What we collect
At checkout we collect your name, email address, phone number, postal address, state of residence and eligibility attestations. We also keep your order, payment status, ticket numbers, communications and any support or prize-delivery records. Your payment card details are collected and processed by Stripe and do not pass through Raffl's application.
The identity vault
Your identity and contact details are encrypted in a segregated vault. The rest of the application refers to you using an opaque customer token, so ordinary raffle, order and ticket records do not contain plaintext identity data. We do not sell your personal information.
How we use and access information
We use your information to process your purchase, issue and maintain legal ticket records, send transactional updates, identify and contact winners, deliver prizes, respond to support requests, prevent misuse and meet regulatory or audit obligations. Access to identity data is purpose-bound, limited to authorised workflows and recorded for audit.
Stripe
Stripe acts as the payment processor. Stripe receives the payment and checkout information needed to process the transaction, prevent fraud and manage a refund. Stripe handles that information under its own privacy terms.
Public results
Published results show the winning ticket number and the winner's suburb or state only. We do not publish a winner's full name, street address, phone number or email address on the public site.
Retention
Gaming records, including the buyer details linked to a ticket, are retained for at least five years to meet Queensland record-keeping requirements. A request to delete information may be limited while we are legally required to retain it. Information that is no longer required is securely deleted or de-identified where the law permits.
Your requests
You may ask to access or correct your personal information, or ask how it has been used, by emailing privacy@horizonyouth.example. Include enough information for us to identify your purchase, but never send payment card details. We may need to verify your identity before completing a request.