Privacy Policy

1. Introduction

Welcome to BaggedIt. We respect your privacy and are committed to protecting your personal data. This privacy policy will inform you about how we handle your personal data when you sign up for our pre-launch program and your privacy rights.

2. Data We Collect

For Customers:

• Email address
• First and last name
• Consent and preference records (terms acceptance, marketing opt-in)
• Account data and purchase history for surprise bags

For Businesses:

• Email address
• Business name and type
• Contact person name and phone number
• Business address and location
• Consent and preference records

3. How We Use Your Data

We use your personal data to:

• Verify your signup and create your account
• Process your surprise bag purchases and connect you with businesses
• Send you important updates about our launch and available surprise bags (if you've opted in)
• Comply with legal obligations

4. Legal Basis for Processing (GDPR)

We process your data based on:

• Consent: You have given clear consent for us to process your data for specific purposes
• Legitimate interests: Processing is necessary for our legitimate business interests
• Legal obligation: Processing is necessary to comply with the law

5. Data Retention

We retain your personal data for 5 years from the date of signup to maintain your account history and purchase records. This retention period ensures we can provide you with a complete history of your surprise bag purchases and support any customer service needs. You may request deletion of your data at any time by contacting us, and we will process your request in accordance with applicable law.

6. Your Rights Under GDPR

You have the right to:

• Access: Request a copy of your personal data
• Rectification: Request correction of inaccurate data
• Erasure: Request deletion of your data (right to be forgotten)
• Restrict processing: Request limitation of how we use your data
• Data portability: Receive your data in a structured, machine-readable format
• Object: Object to processing of your data
• Withdraw consent: Withdraw consent at any time

7. Data Security

We have implemented appropriate security measures to prevent your data from being accidentally lost, used, accessed, altered, or disclosed in an unauthorized way.

8. Data Sharing

We do not sell your personal data. We may share your data with trusted third parties only when necessary to provide our services (e.g., email service providers), and only under strict data protection agreements.

9. Marketing Communications

We will only send you marketing communications if you have explicitly opted in. You can opt out at any time by clicking the unsubscribe link in any email we send you.

10. Changes to This Policy

We may update this privacy policy from time to time. We will notify you of any changes by updating the version number and date at the top of this policy.

11. Contact Us

If you have any questions about this privacy policy or wish to exercise your rights, please contact us at: