Privacy Policy

Gifts4Panthers (this "site," "we," or "us") is a co-branded gift store operated by Basket of Pittsburgh for the University of Pittsburgh community. Basket of Pittsburgh is solely responsible for order fulfillment, customer service, and the information described in this policy. The University of Pittsburgh does not receive, process, or store any customer personal or payment information through this site.

When you place an order, sign up for updates, or contact us, we may collect:

• Name, shipping address, billing address, email address, and phone number
• Order details, including items purchased, delivery date, and gift message
• Communications you send us, such as customization requests or support inquiries
• Basic technical information such as IP address and browser type, used only for site performance and security

We do not collect or store credit card numbers. Payment information is entered directly into our payment processor's secure checkout and is never visible to or retained by Gifts4Panthers or Basket of Pittsburgh staff. See "Payment Security" below.

We use the information we collect to:

• Process, fulfill, and ship your order
• Communicate with you about your order, including delivery updates and issues
• Respond to customer service inquiries and customization requests
• Send occasional promotional emails, only if you have opted in, with an easy way to unsubscribe at any time
• Maintain the security and proper functioning of our website

We will not sell, rent, or trade your personal information to third parties.

Gifts4Panthers uses a small number of trusted service providers to operate this website and fulfill your order. Each provider only receives the information necessary to perform its function:

• Shopify — hosts our online storefront and checkout
• Stripe — processes payment card transactions
• Zoho — manages invoicing for phone and custom orders

These providers are independently certified under recognized security and compliance standards, including PCI DSS Level 1, SOC 2 Type II, and ISO 27001, and are contractually prohibited from using your information for any purpose other than providing their service to us. We do not share your information with any other third party for their own marketing purposes.

Gifts4Panthers does not store, process, or have access to your full credit card number at any time.

• Online orders are entered directly into Shopify's PCI DSS Level 1 certified checkout.
• Phone and custom orders are completed by emailing you a secure payment link generated from a Zoho invoice, which you complete directly through Stripe's PCI DSS Level 1 certified payment page.

Our staff never see, key in, or record your card number. All payment data is encrypted in transit and at rest by our payment providers.

Our website may use cookies and similar technologies provided by Shopify to keep your shopping cart active, remember your preferences, and understand how visitors use the site. You can control cookies through your browser settings. Disabling cookies may affect some site features, such as your shopping cart.

We retain order and account information for as long as needed to fulfill orders, provide customer support, and meet our legal and accounting obligations. If you would like your information removed sooner, contact us using the information below and we will honor your request where we are not required to retain the information by law.

• Opt out of marketing emails at any time using the unsubscribe link in any email we send
• Request a copy of the personal information we hold about you
• Request correction or deletion of your personal information

To exercise any of these choices, contact us using the information below.

Gifts4Panthers is intended for a general adult audience and is not directed to children under 13. We do not knowingly collect personal information from children under 13.

We may update this Privacy Policy from time to time to reflect changes in our practices or applicable law. The "Effective Date" at the top of this page reflects the most recent update. We encourage you to review this page periodically.

If you have questions about this Privacy Policy or how your information is handled, please contact us at:

Related policy: Basket of Pittsburgh's core privacy policy is available at basketofpittsburgh.com/pages/privacy-policy. This Gifts4Panthers policy governs this co-branded site specifically.