LUCKY PRESENTS


Privacy Policy

Lucky Presents (ABN 36 243 682 282)

This Privacy Policy explains how Lucky Presents ABN 36 243 682 282 (referred to as Lucky Presents, we, us or our) and our related entities collect, use, store and disclose your information when you engage with our products and services. This includes when you attend our events, visit our website and related online platforms (the Sites), make purchases, or contact us in person, by phone, or via email (together, the Services).

We are committed to handling personal information in accordance with the Privacy Act 1988 (Cth) (the Privacy Act) and the Australian Privacy Principles (APPs). To the extent applicable, we also comply with the EU General Data Protection Regulation 2016/679 (GDPR).

We may amend this Privacy Policy from time to time at our discretion. Any updates will take effect when posted on the Sites. By continuing to use the Services after an updated version is posted, you agree to the revised policy unless we are required by law to seek your express consent.

Please read this Privacy Policy carefully. If you do not agree with any part of it, please refrain from using the Sites or Services.

Types of information we collect

Personal Information is information or an opinion about an identified individual, or an individual who is reasonably identifiable. This may include your name, date of birth, address, email address, telephone number, photographs or videos in which you are identifiable, and payment details such as credit card or other billing information.

Sensitive Information is a subset of Personal Information and may include health information, racial or ethnic origin, political opinions, religious or philosophical beliefs, membership of professional or trade associations, sexual orientation, or criminal record. We only collect Sensitive Information with your explicit consent and where necessary for a specific activity or function.

Usage Information is data automatically generated through your interaction with the Sites, such as device identifier, browser type, operating system, IP address, pages visited, and access times. While Usage Information is typically aggregated or de-identified, where it can be used to identify you, we treat it as Personal Information. In this policy, Personal Information and any Usage Information that can identify you are together referred to as Personal Data.

How we collect Personal Data

We generally collect Personal Data directly from you, for example when you:

  • contact us by phone, email or in writing
  • complete forms or applications on the Sites
  • subscribe to newsletters or marketing communications
  • purchase tickets, register for an event, transfer ticket registrations, or are registered as a recipient or holder of a ticket (including minor passes) via third-party ticketing platforms
  • are photographed or filmed at our events where you are identifiable.

    • Providing Personal Data is your choice; however, if you do not supply information that we reasonably require, we may be unable to provide some or all of the Services.

    We may also collect Personal Data about you from third parties, for example:

  • where you have consented to that collection or disclosure
  • from our contractors, business partners, ticketing and resale platforms, marketing partners, payment and e-commerce providers, and professional advisers
  • from public sources or government agencies, where permitted by law.

    • Where we collect Personal Data from third parties and it is not obvious that we have done so, we will take reasonable steps to notify you of that collection and the circumstances.

    Cookies and similar technologies

    We use cookies, pixel tags and similar technologies (Cookies) to operate and improve the Sites. Cookies help the Sites remember your actions and preferences and may include:

  • strictly necessary Cookies to enable core functionality
  • performance Cookies to understand how the Sites are used and identify errors
  • functionality Cookies to remember your preferences
  • targeting/advertising Cookies to deliver content and advertising relevant to your interests.

    • Cookies may be session-based or persistent. You can disable Cookies via your browser settings; however, doing so may affect the functionality or availability of the Sites. Where Cookie data can reasonably identify you, we will seek your consent where required by law.

    Why we collect and use Personal Data

    We collect, hold and process Personal Data to operate our business and provide the Services. We may use your Personal Data for purposes including to:

  • provide access to, maintain and improve the Sites and Services
  • process transactions, issue invoices and receipts, and manage customer accounts
  • verify your identity and prevent fraud
  • respond to enquiries and provide customer support
  • administer and communicate information about events for which you are registered or hold tickets
  • conduct research, analytics, quality assurance and service development
  • send you marketing communications where you have opted in and until you withdraw consent
  • run promotions, giveaways and competitions
  • comply with legal and regulatory obligations and law enforcement requests
  • prevent, detect and investigate security incidents or unlawful activity.

    • We will only use your Personal Data for purposes you would reasonably expect in connection with the Services, or as required or permitted by law. We do not sell, rent or license your Personal Data without your express consent.

    You can opt out of marketing at any time by using the unsubscribe link in our communications or by contacting us using the details below. Certain transactional or service-related communications may still be sent to you.

    Disclosure of Personal Data

    We may disclose Personal Data to:

  • our directors, officers, employees, contractors and authorised representatives
  • third-party service providers who support our operations, including ticketing and resale platforms, payment processors, e-commerce platforms, marketing and analytics providers, IT and technical support, and professional advisers
  • our related entities and affiliates
  • sponsors and event partners identified in connection with our events
  • law enforcement, regulators, courts, or other authorities where required or permitted by law, or where we reasonably suspect unlawful activity or misconduct
  • any third party you have authorised us to disclose information to.

    • We take reasonable steps to ensure that third parties who receive Personal Data are aware of this Privacy Policy and are subject to privacy obligations under Australian law or comparable safeguards.

    You may withdraw your consent to certain disclosures at any time. Doing so may affect your ability to access or use some Services.

    Your rights and managing your information

    You may request access to the Personal Data we hold about you by contacting us using the details below. We will respond within a reasonable time and may require verification of your identity. Where permitted by law, we may refuse access in limited circumstances, in which case we will provide reasons.

    If you believe any Personal Data we hold is inaccurate, out-of-date, incomplete or misleading, you may request correction. You are responsible for ensuring the information you provide is accurate and up to date, and we may be unable to provide the Services where it is not.

    For individuals in the EU (to the extent the GDPR applies), you may also have the right to:

  • request erasure of Personal Data that is no longer required for lawful purposes;
  • obtain a copy of your Personal Data in a commonly used format, along with information about its processing; and
  • request restriction of processing while a complaint or concern is investigated.

    • To exercise these rights, please contact us using the details below with the subject line: ATT: PRIVACY OFFICER.

    External links

    The Sites may contain links or plugins to third-party websites or applications, including ticketing and resale platforms. This Privacy Policy does not apply to those third parties. We are not responsible for the privacy practices or content of third-party sites. We encourage you to review their privacy policies directly.

    Security

    We employ technical and organisational safeguards, such as encryption, firewalls and access controls, designed to protect Personal Data against loss, misuse, unauthorised access, modification or disclosure. However, no method is completely secure, and we cannot guarantee absolute security. To the extent permitted by law, we are not liable for unauthorised access or disclosure arising from third-party actions or events beyond our reasonable control.

    Where required by law, we will notify the relevant authority and, where appropriate, affected individuals if a data breach is likely to result in serious harm or risk to rights and freedoms.

    We also provide training to personnel who may access Personal Data regarding our obligations under the Privacy Act, APPs and, where applicable, the GDPR.

    Overseas disclosures

    In the course of providing the Services, we may disclose Personal Data to recipients located outside Australia. Where we transfer Personal Data overseas, we will take reasonable steps to ensure that the recipient is either in a jurisdiction recognised as providing adequate protection or is contractually bound to protect Personal Data in a manner consistent with the Privacy Act, APPs and, where applicable, the GDPR.

    Contact and complaints

    If you have questions about this Privacy Policy, wish to access or correct your Personal Data, or would like to make a complaint, please contact our privacy officer:

    Lucky Presents
    Att: Privacy Officer admin@luckypresents.com.au

    We take privacy concerns seriously and will respond within a reasonable timeframe to discuss your complaint and outline options for resolution. If you are not satisfied with our response, you may lodge a complaint with the Office of the Australian Information Commissioner. If the GDPR applies to you, you may also contact the relevant EU supervisory authority.

    Changes to this policy

    We may update this Privacy Policy periodically. The most current version will be available on the Sites and will take effect upon posting. Your continued use of the Services signifies your acceptance of any changes, unless otherwise required by law.