Effective Date: 13 October 2026

Website: https://giftlio.com/

Company: Lumeris Store Ltd

Company Number: 17410906

Registered Office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE

Contact Email: support@giftlio.com

1. Introduction

This Cookie Policy describes how Lumeris Store Ltd (“Giftlio”, “Company”, “we”, “us”, or “our”) uses cookies and comparable digital technologies in connection with the operation of https://giftlio.com/ (the “Website”).

Giftlio operates an online retail platform offering digital gift cards, prepaid activation codes, gaming-related digital products, and other electronically delivered products. To ensure that the Website operates efficiently, securely, and conveniently, certain cookies and related technologies may be used when visitors browse our pages, select products, proceed through checkout, or interact with our services.

We recognise the importance of transparency regarding technologies that collect or store information on customers’ devices. This Cookie Policy explains the purposes of these technologies, the categories of cookies that may be used, how information collected through them is handled, and the options available to visitors for controlling their preferences.

Our use of cookies is governed by applicable privacy and electronic communications legislation, including the UK General Data Protection Regulation (“UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations (“PECR”), and, where applicable, the EU General Data Protection Regulation.

Certain cookies are essential for services requested by users and may operate without consent where permitted by law. Other cookies, particularly those used for optional analytics, personalisation, or advertising, will require consent unless an applicable legal exemption exists.

This document should be considered alongside Giftlio’s Privacy Policy and Terms and Conditions, which contain further information about personal data processing and the contractual relationship between the Company and its customers.

2. Understanding Cookies and Similar Technologies

Cookies are small files containing information that a website stores on a visitor’s computer, mobile phone, tablet, or other internet-connected device.

They are commonly used to remember information about browsing sessions, maintain website functionality, recognise devices, preserve selected preferences, and support secure online transactions.

Cookies may be classified according to their origin, duration, and purpose.

First-party cookies are created or managed by the website being visited. On Giftlio, these may support essential shopping functions, customer sessions, and Website preferences.

Third-party cookies originate from external providers whose services are integrated into the Website. Such providers may include payment processing companies, security services, analytics providers, and other technology suppliers.

Session cookies operate temporarily while a visitor is using the Website. They are generally removed when the browsing session ends or the browser is closed, subject to the relevant browser’s session-restoration features.

Persistent cookies remain on a device for a defined period or until the visitor deletes them. These cookies may support preference retention, security controls, and recognition of returning visitors.

In addition to conventional cookies, websites may use browser local storage, tracking pixels, scripts, tags, and comparable technologies that perform similar functions.

For the purposes of this Policy, references to cookies include these related technologies where appropriate.

3. Purposes for Which Cookies Are Used

Cookies can perform several important functions in the delivery and management of online retail services.

Giftlio uses or may use these technologies to support Website availability, maintain secure user sessions, facilitate shopping cart operations, enable payment-related functions, remember selected preferences, and protect the Website against suspicious or unauthorised activity.

Where optional technologies are implemented and the necessary consent has been obtained, cookies may also help us understand how visitors navigate the Website, identify technical issues, assess the usefulness of particular pages, and improve the overall customer experience.

Some technologies may assist in monitoring system performance, preventing repeated errors, maintaining compatibility with different devices, and ensuring the reliability of checkout and digital product delivery processes.

Where applicable, cookies may also be used to assess the effectiveness of marketing campaigns or provide more relevant promotional content.

Information collected through cookies will be processed only for legitimate and disclosed purposes, subject to the applicable legal requirements.

Where cookie information constitutes personal data, its processing is also subject to our Privacy Policy.

4. Categories of Cookies

The cookies used on a website can be grouped according to their operational purpose.

Giftlio distinguishes between technologies necessary to provide core Website services and those offering additional functionality or supporting optional business activities.

The principal categories relevant to the Website are strictly necessary cookies, functional cookies, analytics and performance cookies, advertising and marketing cookies, and cookies associated with third-party integrations.

Not every category will necessarily be active at all times. The technologies used may vary according to the features enabled on the Website, the services selected by visitors, and the third-party providers engaged by the Company.

Each cookie should be evaluated according to its actual purpose and function rather than solely according to the provider that places it.

Where legally required, cookies that are not strictly necessary will remain inactive until the visitor has provided appropriate consent.

Giftlio may periodically review its cookie configurations to ensure that the technologies used remain relevant to the Website’s operations and comply with applicable legislation.

5. Strictly Necessary Cookies

Strictly necessary cookies are required for the operation of services and functions that visitors expressly request from the Website.

These technologies support fundamental features such as secure navigation, shopping cart functionality, checkout operations, session continuity, authentication where available, fraud prevention, and network protection.

For example, when a customer selects a digital gift card or activation code and proceeds to checkout, certain cookies may be necessary to preserve the shopping cart and maintain the connection between the visitor’s session and the relevant order.

Security-related cookies may also assist in identifying potentially harmful requests, preventing unauthorised access, protecting sessions against misuse, and maintaining stable communication with Website infrastructure.

Certain payment service integrations may rely on cookies or comparable technologies that are genuinely necessary to carry out secure checkout or authentication functions requested by the customer.

Cookies that meet the applicable legal requirements for the strictly necessary exemption do not require prior consent under PECR.

This exemption does not extend to cookies merely because they are useful to the Company. Technologies used for advertising, unrelated tracking, or optional analytics must be considered separately.

Visitors may be able to block technically necessary cookies through their browser settings. However, doing so may prevent the shopping cart, checkout, account functions, or other important Website features from operating correctly.

6. Functional Cookies

Functional cookies support optional Website features that improve convenience, usability, and the consistency of a visitor’s browsing experience.

Depending on the functionality available, these cookies may remember language preferences, selected currencies, regional settings, accessibility adjustments, or other configuration choices.

For an online platform serving customers across different markets, remembering previously selected settings may help visitors navigate the Website more conveniently and reduce the need to repeatedly configure the same options.

Functional technologies may also support certain customer assistance features, display preferences, or personalisation options, where these functions are implemented.

The information collected through these cookies should be limited to what is necessary for the relevant functionality.

Where functional cookies are not covered by an applicable exemption, they will be activated only after the required consent has been obtained.

Declining optional functional cookies will not ordinarily prevent customers from browsing the Website or purchasing products, although some convenience features may become unavailable or require repeated configuration.

Functional cookies are not treated as advertising cookies unless they are also used for advertising-related purposes, in which case the relevant disclosures and consent requirements apply.

7. Analytics and Performance Cookies

Analytics and performance cookies may be used to understand how the Website functions and how visitors interact with its content.

These technologies can help identify technical problems, evaluate navigation patterns, measure page performance, and determine whether Website improvements are effective.

Information obtained through analytics tools may include pages visited, time spent on different sections, approximate geographical location, device category, browser information, referring sources, and interactions with specific Website features.

For example, aggregated usage information may help Giftlio identify checkout pages that load slowly or areas of the Website where customers experience navigation difficulties.

Where implemented, analytics information may be reviewed in aggregated or pseudonymised form to support operational improvements. However, pseudonymised information may still qualify as personal data under applicable legislation.

Giftlio may engage third-party analytics providers to support these activities. Where those providers process information on the Company’s behalf, appropriate data protection arrangements will be established as required.

Optional analytics cookies will be used only where the applicable consent requirements have been satisfied, unless a specific legal exemption applies to the technology and its actual use.

Visitors who decline analytics cookies should remain able to access the core purchasing functions of the Website.

8. Advertising and Marketing Cookies

Giftlio may use advertising or marketing cookies where such technologies are implemented as part of its customer acquisition and promotional activities.

These cookies may help measure the effectiveness of online advertising, identify whether visitors arrive through particular campaigns, limit repeated advertisements, or present promotional content relevant to a visitor’s previous interactions.

Depending on the technologies involved, information collected may include pages viewed, product interactions, device and browser characteristics, advertisement engagement, campaign identifiers, and certain transaction-related events.

Marketing technologies may also involve third-party advertising platforms that process information in accordance with their respective privacy policies.

Giftlio will obtain the consent required by applicable legislation before placing or accessing advertising cookies that are not covered by a valid exemption.

Refusing marketing cookies does not prevent visitors from accessing the Website or purchasing digital products.

Visitors who decline advertising cookies may continue to encounter advertisements for Giftlio through ordinary online channels, but those advertisements should not rely on the declined cookie-based tracking activities.

Consent may be withdrawn in accordance with the mechanisms described in this Policy.

9. Cookies Associated with Third-Party Services

Operating an online store may require the integration of specialised third-party services.

These services can include payment gateways, checkout authentication systems, fraud prevention platforms, hosting and security infrastructure, customer support systems, analytics solutions, and other technical tools.

Certain external services may use cookies or similar technologies when customers interact with features supported by those providers.

For example, payment service providers may use session technologies to maintain transaction integrity, perform authentication, or help identify potentially unauthorised payment activity.

Security providers may use cookies to distinguish legitimate browsing activity from potentially malicious automated requests.

Where implemented, analytics and marketing providers may use their own technologies to provide statistical reporting or campaign measurement services.

The legal basis and consent requirements for these technologies depend on their actual functions. The presence of a third-party provider does not automatically make its cookies strictly necessary.

Third-party organisations may act as processors on behalf of Giftlio or as independent controllers in relation to particular processing activities.

Where a third party independently determines the purposes and means of processing personal information, the relevant activities may also be governed by that organisation’s privacy and cookie policies.

Giftlio encourages visitors to review applicable third-party privacy information when interacting directly with external services.

10. Information Obtained Through Cookies

The exact information collected through cookies depends on the technology involved and the functionality being used.

Potential categories include session identifiers, device characteristics, browser settings, technical access information, language preferences, Website navigation events, security indicators, and information concerning shopping cart interactions.

Cookies may also be associated with IP addresses, approximate geographical information, transaction-related identifiers, or account information where the relevant technology is connected to a logged-in session or checkout process.

Not all cookie information directly identifies an individual. However, certain identifiers can become personal data when linked to other information or when they allow an individual to be singled out or recognised.

Information collected through cookies may be processed for security, service delivery, technical maintenance, statistical analysis, and other disclosed purposes, subject to the relevant legal conditions.

Giftlio does not treat information as anonymous merely because it does not contain a customer’s name or email address.

Where cookie information constitutes personal data, the rights and protections described in the Company’s Privacy Policy apply.

11. Storage Periods and Cookie Expiration

Cookies can remain on a visitor’s device for different periods depending on their purpose and configuration.

Temporary session cookies generally expire when the relevant browsing session ends. These cookies are commonly used to preserve shopping cart information, manage temporary authentication, and maintain continuity during Website navigation.

Persistent cookies may remain available after the browser has been closed.

Such cookies may be used to retain preferences, remember previous consent selections, or support security and functionality during future visits.

The duration of individual cookies depends on their operational purpose, technical settings, and any applicable requirements established by the relevant service provider.

Giftlio seeks to ensure that cookie storage periods are appropriate and do not exceed what is reasonably necessary for the purpose for which the technology is used.

Where cookies process personal information, related data retention practices are also governed by applicable data protection legislation.

Cookies may be removed earlier by users through browser settings or other available preference controls.

A specific cookie inventory, where published, should identify the individual technologies currently in use, their providers, purposes, and applicable expiration periods.

12. Consent and Cookie Preference Management

Where consent is legally required, Giftlio will request it before activating the relevant non-essential cookies or similar technologies.

Visitors should be given clear information about the purposes of optional cookies and an opportunity to make an informed choice.

Where optional cookies are used, the Website should provide an appropriate consent mechanism through which users can accept, reject, or customise the relevant categories.

The available choices should be presented fairly and must not rely on preselected consent for non-essential cookies.

Withdrawing consent should be as straightforward as providing it, and the Website should make an accessible method available for changing previously selected preferences.

When a visitor withdraws consent, the relevant optional technologies should cease operating for future activities within the Company’s control. Previously stored cookies should be removed or disabled where technically appropriate.

Consent withdrawal does not affect the lawfulness of processing completed before the withdrawal.

Strictly necessary cookies may remain active where they genuinely fall within an applicable consent exemption.

Giftlio may retain limited records of cookie preferences where reasonably necessary to demonstrate compliance with applicable legal obligations.

13. Browser-Based Cookie Controls

In addition to Website-specific preference controls, most modern browsers provide settings that allow visitors to manage cookies directly.

Depending on the browser, users may delete stored cookies, block third-party cookies, reject particular categories of technologies, restrict tracking features, or configure cookies to be removed when browsing sessions end.

These settings are generally accessible through the browser’s privacy, security, or site data options.

Visitors should be aware that browser controls operate independently of the Website’s own consent mechanism and may affect cookies used across multiple websites.

Blocking all cookies may interfere with fundamental Giftlio features, particularly shopping cart management, payment processing, authentication, and secure session functionality.

Removing previously stored cookies may also reset saved preferences and cause a website to request consent again.

Users who access Giftlio through several browsers or devices may need to configure their preferences separately for each environment.

The Company encourages visitors to use the available browser privacy tools alongside any cookie controls provided directly on the Website.

14. Payment and Checkout Technologies

Giftlio provides electronically delivered products that are purchased through online checkout processes.

Secure and reliable payment processing is therefore an important part of the Website’s functionality.

Certain technologies may be used during checkout to maintain the connection between a customer’s browsing session, selected products, payment request, and resulting order confirmation.

External payment service providers may also use cookies or related technologies to authenticate transactions, maintain security, and prevent payment fraud.

Depending on the payment provider, these technologies may support payment verification, authentication challenges, device recognition, and the detection of suspicious transaction patterns.

Where these technologies are strictly necessary to provide the checkout or authentication service requested by the customer, they may qualify for a consent exemption under applicable law.

Any technologies serving additional purposes, including unrelated tracking or advertising, remain subject to the relevant requirements.

Payment service providers may independently process certain technical information in accordance with their own legal obligations and published privacy notices.

For further information about how transaction-related personal data is handled, customers should refer to Giftlio’s Privacy Policy.

15. Information Security and Cookie Data

Information generated through cookies may have security implications, particularly where it relates to customer sessions or access to checkout functionality.

Giftlio recognises the importance of protecting such information against unauthorised access, manipulation, loss, and misuse.

The Company will maintain security measures appropriate to the technology used, the sensitivity of information processed, and the risks associated with the Website’s operations.

Depending on the relevant systems, these measures may include secure connections, appropriate cookie configuration, access restrictions, session controls, technical monitoring, and safeguards implemented by hosting or payment service providers.

Where appropriate, cookie attributes such as Secure, HttpOnly, and SameSite may be used to reduce particular security risks.

Access to personal data associated with cookies should be limited to authorised personnel and service providers who require it for legitimate operational purposes.

Third-party processors should be subject to appropriate contractual and security requirements.

No online technology can be guaranteed to eliminate all security risks. However, the Company will seek to ensure that cookies and associated data are handled in a manner consistent with applicable information security and data protection obligations.

16. International Processing of Cookie Information

Some third-party services used by Giftlio may operate infrastructure or employ personnel outside the United Kingdom.

Consequently, information collected through cookies may in certain circumstances be transferred to or accessed from other jurisdictions.

Where such information constitutes personal data, international transfers must comply with the relevant provisions of applicable data protection legislation.

The Company will use appropriate safeguards where required, which may include transfers to jurisdictions covered by applicable adequacy decisions, approved contractual transfer mechanisms, or other legally recognised arrangements.

The safeguards applicable to a particular transfer depend on the location of the recipient, the nature of the information, and the relationship between the parties.

Where the EU GDPR applies, its international transfer requirements will also be considered.

Further details about the Company’s approach to international processing and relevant individual rights are provided in Giftlio’s Privacy Policy.

17. Personal Data Rights Relating to Cookies

Where information collected through cookies constitutes personal data, individuals may have rights under applicable data protection legislation.

Subject to relevant conditions and exceptions, these rights may include requesting access to personal information, correcting inaccurate data, obtaining deletion, restricting certain processing activities, objecting to particular uses, and exercising data portability rights where applicable.

Individuals also have the right to withdraw consent where processing is based on consent.

For cookie technologies that operate through third-party services, some requests may require coordination with the relevant external provider.

The Company may request information reasonably necessary to verify the identity of a person submitting a request involving the disclosure or modification of personal data.

Requests can be submitted by contacting support@giftlio.com.

Giftlio will consider and respond to valid requests within the time limits established by applicable law.

Further details concerning individual rights, legal limitations, and complaint procedures are provided in the Company’s Privacy Policy.

18. Revisions to This Cookie Policy

The Company may update this Cookie Policy to reflect changes in Website functionality, technology providers, legal obligations, privacy requirements, or the purposes for which cookies are used.

Such changes may arise from the introduction of new customer features, improvements to checkout security, updates to analytics arrangements, or the replacement of technical service providers.

Where material changes are made, the revised Policy will be published on the Website with an updated effective or revision date.

If changes involve the introduction of new non-essential cookies or materially different processing purposes, any consent required by applicable law will be obtained before the relevant technologies are activated.

The publication of an updated Policy does not in itself replace consent where consent is legally necessary.

Visitors are encouraged to review the current version periodically to remain informed about the technologies used by Giftlio.

Where appropriate, additional notices may be presented through the Website or its cookie preference interface.

19. Questions, Concerns and Complaints

Giftlio welcomes enquiries from customers and Website visitors concerning cookies, privacy settings, tracking technologies, and the handling of information collected through these mechanisms.

Individuals who require clarification regarding a particular cookie category or the purposes of certain technologies may contact the Company using the details provided below.

Where a concern relates to personal data processing, Giftlio will review the matter in accordance with its Privacy Policy and applicable legal requirements.

If an individual believes that personal information has been processed unlawfully or that relevant privacy rights have not been respected, they may have the right to submit a complaint to the Information Commissioner’s Office (“ICO”) or another competent supervisory authority.

The ICO’s official website is available at https://ico.org.uk/.

Contacting the Company directly does not remove any regulatory or legal rights available to individuals.

20. Contact Details

For questions regarding this Cookie Policy, requests for information about Website technologies, assistance with cookie preferences, or concerns about data protection, please contact:

Lumeris Store Ltd

Company Registration Number: 17410906

Registered Office: 2nd Floor College House, 17 King Edwards Road, Ruislip, London, United Kingdom, HA4 7AE

Website: https://giftlio.com/

Email: support@giftlio.com

We aim to address privacy-related enquiries appropriately and within the timeframes required by applicable legislation.

This Cookie Policy should be read together with Giftlio’s Privacy Policy and Terms and Conditions.

Last Updated: 13 October 2026