Privacy notice

Updated 30 October 2026. This notice covers the Navriqo customer Gift Finder.

Who is responsible

Tim Mills trading as Navriqo is the controller, a UK sole trader. Email hello@navriqo.com. Business correspondence: 18 Piermont Road, London SE22 0LN, United Kingdom.

Your Gift Finder answers

The finder uses your occasion, relationship, category, optional interest keywords, gift format and budget guide. JavaScript processes these details in your browser to order the gift ideas and restore your journey. The application does not submit these answers to Navriqo, OpenAI, an AI service or a retailer, or put them in the page URL. Do not enter names, contact details or sensitive information about anyone. Interest keywords are optional. No customer account, upload, payment or recipient registration is required.

Category, interest keywords and gift format affect ordering. Occasion, relationship and the budget guide are saved for your planning; the current unpriced collection is not filtered by budget. This does not make decisions with legal or similarly significant effects.

Browser storage and deletion

The finder uses two sessionStorage entries for answers, the unfinished step, displayed results, selected gift and return position. These support the journey you request, including returning from a gift. Saved journeys can resume within two hours of their last update; this is a resume-validity limit, not automatic deletion. Data remains until replaced, cleared by a fresh Find a gift journey or Start again, or the browser ends the tab session. Browsers may restore sessions.

You can use Clear Navriqo finder data or browser settings to remove it. An unused localStorage preference from older releases may remain until cleared; this release does not read it or use it to authorise tracking. Clearing finder data does not erase hosting security cookies or server records.

Website delivery and security

Loading pages and images sends ordinary technical request information to the hosting infrastructure: for example your IP address, requested page or asset, browser/device information and request time. Necessary security cookies may also be used. The application has no optional analytics, advertising pixel, marketing SDK, enquiry-submission endpoint or business database. Images and application scripts are served from the site’s own origin.

OpenAI hosts the site using service providers including Cloudflare. For Hosted Data collected through a published individual ChatGPT Site, OpenAI acts as processor on our behalf under the ChatGPT Sites Data Processing Addendum. It covers hosting, maintenance and support, including visitor-generated log, device and cookie data. Its obligations include confidentiality, security, assistance with rights and breaches, and controls over authorised subprocessors. Not every provider on that list necessarily processes this site’s data.

Why we use information

Our legitimate interests under Article 6(1)(f) UK GDPR are providing the free Gift Finder and return-navigation service you request, delivering pages reliably, preventing abuse and responding to messages you choose to send. We have assessed necessity and the effect on visitors: answers stay local, optional text can be skipped, there is no customer profiling account or marketing tracking, and you can clear the finder. We process information to comply with legal obligations where required, including handling applicable privacy rights.

The browser storage is used for the requested session and return journey. Necessary security storage is used to protect delivery. We rely on the applicable strictly necessary storage exception for these limited purposes, not on the fact that information is browser-local. Optional analytics and advertising storage are not enabled. See the cookie and storage notice.

International processing and safeguards

OpenAI OpCo, LLC is the US importer for UK Hosted Data under section 4.2 of the Sites DPA. Hosting and support can involve processing outside the UK, including in the United States and the countries in OpenAI’s published provider list. This site does not promise UK-only or EU-only processing, and we have not verified an individual data-centre location.

For UK Hosted Data, the DPA incorporates Standard Contractual Clauses with the UK Addendum, completed as described in Schedule 1. We have documented a proportionate transfer assessment for this limited technical-data use. We do not rely on an unverified Data Privacy Framework certification. You can obtain the contractual safeguards through the published DPA, or contact us for information about the safeguards relevant to your request. Regional hosting settings do not guarantee that all technical processing stays in a region.

Retention criteria

Navriqo does not create a separate business database of your finder answers or visitor logs. OpenAI’s contractual processing duration covers the hosting term and the time needed afterwards to perform end-of-service obligations, including deletion. Under section 2.11, after the agreement ends we can instruct return or deletion of Hosted Data and copies, subject to legally required retention, which must be isolated and protected. This is not a claim that each request log is kept for the whole term or erased after a fixed number of days; a deployment-specific log timer has not been independently verified.

Our retention policy limits information we control to what is needed for the requested service, investigating abuse or resolving a matter, and any necessary legal record. We review the need when those purposes end and seek deletion or return through the hosting provider where appropriate. The browser’s clearing control cannot erase infrastructure logs.

If you email us

The contact link opens your email application; there is no on-site enquiry form. If you choose to email, we use your address, message and any replies to answer and manage your enquiry. Email service providers handle transmission and mailbox storage. We do not claim a particular email-hosting country or an unverified email-provider transfer arrangement.

Our policy from 30 October 2026 is to review correspondence when the enquiry and any necessary follow-up are closed, remove personal information no longer needed, and retain only what is necessary for an unresolved matter, a dispute or a legal obligation. There is no fixed blanket retention period and no claim of historical automatic deletion. We do not use enquiries for marketing.

Retailer websites

Retailer links open separate websites with their own privacy notices, cookies and terms. The retailer receives ordinary technical details of your visit. Links use noopener noreferrer and contain no finder answers or Navriqo affiliate identifiers. Retailers determine current prices, availability and delivery.

Your choices and rights

Skip optional keywords, start a fresh journey, or clear finder data on the storage page. Depending on the processing, your rights may include access and a copy, correction, deletion and restriction.

Right to object: you can object to processing based on legitimate interests, explaining your circumstances. Contact hello@navriqo.com to exercise your rights or ask about retention and safeguards. We may need proportionate information to verify a request; do not send identity documents unless securely arranged. You can complain to the UK Information Commissioner’s Office.

The separate owner-only acceptance preview uses the platform’s ChatGPT sign-in gate. The public Gift Finder has no customer sign-in feature and does not read a visitor profile. We will review this notice before introducing accounts, uploads, enquiry forms, analytics, marketing or affiliate tracking, or changing the processing described here.