The short version. We collect what you type into the enquiry form so we can send you a quote. We do not sell it. Analytics cookies are only set if you accept them, and declining changes nothing about how the site works. Artwork you upload to the mockup maker never leaves your browser.
1. Who we are
GiftBoxes LLC (“we”, “us”) operates giftboxes.ae and is the controller of the personal data described in this policy.
- Email: hello@giftboxes.ae
- Phone / WhatsApp: +971 50 767 1619
- Registered address: TO CONFIRM
- Trade licence number: TO CONFIRM
2. What we collect, and why
We only collect data you choose to give us, plus analytics if you accept it. There is no account and no login.
| What | Why | Kept |
|---|---|---|
| Name, company, work email, phone | To reply to your enquiry with a quote | In our mailbox until you ask us to delete it |
| Your brief, quantity and required date | To cost the work accurately | As above |
| Items on your enquiry list | So we know what you are asking about | As above |
| Your IP address | To rate-limit the form against abuse | 1 hour |
| Server logs (IP, company name) | To diagnose failures | 30 days, then deleted automatically |
| Analytics data — only if you accept | To see which pages are useful | Up to 14 months in Google Analytics |
Our lawful basis is your request: you send us an enquiry and we act on it. You are not required to give us anything, but without contact details we cannot send you a quote.
3. The mockup maker
Artwork you upload to the mockup maker is processed entirely inside your browser and is never transmitted to us or to anyone else. The preview and the downloaded image are generated on your own device.
If you fill in the download form, those contact details are sent to us, together with the mockup specification, so that we can quote the artwork. That is the only part of the mockup maker that transmits anything.
4. Cookies and analytics
We set no analytics cookies unless you accept them. When you first visit we ask. If you decline, or simply ignore the banner, no analytics cookies are set and nothing about the site changes for you. You can change your answer at any time using “Cookie settings” in the footer.
If you accept, we use Google Analytics 4 to understand which pages are useful and where visitors arrive from. It sets cookies that record a randomised identifier, the pages you view and roughly where in the world you are. We have IP anonymisation enabled. We do not use it to identify you personally, and we do not use it for advertising.
Two things are always on, because the site cannot work without them: your enquiry list is stored in your browser’s local storage so it survives a page reload — it stays on your device and we never see it — and Cloudflare Turnstile, the anti-spam check on our forms, may set a short-lived technical token to confirm you are not a bot. Turnstile does not track you across sites.
5. Who else processes your data
We do not sell or share your data for marketing. A small number of service providers process it on our behalf:
- Amazon Web ServicesHosting, email delivery and the enquiry pipeline. Data is stored in the Mumbai region (India); the site itself is served from Amazon CloudFront locations worldwide.
- Microsoft 365The mailbox that receives your enquiry.
- CloudflareTurnstile, the anti-spam check on our forms.
- GoogleGoogle Analytics 4 — only if you accept analytics cookies. Not used if you decline.
6. Transfers outside the UAE
Our servers are in India and our content delivery network has locations worldwide, so your data is processed outside the UAE. We rely on the contractual protections in our agreements with the providers above. If you would rather not have your data processed outside the UAE, contact us on WhatsApp instead of using the form.
7. Your rights
Under UAE Federal Decree-Law No. 45 of 2021 you can ask us to:
- tell you what data we hold about you, and give you a copy;
- correct anything that is wrong;
- delete it;
- stop or restrict how we use it;
- transfer it to another provider.
Email hello@giftboxes.ae and we will respond within 30 days. You also have the right to complain to the UAE Data Office.
8. How we protect it
Everything is sent over an encrypted connection. Our storage is private and not publicly readable. Access to the systems holding enquiries is limited to the people who need it, and our servers hold no mail passwords — they authenticate using short-lived credentials that rotate automatically. We keep as little as possible: there is no customer database on this site, only email and short-lived logs.
9. Children
This is a business-to-business site and is not directed at children. We do not knowingly collect data from anyone under 18.
10. Changes
If we change how we handle personal data we will update this page and the date at the top. This policy was last updated on 24 September 2026.
Questions about any of this? Contact us or email hello@giftboxes.ae.