Privacy

Who we are

Get Me This is run by Hot Tequila Limited (“we”, “us”), a company registered in England and Wales (company number 16902626) with its registered office at Dorset House, 5 Church Street, Wimborne, BH21 1JH. We are the controller of the personal data described here under UK data protection law (the UK GDPR and the Data Protection Act 2018).

Get Me This is meant for people aged 16 and over. A parent or guardian can make a list on a child’s behalf. We don’t knowingly collect personal data from children under 16.

What we collect

• Your lists: titles, dates, messages, cover pictures and the items you add, including names, links, prices and notes.
• Item images: when you add a link, we copy the shop’s product image to our own storage so it keeps loading if the shop changes its page.
• Account details: the email address of list owners and co-owners, used to send sign-in codes. There are no passwords.
• Guest details: when a guest claims a gift, we store their name, any message they leave and, if they choose, their email so we can send them the shop link, a link to undo the claim, one reminder before the event and any thank-you note the list owner sends through us.
• Messages to us: your name, email, message and any list link you include when you use the contact form.
• Technical data: your IP address, browser and device type, stored with your session and in server logs to keep you signed in, limit abuse and fix problems.

We don’t take payments, so we never see card or bank details. We don’t buy personal data or collect it from other sources.

Who can see what

• Anyone with a list’s link can see the list and which items are taken, but not who took them.
• List owners only see guests’ names and messages if they open the reveal and confirm.
• Guest emails are never shown to list owners, even when they send a thank-you note. The note comes from us with the owner’s email as the reply address, so a reply goes straight to them.
• Lists are hidden from search engines and use links that can’t be guessed.

How we use it and why

UK law requires a lawful basis for each use of personal data. We use yours to:

• run the service you asked for: save and show lists, record claims, and send sign-in, undo, reminder, thank-you and co-owner invitation emails. Basis: performance of a contract and our legitimate interest in providing it.
• reply when you contact us. Basis: legitimate interests.
• keep Get Me This safe and working: prevent spam and abuse, look into reported lists and fix problems. Basis: legitimate interests.
• understand how the site is usedthrough anonymous totals. Basis: legitimate interests.
• meet our legal obligations, such as answering lawful requests from authorities. Basis: legal obligation.

We don’t sell your data, use it for advertising or send marketing emails. If we ever want to send marketing, we’ll only do so with your consent, and you’ll be able to unsubscribe at any time.

Cookies and analytics

We only use cookies that are needed for the site to work, so we don’t show a cookie banner. We count visits with privacy-friendly analytics that don’t use cookies and don’t track you across other sites. Our cookie policy lists each cookie and what it does.

Who we share it with

We share personal data only where we need to run Get Me This or where the law requires it:

• Service providers: Laravel Cloud (hosting, database and image storage), Bento (sending emails) and Plausible (analytics). They process data only on our instructions and must keep it confidential and secure.
• Professional advisers and authorities: lawyers, accountants, insurers, regulators, courts or the police where needed to meet legal obligations or to establish or defend legal claims.
• A new owner: if Get Me This is sold or restructured, your data may pass to the new owner, who must keep using it in line with this notice.

International transfers

We run Get Me This from the UK, but some of our providers process data in other countries. When data leaves the UK, we make sure it’s protected, either because the country has UK adequacy status or by using approved safeguards such as the UK International Data Transfer Agreement or Addendum.

Keeping it secure

We use encrypted connections, encrypted cookies, sign-in codes that expire, access controls and secure hosting, and only people who need personal data to do their job can see it. If a breach puts your data at risk, we’ll investigate and, where the law requires, tell you and the Information Commissioner’s Office.

How long we keep it

• Lists, their items and their claims are kept until the list is deleted. You can delete a list at any time, or delete your account and every list in it from your account page.
• Messages sent to us are kept for as long as we need them to help you.
• Session records and server logs are kept for a short time and then deleted.
• Deleted data may stay in encrypted backups for a limited period before it’s overwritten.

We may keep information for longer where the law requires it or to establish or defend legal claims. Anonymised totals that can’t identify you may be kept indefinitely.

Your rights

Under UK data protection law, you can ask us to:

• give you a copy of the personal data we hold
• correct data that’s wrong or incomplete
• delete your data
• limit how we use your data
• send your data to you or another provider

You can also object to uses based on our legitimate interests, and withdraw consent where we rely on it.

Email [email protected] or use the help page and choose “Privacy or my data”. It’s usually free. We may ask you to confirm your identity, and we aim to reply within one month.

Complaints

If you’re unhappy with how we’ve handled your data, please tell us first so we can put it right. You can also complain to the Information Commissioner’s Office at ico.org.uk.

Links to shops

Lists link to other shops and websites. When you follow a link, that site’s own privacy policy applies. We don’t control those sites and aren’t responsible for how they use your data.

Changes

If we change how we use your data, we’ll update this page and the date at the top, and tell you by email if the change is significant.