve the Platform.


Account Information

When you create or use an account, we may collect:

  • name;

  • email address;

  • username or display name;

  • profile photo or avatar;

  • login and authentication details; and

  • account preferences and settings.


Wishlist, Board and Activity Information

When you use the Platform, we may collect:

  • boards and wishlists you create;

  • items you add, save or Givvtmark;

  • product names, descriptions, prices, images, merchant links and related item details;

  • likes, comments, follows and other interactions;

  • public or shared board activity;

  • QR code or shared-link activity; and

  • app engagement and usage patterns.


Device, Technical and Usage Information

We may automatically collect limited technical information, including:

  • IP address;

  • device type and operating system;

  • app version and browser type;

  • crash logs and performance data;

  • approximate usage timestamps; and

  • security and diagnostic information.


Information We Do Not Currently Collect

During the current MVP phase, Givvtmark does not collect:

  • payment card or bank account details;

  • contribution or pooled funding information;

  • precise GPS location;

  • contact-book data; or

  • government identity documents.

If these features are introduced later, we will update this Privacy Policy before collecting additional categories of personal information.


3. How We Collect Information

We collect personal information:

  • directly from you when you create an account, update your profile, create boards, add items, comment, like, follow, share or contact us;

  • automatically when you use the Platform; and

  • from service providers that help us operate, authenticate, monitor, secure or improve the Platform.

Where you add product information from a third-party website, merchant site, share sheet, browser, AI assistant or other external source, we may collect the product information you choose to save to your board.


4. How We Use Your Information

We use personal information to:

  • create, authenticate and manage your account;

  • provide the wishlist, board, Givvtmark, QR code, sharing and social features;

  • display content and interactions you choose to make public or share with others;

  • allow other users to discover, view, follow or interact with boards, where permitted by your settings;

  • personalise and improve the Platform;

  • analyse usage, performance and product functionality;

  • detect, prevent and respond to misuse, fraud, security incidents or technical issues;

  • provide customer support;

  • communicate service, policy, security and account updates;

  • send non-essential marketing communications where permitted; and

  • comply with legal obligations and protect the integrity of the Platform.

  • We do not sell your personal information.


5. Public and Shared Content

Givvtmark includes social and sharing features. Depending on your settings, other users or recipients of shared links may be able to see:

  • your display name, username or profile photo;

  • public boards or wishlists and items added to them;

  • likes, comments and follows;

  • QR code or shared-link content; and

  • other information you choose to make public or share.

You should not add personal, sensitive or confidential information to public boards, comments or shared content. Once information is shared publicly, we may not be able to remove all copies from third-party caches or other users' devices.


6. Disclosure of Information

We may disclose personal information:

  • to service providers that help us host, operate, analyse, secure and support the Platform (including cloud hosting, analytics, monitoring, email, support and authentication providers);

  • to other users where you choose to make content public, follow boards, comment, like, share or interact socially;

  • to professional advisers, insurers or legal representatives where reasonably necessary;

  • where required or authorised by law, regulation, court order or government authority;

  • to investigate, prevent or respond to suspected fraud, security issues or misuse; and

  • in connection with a merger, acquisition, restructure or sale of all or part of our business, subject to appropriate confidentiality protections.

We require our service providers to handle personal information securely and only for the purposes for which we provide it to them.


7. Overseas Storage and Disclosures

Some of our service providers may store or process personal information outside Australia. This may include cloud hosting, infrastructure, analytics, monitoring, authentication and support providers.

Where we disclose personal information to overseas recipients, we will take reasonable steps to ensure those recipients handle the information in a manner consistent with the Australian Privacy Principles.


8. Security

We take reasonable technical, organisational and administrative steps to protect personal information from misuse, interference, loss, unauthorised access, modification or disclosure. These steps may include:

  • encrypted connections (TLS/SSL);

  • secure cloud storage with access controls;

  • authentication controls;

  • monitoring, logging and security reviews; and

  • limiting access to personal information to personnel and service providers who need it.

No digital platform is completely secure. You are responsible for keeping your login details confidential and using strong account security practices.


9. Data Retention

We keep personal information for as long as reasonably necessary to provide the Platform, maintain your account, comply with legal obligations, resolve disputes, enforce our terms, prevent misuse and maintain security.

If you delete your account or request deletion, we will take reasonable steps to delete or de-identify your personal information, subject to:

  • legal, regulatory or accounting requirements;

  • backup and disaster recovery processes;

  • security, fraud or abuse-prevention needs;

  • unresolved disputes or investigations; and

  • information already shared with others or made public through your use of the Platform.


10. Accessing and Correcting Your Information

You may access, update or correct certain account information through the Platform.

You may also contact us to request access to, or correction of, personal information we hold about you. We may need to verify your identity before actioning the request. We will respond within a reasonable period and may refuse access or correction where permitted by law.


11. Account Deletion

You may request deletion of your account and associated personal information by contacting us at privacy@givvtmark.app. We will take reasonable steps to process deletion requests, subject to the retention exceptions described in this Privacy Policy.


12. Marketing and Communications

We may send you essential service communications, including account, security, policy and operational updates. You cannot opt out of these while you maintain an account.

We may also send non-essential marketing communications where permitted. You can opt out at any time by using the unsubscribe link or contacting us at privacy@givvtmark.app.


13. Cookies and Tracking Technologies

We and our service providers may use cookies and similar technologies (such as pixels or SDKs) to operate and improve the Platform, analyse usage and support security. You can manage cookie preferences through your browser or device settings.


14. Children's Privacy

Givvtmark is not intended for children under 13 years of age. We do not knowingly collect personal information from children under 13. If you believe we have inadvertently collected such information, please contact us at privacy@givvtmark.app and we will take steps to delete it.

Users aged 13 to 17 should use the Platform only with the involvement and consent of a parent or guardian where required by applicable law.


15. Third-Party Websites and Merchants

The Platform may include links to third-party websites, merchants, products, apps or services. We are not responsible for the privacy practices, content or security of third-party websites or services. You should review their privacy policies before providing personal information to them.


16. International Users

Givvtmark is operated by an Australian company and our primary obligations are under Australian law. We do not actively market the Platform in the EU, UK or US at this time.

However, if you are accessing the Platform from one of those regions, the following information is relevant to you.


EU and UK Users

We are aware that the EU General Data Protection Regulation (GDPR) and UK GDPR may apply to the processing of personal data of individuals in those regions, even where the controller has no local establishment, if the processing relates to the offering of services to those individuals.

Because we do not actively market or direct the Platform at EU or UK users at this stage, we do not consider ourselves to be subject to GDPR obligations at this time. If this changes, we will update this Privacy Policy accordingly.

If you are an EU or UK user who has chosen to access the Platform, we will nonetheless handle your personal information in a manner broadly consistent with GDPR principles, including:

  • collecting only what is necessary for the purposes described in this Policy;

  • not selling your personal information;

  • honouring requests to access, correct or delete your personal information; and

  • taking reasonable steps to protect your data in international transfers.

Note: If you are in the EU or UK and have concerns about how we handle your data, please contact us at privacy@givvtmark.app. We will respond in good faith to your request.


California Users

The California Consumer Privacy Act (CCPA) and California Privacy Rights Act (CPRA) apply to businesses meeting certain thresholds (annual revenue over $25M, or processing data of 100,000+ California consumers, or deriving 50%+ of revenue from selling personal data). We do not currently meet those thresholds.

Regardless, we do not sell or share your personal information with third parties for commercial purposes, and we will honour reasonable requests to access or delete your personal information.

Note: As we grow, we will monitor our obligations under the CCPA/CPRA and update this Policy if we become subject to those requirements.


Other Jurisdictions

If you are accessing the Platform from any other country, your use of the Platform is subject to this Privacy Policy and applicable Australian law. We make no representation that the Platform is appropriate or available for use in all locations.


17. Complaints

If you have a concern or complaint about how we handle your personal information, please contact us at privacy@givvtmark.app. Please include enough detail for us to understand and assess your complaint.

We will review your complaint and respond within a reasonable period. If you are not satisfied with our response, you may contact the Office of the Australian Information Commissioner at oaic.gov.au.


18. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. If we make material changes, we will take reasonable steps to notify you, such as through the Platform, by email or by posting an updated version on our website. The updated Privacy Policy will apply from the date it is published or otherwise notified.


19. Contact Us

For privacy questions, access or correction requests, account deletion or complaints, please contact:


Givvt Pty Ltd

Australia

Email: privacy@givvtmark.app

Ready to create with purpose?

Whether it’s birthdays, weddings, or just because — Givvt helps you create wishlists that bring people together and turn every occasion into a celebration.

Givvt
Givvtmark is operated by Givvt Pty Ltd.
Givvt helps users create and share wishlists and gift ideas.
Contact: support@givvtmark.app

© 2026 Givvt Pty Ltd. All rights reserved.

Ready to create with purpose?

Whether it’s birthdays, weddings, or just because — Givvt helps you create wishlists that bring people together and turn every occasion into a celebration.

Givvt
Givvtmark is operated by Givvt Pty Ltd.
Givvt helps users create and share wishlists and gift ideas.
Contact: support@givvtmark.app

© 2026 Givvt Pty Ltd. All rights reserved.

Ready to create with purpose?

Whether it’s birthdays, weddings, or just because — Givvt helps you create wishlists that bring people together and turn every occasion into a celebration.

Givvt
Givvtmark is operated by Givvt Pty Ltd.
Givvt helps users create and share wishlists and gift ideas.
Contact: support@givvtmark.app

© 2026 Givvt Pty Ltd. All rights reserved.