Privacy Policy

Last updated: 8 May 2026

This Privacy Policy explains how Digital gifts d.o.o., doing business as Coffer (“Coffer”, “we”, “us” or “our”), collects, uses, stores and shares personal data when you visit our website, place an order, contact us or use our gifting experience.

Coffer provides a physical gifting experience combined with access to digital asset value enabled by our regulated crypto-asset partner, Digital Assets d.o.o., doing business as Bitcoin Store.

Coffer is not a crypto exchange, a wallet provider or a custodian of crypto-assets.

1. Who we are

The controller of the personal data described in this Privacy Policy is:

Digital gifts d.o.o. Makarska ulica 17 Split, Croatia OIB/VAT ID: 45193514617/HR45193514617 Website: giftbycoffer.com E-mail: hello@giftbycoffer.com

For privacy-related questions or requests, you can contact us at hello@giftbycoffer.com.

2. What personal data we collect

We collect the personal data needed to operate our website, process orders, deliver gifts, communicate with customers and support the gift redemption process.

2.1. Customer data

When you place an order, we may collect:

first and last name
e-mail address
phone number
delivery address
billing address
order details
payment status, for example whether a payment was successful, unsuccessful or refunded
customer support communications.

2.2. Guardian or adult contact person data

To manage the gift redemption process, we may collect data about the gift recipient's guardian or another adult contact person, including:

first and last name
phone number
country of tax residence.

We use this data to link the gift to the appropriate adult contact person and to support the gift redemption process with our regulated crypto-asset partner.

We do not require the child's name, date of birth, identification documents or any other data relating specifically to the child.

2.3. Gift message

You can choose whether to include a message with your gift. It is optional.

Please do not include sensitive personal data or unnecessary data relating to a child in the gift message.

If you enter a gift message, we process it solely to fulfil the order and provide the gifting experience.

2.4. Payment data

Payments are processed by our payment service provider, currently Stripe.

We do not collect or store full payment card numbers, CVV codes or complete card details.

Stripe may process payment card data, billing data, fraud prevention data and transaction data in accordance with its own terms and privacy documentation.

We may receive limited payment-related data from Stripe, such as payment status, transaction identifier, card brand, the last four digits of the card, billing details, refund status and fraud or risk indicators where relevant.

For more information about how Stripe processes personal data, please see Stripe's privacy policy.

2.5. Website and technical data

When you visit our website, we may process limited technical data needed to operate, maintain and protect the website, such as:

IP address
browser and device data
server logs
pages visited
date and time of access
basic security and diagnostic data.

At this stage, we do not use analytics tools, marketing pixels or non-essential cookies.

If we introduce analytics tools, advertising pixels, newsletter tools or similar services in the future, we will update this Privacy Policy and, where required, ask for your consent.

3. How we use personal data

We use personal data for the purposes described below.

3.1. To process and deliver orders

We use customer, delivery, billing and order data to process purchases, prepare gifts, arrange delivery, communicate about the order, provide customer support and handle refunds, complaints or delivery issues.

Legal basis: performance of a contract or taking steps prior to entering into a contract.

3.2. To manage the gifting experience

We use guardian or adult contact person data to link the gift to the appropriate adult contact person and to support the gift redemption process.

Legal basis: performance of a contract and our legitimate interest in providing and protecting the gifting experience.

3.3. To coordinate with our regulated crypto-asset partner

We may share limited guardian or adult contact person data with Bitcoin Store where needed to link the gift to the appropriate redemption process.

This may include:

first and last name
phone number
country of tax residence
gift reference number or status data.

Legal basis: performance of a contract and our legitimate interest in enabling the gift redemption process.

3.4. To process payments

We use Stripe to process payments, confirm payment status, resolve payment errors, manage refunds and prevent fraud.

Legal basis: performance of a contract, legal obligations and our legitimate interest in secure payment processing.

3.5. To meet legal, tax and accounting obligations

We may process and retain order, invoice, payment and accounting data to comply with applicable tax, accounting and consumer protection regulations and business record-keeping obligations.

Legal basis: legal obligation.

3.6. To communicate with you

We may use your e-mail address or phone number to send order confirmations, delivery notifications, customer support responses, service information or information needed to complete the gifting experience.

Legal basis: performance of a contract and legitimate interest.

3.7. To protect our website and business

We may process technical data, logs and transaction data to detect, prevent and investigate fraud, abuse, security incidents or technical issues.

Legal basis: legitimate interest.

3.8. Marketing communications

We currently do not send marketing newsletters.

If we introduce marketing e-mails in the future, we will do so in accordance with applicable regulations. Where required, we will ask for your consent, and you will be able to unsubscribe at any time.

4. Bitcoin Store and KYC

The digital asset value linked to a Coffer gift is enabled through our regulated crypto-asset partner, Bitcoin Store.

To redeem the digital asset value, the recipient's legal guardian or another eligible adult contact person may need to register with Bitcoin Store and complete identity verification, KYC, AML or other compliance checks required by Bitcoin Store and applicable regulations.

Bitcoin Store is responsible for the personal data it collects during registration, account opening, identity verification, wallet setup, compliance checks and the digital asset redemption process. That processing is governed by Bitcoin Store's own privacy policy and legal terms.

Coffer does not control Bitcoin Store's KYC process.

Coffer does not receive or store complete identity verification documents, facial photographs, identity cards, proof of address documents, tax identification data or similar KYC documentation from Bitcoin Store.

Coffer may receive limited gift status data where needed, for example whether a gift code has been issued, whether the process has been started, whether the gift has been redeemed or whether the process has been completed.

5. Who we share personal data with

Where necessary, we may share personal data with the following categories of recipients:

payment service providers, including Stripe
delivery and logistics providers
hosting and infrastructure providers, including Vercel
e-mail and communication service providers
technical service providers and developers
accounting, tax, legal and business advisers
Bitcoin Store, where needed for the gift redemption process
public authorities, regulators, courts or law enforcement bodies where required by law.

We only share personal data where there is a valid purpose and a legal basis for doing so.

6. International transfers

Some of our service providers may process personal data outside the European Economic Area.

Where personal data is transferred outside the EEA, we rely on appropriate safeguards where required, such as adequacy decisions, standard contractual clauses or other lawful transfer mechanisms in accordance with the GDPR.

7. How long we keep personal data

We keep personal data only for as long as needed for the purposes described in this Privacy Policy.

In practice:

order and transaction data may be kept for as long as required by tax, accounting and business record-keeping regulations
customer support communication may be kept for as long as needed to resolve issues and protect our legal interests
delivery data may be kept for as long as needed for delivery, complaints, returns and statutory record keeping
technical logs are kept for a limited period needed for security, diagnostics and fraud prevention
optional gift messages are kept for as long as needed to provide the gifting experience and handle related support or legal obligations.

When we no longer need personal data, we delete or anonymise it, unless we are legally required to keep it longer.

8. Your rights

Depending on the circumstances and applicable regulations, you may have the right to:

request access to your personal data
request correction of inaccurate or incomplete personal data
request deletion of your personal data
request restriction of processing
object to processing based on legitimate interests
request data portability
withdraw consent where processing is based on your consent
lodge a complaint with the competent supervisory authority.

To exercise your rights, contact us at hello@giftbycoffer.com.

If you are located in Croatia, you can also contact the Croatian Personal Data Protection Agency, AZOP.

9. Security

We apply reasonable technical and organisational measures to protect personal data against unauthorised access, loss, misuse, alteration or disclosure.

Access to personal data is limited to authorised employees, contractors and service providers who need it for business, technical, customer support, accounting or legal purposes.

No online system is completely secure, but we strive to limit access, minimise unnecessary data collection and protect personal data throughout its entire life cycle.

10. Children's data

Coffer gifts may be intended for children or families, but our purchase and gift redemption process is designed to be carried out by adults.

We do not require customers to provide the child's name, date of birth, identification documents or any other data relating specifically to the child.

If a customer voluntarily enters a child's name or other child-related data in the gift message, we process that data solely to fulfil the order and provide the gifting experience.

Opening a Bitcoin Store account, the KYC process and the digital asset redemption process must be completed by an eligible adult or a legal guardian, in accordance with Bitcoin Store's terms and legal requirements.

11. Cookies

At this stage, we do not use analytics cookies, advertising cookies or marketing pixels.

Our website may use strictly necessary technologies needed for the operation of the website, the checkout process, security or basic technical functions.

If we introduce analytics, advertising, personalisation or other non-essential cookies in the future, we will update this Privacy Policy and, where required, provide a cookie banner or another consent mechanism.

12. Changes to this Privacy Policy

We may update this Privacy Policy from time to time, including when we introduce new features, service providers, analytics tools, marketing tools, delivery options or changes to the gift redemption process.

The updated version will be published on our website with a new “Last updated” date.

13. Contact

For questions about this Privacy Policy or how we process personal data, contact us at:

Digital gifts d.o.o. Makarska ulica 17 Split, Croatia OIB/VAT ID: 45193514617/HR45193514617 Website: giftbycoffer.com E-mail: hello@giftbycoffer.com