Privacy Policy

Lucky Squares Australia · Last updated: May 2026

Lucky Squares Australia is committed to protecting the privacy of all individuals who interact with our Platform. This Privacy Policy explains how we collect, use, store, and disclose personal information.

1. Who We Are

Play With Heart Pty Ltd ACN 698 202 069 ABN 19 698 202 069 (trading as Lucky Squares Australia) (“we”, “us”, “our”) operates the Lucky Squares Australia platform at luckysquares.com.au. We are based in South Australia, Australia.

2. What Information We Collect

From Organisers
  • Full name and contact details
  • Organisation name and type
  • Email address and phone number
  • Payment information (processed securely by our online payment provider; we do not store card details)
  • Fundraiser content including campaign descriptions, images, and prize details
From Participants
  • Full name
  • Email address
  • Phone number
  • Square selections and purchase history
Automatically Collected Information
  • Browser type and device information
  • IP address (anonymised for analytics purposes)
  • Pages visited and time spent on the Platform
  • Referral source
  • General geographic location (country and city level, derived from IP address)
Mariposa Chat

The Platform includes an AI-powered chat assistant called Mariposa. When you use the chat, we log the content of your conversation (both your messages and Mariposa’s responses) along with a randomly generated session identifier and, where applicable, the fundraiser page you were visiting at the time.

Chat logs are retained for 90 days and are then automatically deleted. They are used to improve the quality and accuracy of Mariposa’s responses and to identify common questions. Conversation logs are not shared with third parties and are not linked to any personal account unless you are also logged in as an Organiser during the same session.

3. How We Use Your Information

We use personal information to:

  • Create and manage Organiser accounts
  • Process Campaign Fee payments
  • Operate fundraiser grids and manage square reservations
  • Notify Participants of draw results
  • Facilitate prize notification between Organisers and Participants
  • Provide customer support
  • Improve the Platform and user experience
  • Comply with legal obligations

We do not use your personal information for advertising purposes or sell it to third parties.

4. Sharing Your Information

4.1: With Organisers
Participant names, email addresses, and square allocations are shared with the Organiser who created the fundraiser for the purposes of running the fundraiser and notifying winners.
4.2: With Service Providers

We share information with trusted third-party service providers who assist us in operating the Platform, including:

  • Stripe: secure online payment processing. Card details are handled exclusively by Stripe and are never stored on Lucky Squares systems. Stripe operates under PCI-DSS compliance.
  • Supabase: secure database and file storage (Australian data residency)
  • Resend: transactional email communications (confirmation emails, draw notifications)
  • Google Analytics 4: anonymous website usage analytics. Google Analytics collects information about how visitors use the Platform (pages visited, session duration, general location, device type). This data is aggregated and does not identify individual users. See Section 8 for more detail.

These providers are contractually required to handle your information securely and only for the purposes for which it is shared.

4.3: Legal Requirements
We may disclose personal information where required by law, court order, or regulatory authority, or where we believe disclosure is necessary to protect the safety of any person or to prevent unlawful activity.
4.4: We will never
  • Sell your personal information to third parties
  • Share your information with advertisers
  • Use your information for purposes unrelated to the operation of the Platform

5. Data Storage and Security

5.1
Personal information is stored securely using Supabase infrastructure located in Australia.
5.2
We implement reasonable technical and organisational measures to protect personal information from unauthorised access, loss, misuse, or disclosure.
5.3
Payment card information is processed exclusively by our online payment provider and is never stored on Lucky Squares Australia systems.
5.4
Despite our security measures, no data transmission over the internet is completely secure. We cannot guarantee the absolute security of information transmitted to or from the Platform.

6. Data Retention

6.1
Organiser account information is retained for the duration of the account and for seven years following account closure for legal and tax compliance purposes.
6.2
Participant information relating to a specific fundraiser is retained for one year (12 months) following the close of that fundraiser, or after one year of inactivity on our platform, after which it is de-identified or anonymised.
6.3
Mariposa chat logs are retained for 90 days and are then automatically and permanently deleted.
6.4
You may request deletion of your personal information at any time, subject to any legal retention obligations.

7. Your Rights

You have the right to:

  • Access the personal information we hold about you
  • Request correction of inaccurate or incomplete information
  • Request deletion of your personal information (subject to legal retention requirements)
  • Withdraw consent for non-essential processing
  • Lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au

To exercise any of these rights, contact us.

8. Cookies and Analytics

Essential cookies
The Platform uses cookies to maintain your session while you are logged in and to remember your preferences (such as grid display settings). These cookies are necessary for the Platform to function correctly. A separate cookie (mariposa_sid) is used to maintain continuity within a Mariposa chat session. This cookie does not identify you personally and expires after one year.
Analytics cookies (Google Analytics 4)

We use Google Analytics 4 to understand how visitors use the Platform. Google Analytics collects anonymous usage data, including pages visited, time spent on each page, general geographic location (country and city level), device type, and referral source.

Google Analytics sets cookies prefixed with _ga. IP addresses are anonymised before being stored. This data is aggregated and does not identify you personally.

You can opt out of Google Analytics tracking at any time by installing the Google Analytics Opt-out Browser Add-on or by adjusting your browser’s cookie settings.

Managing cookies
You may disable cookies in your browser settings. Disabling essential cookies may affect the functionality of the Platform. Disabling analytics cookies will not affect your ability to use the Platform.

9. Marketing Communications and Opt-Out

We may send you transactional emails related to your use of the Platform, including purchase confirmations, draw notifications, and fundraiser updates. These communications are necessary for the operation of the service.

We may also send optional communications such as tips, updates, and seasonal promotions. Every non-transactional email we send includes an unsubscribe link. You can opt out at any time by clicking that link or by contacting us.

Once you opt out, your email address is recorded on our suppression list and we will not send you further marketing communications. Opting out does not affect your ability to participate in fundraisers.

10. Children's Privacy

Participation in Lucky Squares fundraisers is restricted to persons aged 18 years or over. The Platform is not directed at minors. We do not knowingly collect personal information from persons under 18. Participants are required to confirm their age at the point of purchase. If you believe a minor has provided personal information through the Platform, please contact us and we will delete it promptly.

11. Changes to This Policy

We may update this Privacy Policy from time to time. Updated versions will be published on the Platform with a revised date. We encourage you to review this Policy periodically.

12. Contact

For any privacy-related queries or requests:

Contact usPlay With Heart Pty Ltd ACN 698 202 069, Adelaide, South Australia

For complaints that are not resolved to your satisfaction, you may contact the Office of the Australian Information Commissioner:

oaic.gov.au1300 363 992