← Back to LuLu Creative

Privacy Policy

Effective 21 August 2026, updated 26 October 2026 · Baca dalam Bahasa Indonesia

LuLu Creative (lulucreativegifts.com) sells personalised digital gifts delivered as links. This page explains what data we collect, what we use it for, how long we keep it, and how to have it deleted.

In short: we only collect what is genuinely needed to build and deliver your gift. We do not sell data to anyone. The only tracker we load are the Meta Pixel and the TikTok Pixel, so our Facebook, Instagram & TikTok ads can be measured (see section 1).

1. What we collect

When you place an order, we ask for:

When you open the CS chat on this site, we ask for:

The CS chat is answered by an automated assistant. Conversation contents are processed by a language-model provider (Anthropic) to compose the reply. Please do not type highly sensitive data there — card numbers, passwords or ID details — since none of it is needed to order a gift.

When you pay, payment is processed by DOKU. Card numbers, bank details and any other payment data never pass through or rest on our servers — DOKU handles all of it directly.

When you browse the site, we count page and product views. All we record is the event type and a product id — no visitor id, no cookies, and no personal data whatsoever. We cannot tell which visit belongs to whom.

Meta Pixel. Since 26 October 2026 this site loads the Meta Pixel from Meta Platforms. The pixel tells Meta which pages you open, the products you view, when you open the order form, and when your payment is completed (product name & amount). Since 2 November 2026, when your payment is completed our server also sends the same purchase event directly to Meta (Conversions API), together with the IP address, browser type and pixel cookies recorded when you placed the order, so the purchase is still counted if the pixel is blocked. Meta may set cookies in your browser and match these events to your Facebook/Instagram account in order to measure and deliver our ads. Your name, email, WhatsApp number and gift contents are never sent to Meta. The pixel is not loaded on gift pages opened by the recipient. You can limit this in your Meta account’s ad settings (Settings → Accounts Center → Ad preferences) or by blocking third-party cookies in your browser.

TikTok Pixel. Since 2 November 2026 this site also loads the TikTok Pixel from TikTok. It receives exactly the same events as the Meta Pixel above (pages opened, products viewed, order form opened, completed payment with product name & amount), to measure and deliver our ads on TikTok. TikTok may set cookies in your browser and match them to your TikTok account. Your name, email, WhatsApp number and gift contents are never sent to TikTok either, and this pixel is not loaded on gift pages opened by the recipient. You can limit this in the TikTok app (Settings and privacy → Privacy → Ads) or by blocking third-party cookies in your browser.

2. What we use it for

We do not use your data for targeted advertising, and we do not sell or rent it to anyone.

3. How long we keep it

DataRetention
Gift content (names, message, photos, music) 180 days from creation, after which the link stops working
Order data (email, WhatsApp number) 30 days in active storage
Name & WhatsApp number from the CS chat 30 days from the last time you opened the chat
CS conversation contents 24 hours. If the conversation needs a person to handle it, a copy is kept in an internal record for 30 days
Sales records (date, product, amount) Kept for bookkeeping. WhatsApp numbers and emails are not included in records shared with partners
Visit statistics Aggregate counts only — cannot be traced back to a person

4. Who else processes it

We use the following third-party services, each with a limited role:

ServicePurpose
Biznet GioOur server in Jakarta: serving the site, storing order data, gift links, and uploaded photos/music
CloudflareProtecting and speeding up the site, plus cookie-free visit statistics
VercelStoring photos/music uploaded before 19 October 2026 and forwarding payment notifications to our server
UpstashTemporary backup copy of order data during our server move (to be deleted)
DOKUPayment processing
Meta (Meta Pixel)Measuring & delivering our ads on Facebook and Instagram
TikTok (TikTok Pixel)Measuring & delivering our ads on TikTok
Google SheetsSales bookkeeping records
Biznet GioAlso hosting our Threads assistant (section 6)
AnthropicDrafting the text of our Threads posts and replies (section 6)
TelegramDelivering draft replies to the owner for approval (section 6)

5. About the gift link

A gift link is secret because its address is hard to guess, not because it is password-protected. That means anyone who receives the link can open it.

So send it only to the person you intend, and avoid putting anything deeply private inside it if you are worried the link could be forwarded.

6. If we reply to you on Threads

We run the account @lulucreativegifts on Threads and use Meta’s official Threads API to search public posts discussing topics such as apologising, anniversaries, or gift ideas. Where a post is a good match, we draft a reply and post it as an ordinary public reply.

You do not have to be a customer to be covered by this section. If you write a public post on Threads that happens to match, the data listed below may be stored temporarily in our systems even if you have never dealt with LuLu at all.

What we store about other people’s posts:

What we do not store:

DataRetention
Post id & permalink of processed posts 90 days, then deleted automatically
Usernames we have replied to 30 days, then deleted automatically

Every reply is approved by a human before it is sent. Nothing goes out automatically — each draft is reviewed one at a time by the person running LuLu, and anything unsuitable is discarded before it can be sent. We also never reply to posts about bereavement, serious illness, or signs of self-harm: such posts are filtered out automatically and never reach the drafting stage at all.

We do not use Threads data for advertising, we do not combine it with order data, and we do not share it with anyone.

If you would rather we did not store or reply to anything of yours, just reply to our comment or contact the WhatsApp number below with your Threads username. We will delete our records and add you to a do-not-contact list within 7 working days.

7. Your rights

You may ask us to:

Contact us on the WhatsApp number below quoting your order code (for example LULU-1786983237432-3KCV) — or, for Threads matters, your Threads username. We process deletion requests within 7 working days.

8. Children

This service is intended for users aged 13 and over. We do not knowingly collect data from children below that age. If you are a parent and find that your child has given us their data, contact us and we will delete it.

9. Changes

If this policy changes, the date at the top of the page is updated. Significant changes will also be announced on LuLu Creative’s social media accounts.

10. Contact us

WhatsApp: 0895-0662-1424
Instagram: @lulucreativegifts
TikTok: @lulucreativegifts
Threads: @lulucreativegifts

See also our Terms of Service for the rules on ordering, payment, and how long links last.