Privacy Policy
This policy explains what personal information LuckyFish collects when you use youluckyfish.com or buy a gift, how we use it, who we share it with, and your choices. We collect only what we need to deliver gifts, and we never sell it.
1. Information we collect
When you buy a gift
- About you (the buyer): your name, email address and billing details. You enter these on Stripe’s secure checkout page. Your full card number goes to Stripe, not to us.
- About the recipient: their name, email address, and the personal message you write. Only include information you have the right to share with us.
- About the order: the experience, the price, the date, and the gift code we create.
When you email us
Your email address and whatever you choose to include in your message.
When you visit the website
Like any website, our hosting provider automatically receives technical information such as your IP address, browser type and the pages requested. This is used to run and secure the site. We do not use it to build profiles of visitors.
2. How we use it
- To process your payment and deliver the gift to the recipient.
- To send you a receipt and send the recipient their gift, and to send related service emails such as reminders to book.
- To let the experience provider honour the gift.
- To answer your questions, handle refunds and resolve problems.
- To prevent fraud, keep the service secure, and meet our legal, tax and accounting obligations.
We do not send marketing emails unless you have asked to receive them, and every marketing email would include a way to unsubscribe.
3. Who we share it with
We share personal information only with the service providers we need to run LuckyFish, and only for the purposes in this policy:
- Stripe processes payments and pays experience providers. See Stripe’s privacy policy.
- Resend delivers our emails.
- Netlify hosts our website and the code that processes orders.
- Google Fonts supplies the website’s typefaces. Your browser requests them from Google, which receives your IP address.
- The experience provider for the gift receives the recipient’s name, the experience, the gift value and the gift code, so they can honour the gift. They do not receive the buyer’s payment details.
We may also share information if required by law, to protect our rights or prevent fraud, or as part of a sale or reorganization of our business. We do not sell personal information, and we do not share it for targeted advertising.
4. Cookies, analytics and tracking
- Our website does not set cookies and does not use analytics, advertising pixels or other tracking tools.
- When you pay, you leave our site for Stripe’s checkout page (checkout.stripe.com). Stripe uses its own cookies there, for example to prevent fraud and to remember you if you use Stripe’s Link service. Those cookies are covered by Stripe’s policies.
- Do Not Track: because we don’t track visitors across websites, there is nothing for Do Not Track signals to switch off. We treat every visitor the same whether or not a signal is sent.
- We do not allow third parties to collect personal information about your activity across other websites through our site.
5. How long we keep it
We keep order records for as long as a gift can be used (at least 5 years) and for as long as tax and accounting laws require, which is generally up to 7 years after the purchase. Emails you send us are kept as long as needed to help you. After that, we delete or anonymize the information.
6. Security
We use reputable providers with strong security, encrypted connections (HTTPS) throughout, and limited access to personal information. No system is perfectly secure, so please contact us straight away if you think your information or a gift code has been misused.
7. Your choices and rights
- Review or correct: email us to see the personal information we hold about you, or to correct it.
- Delete: ask us to delete your information. We will, except where we must keep it for an active gift, a legal obligation or fraud prevention.
- Recipients: if you received a gift and don’t want us to hold your details, email us.
Email gifts@youluckyfish.com with the subject “Privacy request”. We will verify your request and respond within 45 days. Depending on where you live, including California and Virginia, you may have additional rights under state law, and we will honour them as required.
8. Children
LuckyFish is for adults buying gifts. It is not directed to children under 13, and we do not knowingly collect personal information from them. If you believe a child has given us information, contact us and we will delete it.
9. Changes to this policy
If we change this policy, we will post the new version here with a new effective date. If the change is significant, we will also show a notice on our homepage before it takes effect.
10. Contact
LuckyFish, a trade name of Invictus & Marketing Advisory LLC, Stafford, Virginia. Email gifts@youluckyfish.com.