Privacy Policy — Prizible

Prizible Pty Ltd ("Prizible", "we", "us") is committed to protecting your personal information and complies with the Privacy Act 1988 (Cth) and the Australian Privacy Principles (APPs).

1. Information we collect

Identity & contact details: name, email, phone number, and postal address (used for delivery and to contact winners).
Purchase details: the campaign you entered, quantity, time, and a payment reference. Card details are processed by our payment provider (Stripe) and are not stored by Prizible.
Technical data: IP address, device and browser information, and basic analytics, to operate and secure the service.

2. How we use your information

To process your purchase and issue your draw entry.
To conduct the draw and contact the winner.
To pass the necessary delivery details to the Seller for fulfilment.
To meet legal, tax and prize-draw permit obligations.
To prevent fraud and abuse.
To send you transactional emails about your purchase. We do not send marketing emails unless you have opted in.

3. Who we share information with

The Seller for the campaign you purchased from — limited to what is required to fulfil your order.
Service providers who help us run the service: Stripe (payments), our cloud hosting provider, and our email delivery provider.
Government and regulators where required by law or under a prize-draw permit.

We do not sell your personal information.

4. Overseas disclosure

Some of our service providers store data outside Australia (including in the United States and the European Union). Where this occurs we take reasonable steps to ensure the recipient handles your information consistently with the APPs.

5. Retention

We retain personal information only for as long as needed for the purposes above and as required by law (for example, financial records are kept for at least seven years). Purchase and entry records are then de-identified or deleted.

6. Security

We use industry-standard safeguards including encryption in transit (TLS), encrypted database storage, role-based access, and continuous monitoring. No system is perfectly secure; if a notifiable data breach occurs we will comply with the Notifiable Data Breaches scheme.

7. Your rights

Request access to the personal information we hold about you.
Request correction of inaccurate or out-of-date information.
Lodge a complaint about how we have handled your information. We will respond within 30 days. If you are not satisfied, you may contact the Office of the Australian Information Commissioner (oaic.gov.au).

8. Cookies

We use a small number of cookies and similar technologies to keep you signed in, remember your preferences and measure aggregate site usage. You can disable cookies in your browser, but parts of the service may stop working.

9. Contact

Privacy enquiries: /contact.