Privacy Policy

warmgesture is a small independent business operated by an individual based in Singapore. That operator decides how and why the information described here is used, and is the data controller for it where that term applies.

We aim to collect as little as the service needs, keep it only as long as it is useful, and never sell it. You can contact us about anything in this policy, including any request about your own information, at contact@warmgesture.com.

Information you give us

• Your email address, so we can send your receipt and the link to your page, and reply if you need help.
• The content you create, meaning the design you choose, the words you write, names and greetings, captions, any photographs you upload, your styling and sound choices, and the web address you pick. This content can include personal information about you and about the person you are sending it to.
• Your order choices, including any voluntary tip.
• Anything you send us directly, such as a support email or a response to a feedback form we link to.

Payment information

Payments are handled by our payment provider on their own systems. We never receive or store your full card or bank details. What comes back to us is limited to what we need to fulfil and account for the order: confirmation that payment succeeded, the amount and currency, the email address used, the payment status, and a reference we can use to find the transaction.

Information collected automatically

Like any website, ours receives standard technical information when you visit: your IP address, the type of device and browser you use, language settings, the page you came from, the pages you view, and the time of your visit. We also derive an approximate, country-level location from your IP address, so we can quote you a price in a sensible currency. We use this to keep the service secure, to limit abuse and automated traffic, to diagnose faults, and to understand in aggregate how the site is performing. We do not use it to build an advertising profile of you.

A warmgesture page is made for someone else, so the content you submit will usually include information about another person: their name, their photograph, references to shared events, and so on.

When you provide that, you are responsible for having their permission, as set out in our Terms of Service. We handle that content on your instructions, in order to build and deliver the page you asked for, and for no other purpose.

If you are the person shown or named in a page and you want your information removed, email us at contact@warmgesture.com with the link and we will look into it and act where appropriate. You do not need to have bought anything to make that request.

We use personal information only for the purposes below. Where the law requires us to identify a legal basis for using it, the basis is given alongside each purpose.

• To let you preview and customise a design, to take steps you have asked for before entering a contract.
• To take and process your order and payment, and to detect and prevent payment fraud, to perform our contract with you and in our legitimate interest in preventing fraud.
• To publish, host and serve your page for its term, and to send your receipt and essential messages about your order, to perform our contract with you.
• To answer your questions and provide support, to perform our contract and in our legitimate interest in helping our customers.
• To keep the service secure and available, prevent abuse, and enforce our terms, in our legitimate interest in protecting the service and its users.
• To understand in aggregate how the service is used and to improve it, in our legitimate interest in running and improving our business.
• To meet legal, tax and accounting obligations, and to establish, exercise or defend legal claims.

Marketing. We do not send promotional email, and we do not add customers to a mailing list. The only email you receive from us is your receipt, a message about your order, or a reply to something you sent us. If that ever changes, we will ask for your consent first and give you a clear way to opt out.

We keep this deliberately minimal. warmgesture uses no advertising cookies, and nothing that tracks you across other websites.

• One functional cookie. It remembers which currency you were quoted, so the price you are shown matches the price you are charged. It holds no identifier for you, expires on its own after a short time, and is not used for advertising or analytics.
• Storage in your own browser. While you are customising a design, your draft is kept in your browser’s temporary storage so you do not lose it as you move around the site. It stays on your device, clears when you close the tab, and is only sent to us if you go on to place an order.
• Analytics and performance monitoring. We use privacy-friendly analytics that report aggregate visits and page performance without cookies and without identifying individual visitors.

Pages provided by third parties, such as our payment provider’s checkout page or a social or feedback link you follow, may set their own cookies under their own policies. You can block or delete cookies in your browser settings, though blocking the functional cookie above may mean the price you are quoted changes as you browse.

We do not sell personal information, and we do not share it for advertising. We share it only in the situations below.

Service providers who work for us. We rely on a small number of established providers to run the service, covering payment processing, website hosting and content delivery, database and file storage, email delivery, analytics and performance monitoring, support and form tools, and the fonts and other resources embedded in our pages, which your browser requests from the provider’s network and which therefore reveal your IP address to that provider. They handle personal information on our behalf, under contract, only on our instructions. Our payment provider also acts on its own account for fraud prevention and regulatory compliance, under its own privacy policy. We are happy to tell you which providers we currently use, just ask.

We also disclose information:

• to anyone you share your link with, since the content of your page is visible to whoever opens it. See Published pages are public below;
• to professional advisers, such as accountants or lawyers, where they need it to advise us;
• to authorities, where we are required to by law, or where disclosure is necessary to protect our rights or the safety of others; and
• to a successor, if the business is sold, transferred or reorganised. Any successor would remain bound by this policy for information collected under it.

warmgesture is operated from Singapore, but our providers may store and process information on servers outside Singapore, including in the United States and Europe, and their staff may access it from other countries.

When information is transferred out of Singapore, we take reasonable steps to satisfy ourselves that it will be protected to a standard comparable to that required by Singapore law, principally by using established providers with contractual data protection commitments. Where information protected by European or United Kingdom data protection law is transferred outside those areas, we rely on the safeguards those providers offer for such transfers, such as standard contractual clauses or an applicable adequacy decision.

We do not keep personal information longer than we need it.

• The content of a published page, meaning your message, photographs, captions and settings, is kept for the term of the page. Shortly after the term ends, that content is deleted automatically as part of routine clean-up, and the page stops working.
• Photographs and drafts that never become an order, for example if you start a checkout and do not finish it, are removed automatically after a short period.
• Order and payment records, meaning the email address used, the amount, currency, dates, status and receipt reference, are kept after the page expires so that we can support you, handle disputes and refunds, and meet accounting and tax obligations. Singapore tax law generally requires business records to be kept for five years, and we keep them for at least that long.
• A simple customer record linking your email address to the orders you have placed, meaning how many, when, and the total paid, which we use for support and to understand repeat purchases. We keep it while we operate the service, unless you ask us to remove it.
• Emails and support correspondence, for as long as needed to deal with the matter and a reasonable period afterwards.
• Technical logs and security records, for a short period only, normally no more than twelve months.

Where we are required to keep something for legal reasons, or need it to defend a claim, we may keep it for longer than the periods above.

This section matters more than any other, so please read it before you upload anything.

A published page is meant to be shared, and anyone who has its link can open it. There is no password and no sign-in. Photographs on a page are served from their own web addresses, which are not something anyone can browse or realistically guess. They are not secret either: anyone with the exact address can open the image on its own.

We ask search engines not to index published pages, and reputable ones respect that. We cannot guarantee it, and we cannot control what happens to a link once it has been sent, forwarded, screenshotted or posted somewhere public.

Please do not put anything into a page that you would not be comfortable being seen by anyone who receives or finds the link.

We take practical, proportionate steps to protect personal information. Traffic to and from our site is encrypted in transit, access to our systems and data is restricted to those who need it, uploads are accepted only through short-lived and purpose-limited links, and content is deleted automatically once it is no longer needed.

No online service can promise absolute security. If you believe something has gone wrong, or you have found a security problem, please tell us at contact@warmgesture.com and we will look into it quickly. Where a personal data breach is likely to result in significant harm, we will notify the people affected and the relevant authority as the law requires.

You can ask us to:

• tell you what personal information we hold about you, and give you a copy;
• correct anything inaccurate or incomplete;
• delete information we no longer have a good reason to keep, including unpublishing a page before its term ends;
• stop or limit a particular use, or withdraw a consent you have given, without affecting anything done before you withdrew it; and
• provide, in some cases, a copy of information you gave us in a portable electronic format.

Depending on where you live, some of these rights come from Singapore’s Personal Data Protection Act, and some from European, United Kingdom or other data protection laws, including a right to object to processing we carry out on the basis of our legitimate interests.

To make a request, email contact@warmgesture.com. So that we do not disclose someone’s information to the wrong person, we may ask you to confirm details only you would know, such as your receipt reference or the email address used for the order. We will respond within thirty days, or tell you if we need longer.

Some information we may have to keep, for example records we are required to retain for tax purposes, or information needed to resolve a dispute. If we cannot do what you have asked, we will explain why. Withdrawing consent or asking for deletion may mean we can no longer keep your page live.

You must be at least 18 to place an order. If you are under 18, a parent or legal guardian can place it for you, and they will be our customer.

A page may include information about a child or young person, or may be shared with them. If you include any personal information about a child, such as their name or photograph, please make sure you have permission from their parent or legal guardian first.

If you believe a page shows a child’s information without the right consent, tell us at contact@warmgesture.com and we will take it down.

We may update this policy as the service changes or as the law requires. The effective date at the top of this page always shows the current version, and any change takes effect when it is published here. If a change materially affects how we use information we already hold about you, we will make a reasonable effort to bring it to your attention, and where the law requires it we will ask for your consent.

For any question, concern or request about privacy, including access, correction, deletion, or a page that shows your information, email contact@warmgesture.com.

Please tell us first if you are unhappy with how we have handled your information, and give us a chance to put it right. You also have the right to complain to a data protection authority: in Singapore that is the Personal Data Protection Commission, and elsewhere it is the supervisory authority for the country you live or work in.