Privacy Policy

Who we are

Wishly Pty Ltd ("Wishly", "we", "us") operates wishly.au — an online platform for purchasing and sending gift cards, flower delivery and experience vouchers across Australia. This Privacy Policy explains how we collect, use, disclose and protect your personal information.

If you have questions, contact us at hello@wishly.au or call 0478 930 853.

Information we collect

Information you provide: When you create an account or send a gift we collect your name, email address, phone number, and payment details (handled securely by Stripe — we never store full card numbers).

Gift recipient information: To deliver your gift we collect the recipient's name and contact details (phone or email) that you provide.

Usage information: We automatically collect information about how you interact with our website, including pages viewed, searches made, and device/browser details. We use cookies and similar technologies for this purpose.

Communications: If you contact us we keep a record of the correspondence.

How we use your information

We use your personal information to: process and fulfil your gift orders; send confirmation emails and SMS notifications; provide customer support; improve our products and website; comply with legal obligations; and, where you have opted in, send you promotional emails about new products and offers.

We do not sell your personal information to third parties.

Who we share information with

Gift brands and providers: When you redeem a gift card, we share necessary details (such as your email) with the issuing brand to fulfil the card.

Service providers: We use trusted third-party services including Stripe (payments), Twilio (SMS), Resend (email), and Vercel/Railway (infrastructure). These providers process your data only on our behalf and under strict confidentiality obligations.

Legal requirements: We may disclose your information where required by law or to protect the rights and safety of Wishly or others.

Cookies

We use cookies and similar tracking technologies to keep you signed in, remember your preferences, and understand how our site is used. You can control cookies through your browser settings. Disabling cookies may affect site functionality.

Data retention

We retain your account data for as long as your account is active. Transaction records are kept for seven years to satisfy Australian tax and financial record-keeping requirements. You may request deletion of your personal information at any time (subject to legal retention obligations).

Your rights

Under the Australian Privacy Act 1988 you have the right to access and correct personal information we hold about you. To make a request, email hello@wishly.au. We will respond within 30 days.

Security

We take reasonable steps to protect your information from misuse, loss and unauthorised access. All payment data is processed via Stripe and is never stored on our servers. Our site uses HTTPS encryption.

Changes to this policy

We may update this Privacy Policy from time to time. The current version is always available at wishly.au/privacy. Continued use of our services after changes constitutes acceptance of the updated policy.