Who we are
My Christmas Wishlist is operated by Think of Something Publishing Ltd. Contact: helpdesk@mychristmaswishlist.co.uk. Think of Something Publishing Ltd, 28 Inwood Road, Liss, Hampshire GU33 7LZ.
Information we collect
We process information you provide to create and use an account: name, email, credentials, wishlist gift details, images, retailer links, quantities, share links and PIN access, and buyer reservations. We may also process support enquiries and technical/security logs. We do not collect payment card details to reserve gifts.
If you use our browser extension, we may also process product or experience information that you select from third-party webpages, including webpage addresses, titles, descriptions, prices and images. Some of this information may be processed temporarily within your browser before you transfer it to our website, as explained below.
Browser extensions
My Christmas Wishlist offers browser extensions for supported browsers, including Google Chrome, Microsoft Edge and Mozilla Firefox, subject to availability and the relevant browser store's approval or distribution arrangements. Other browser versions may be introduced in future. This section applies to the extension versions we make available, subject to any browser-specific notices.
Information accessed when you use the extension
When you choose to use the extension on a webpage, it may read information relevant to the gift or experience you want to add, such as:
- The webpage address (URL) and title.
- Product or experience names, descriptions and advertised prices.
- Retailer or provider details and relevant product information shown on the page.
- Product image addresses and selected image content.
This information is used to prepare an entry in the Add Wish form, where you can review and change the details before saving. The extension is designed for user-initiated gift capture, not to monitor general browsing history, track your activity across websites or collect information from pages you have not chosen to use with the extension.
Browser permissions
The extension requests permissions needed to read gift information from the webpage you choose and pass it to My Christmas Wishlist. If an image is hosted on another website or image server, the extension may ask for additional permission to retrieve that image. These permissions are used for the disclosed gift-import functionality, not unrelated browsing or data collection. You can review, restrict or revoke permissions, disable the extension or uninstall it using your browser's settings.
Temporary information and image handling
The extension may temporarily hold selected product details, image data and transfer information in your browser so that a transfer can be completed, including when you need to sign in or register first. Expired temporary image-transfer information is removed by the extension's cleanup processes, although data may remain until cleanup next runs or browser storage is cleared.
When you proceed to My Christmas Wishlist, selected details are passed to our website to prepare the Add Wish form. If you choose to import an image, the image may be retrieved from the server hosting it. Details and images you choose to save then become part of your wishlist and are handled under the other sections of this policy. Uninstalling the extension does not itself delete gifts already saved to your account.
How we use extension information
We use information accessed through the extension to identify the gift or experience you select, pre-fill the Add Wish form, retrieve a selected image where requested, complete transfers across sign-in or registration, and support the security and reliability of this functionality.
We do not use extension-derived browsing information to build advertising profiles, target or retarget advertising, or sell browsing information. We do not sell information obtained through the extension to data brokers, advertising networks or other information resellers.
Third-party websites and image hosts
Retailers, experience providers and image-hosting services are independent third parties. Retrieving an image can involve a request to the server hosting it; that server may receive normal technical request information, such as an IP address and details of the request. If you follow a retailer link, that retailer's privacy practices apply. Our website hosting and technical service providers may process transferred information as needed to provide, secure and maintain the service.
Chrome Web Store Limited Use
Our use of information obtained through the extension is intended to comply with the Chrome Web Store User Data Policy, including its Limited Use requirements. We use information obtained through browser permissions only to provide or improve the extension's disclosed wishlist functionality and for related security and operational purposes. We do not use or transfer that information for personalised advertising, advertising retargeting, data brokerage or unrelated purposes.
Access by our personnel to extension-derived personal information is limited to appropriate circumstances, such as providing support with your permission, investigating security incidents or complying with legal obligations.
Your choices
The extension is optional. You can add gifts manually on our website without installing it. You can review details before saving, manage your saved wishlist information through your account, and exercise applicable data protection rights using the contact details below.
Why we use it
To provide accounts, wishlists, sharing, reservations and support; protect the service; troubleshoot problems; and comply with legal duties. Wishlist owners cannot see who has reserved gifts for them through their dashboard.
When you choose to use the browser extension, we also process selected webpage and product information to help you create wishlist entries, transfer selected images and complete the gift-adding process. We do not use extension-derived browsing information for behavioural advertising or unrelated profiling.
Legal bases
Depending on the activity, the relevant UK GDPR lawful basis may be performance of a contract (or taking steps you request before entering one), legitimate interests, legal obligation or consent.
For the browser extension, processing the information you select to create a wishlist entry is generally necessary to provide the service you request, including relevant pre-contract steps where applicable. We may rely on legitimate interests for proportionate security, fraud prevention and service reliability activities. Where consent is required for a particular activity, we will seek it separately and provide an appropriate way to withdraw it.
Sharing and recipients
People with the correct wishlist link and PIN can view gift details. Buyers can see their own reservations and quantities available, not other buyers’ identities. Hosting, email, analytics and affiliate providers may process data when involved. Retailers operate their own privacy practices.
Product details and selected images imported through the extension are processed by our website and relevant technical service providers as necessary to operate the wishlist service. We do not disclose extension-derived information to advertising networks for behavioural targeting.
Cookies and analytics
Google Analytics (measurement ID G-R899FBYDFH) loads only if you choose to accept optional analytics cookies. You may reject analytics or change your choice using Cookie preferences in the footer. See our Cookie Policy.
Installing or using the browser extension is not, by itself, consent to non-essential website cookies or analytics. Your cookie choices for the website are governed by the website's consent arrangements.
Retention and security
We aim to keep personal information only as long as necessary for its purposes, legal obligations, security and backups, using proportionate safeguards.
The extension may hold temporary transfer information in browser storage. Expired temporary image-transfer information is removed through extension cleanup processes. Uninstalling the extension normally removes its associated local extension storage, subject to your browser's behaviour.
Information transferred to and saved on My Christmas Wishlist is subject to our website's retention and deletion arrangements. Transfers to our website use HTTPS. We apply access controls and proportionate security measures appropriate to the information processed.
Your rights
Depending on circumstances, you may request access, correction, deletion, restriction, portability, or object to processing. You can withdraw consent where it is the basis. Email helpdesk@mychristmaswishlist.co.uk. You can complain to the Information Commissioner’s Office.
Children and shared links
Parents and guardians should supervise children’s use. Avoid putting sensitive information into shared wishlists; keep passwords and PINs private.
Changes and contact
We may update this policy and display a revised date. For questions visit Contact Us or email helpdesk@mychristmaswishlist.co.uk.