We wrote this the way we'd want to read it: in plain English, without a law degree required. Here's exactly what data we collect, why, and what we'll never do with it.
We only collect what we actually need to get your gift to you. Here's the full picture:
| Information | How we get it |
|---|---|
| Name, email, company, job title | Provided to us by the company sending you the gift |
| Delivery address & phone number | You enter these when you claim your gift |
| Thank-you note (optional) | You write this if you choose to send one |
| Claim page activity | We log when the claim page was opened and when a gift was claimed |
That's the whole list. We don't run trackers, we don't fingerprint your browser, and we don't collect anything beyond what's in that table.
Every piece of data we collect has a specific, single purpose:
Your name, email, company, and title come from the sender so we can personalize your gift experience and send you relevant emails (teaser, reveal, and delivery confirmation).
Your delivery address and phone number are used exclusively to ship your gift to you. Your address is passed to the shipping carrier and to the bond&beyond operations team coordinating delivery. It goes nowhere else.
Your thank-you note, if you write one, is shared with the person or company who sent you the gift. That's its only purpose. It's a nice thing to do.
Page activity is tracked so the company that sent you the gift can see their campaign performance (for example, "12 of 25 recipients claimed their gift"). No individual browsing data, no ad tracking.
Three groups, and here's exactly what each one sees:
| Who | What they can see |
|---|---|
| bond&beyond operations team | Everything needed to coordinate and deliver your gift: name, address, phone, email, and gift status |
| Shipping carrier | Your delivery address and name only, which is the minimum needed to deliver a package |
| The company that sent you the gift | Your name, whether you claimed your gift, and your thank-you note (if you wrote one). They do not see your home address. |
Important: The company that sent you the gift cannot see your delivery address. They see claim status and campaign metrics, not where you live.
We don't hold onto your data longer than we need to.
Delivery addresses and phone numbers are automatically deleted 90 days after delivery confirmation. After that point, we no longer need them and we don't keep them.
Your name, email, and claim status are retained for campaign reporting purposes so the sender can see that their campaign was successful. If you'd like these deleted as well, just ask.
Thank-you notes are retained so the sender has a record of your message.
You can request full deletion of all your data at any time by emailing bond@bndndbnd.com. We'll confirm within 7 business days and complete the deletion promptly.
Regardless of where you're located, you can always:
Request a copy of your data. Email us and we'll send you everything we have on file for you within 7 business days.
Request correction. If anything we have on file is inaccurate, we'll fix it.
Request deletion. Ask us to delete everything and we'll do it. There's no catch, no fee, no hoops.
All requests go to bond@bndndbnd.com. We aim to respond within 7 business days.
If you're in the European Union, EEA, or UK, a few additional things are worth knowing:
Legal basis for processing: We process your data on the basis of legitimate interest, specifically fulfilling a gift delivery that was initiated on your behalf by the sending company.
Data location: Your data is stored and processed in the United States via Supabase (database) and Vercel (infrastructure). Both are GDPR-compliant service providers with appropriate data processing agreements in place.
Right to erasure: You can request deletion of all your data at any time. We'll comply promptly.
Right to object: If you have concerns about how we're processing your data, email us. We take these seriously.
For GDPR-related inquiries, contact bond@bndndbnd.com.
Our service is intended for business use. We do not knowingly collect personal information from anyone under the age of 16. If you believe we've inadvertently collected information from a minor, please contact us immediately at bond@bndndbnd.com and we will delete it.
We keep this simple for a reason. If you have any questions about how we handle your data, or if you want to exercise any of your rights, reach out directly. A real person will respond.
Questions, data requests, or anything else privacy-related.
We respond within 7 business days.
This policy may be updated from time to time. We'll update the effective date at the top when it changes. Material updates will be communicated to affected recipients by email.