Privacy Policy

Last updated: 5 September 2026

This Privacy Notice is provided by Bhvistra, trading as Luckt. Bhvistra is the data controller for the personal data described below.

What we collect

Only what a purchase needs: the buyer's email address, the recipient's email address and gift message when you send a gift, the currency and amount paid, and the state of your ticket (issued, active, spent). If you write to us through the contact form we also keep your name, email and message so we can reply.

What we do not collect

We do not ask for a name, address or phone number to buy. We never see or store your card details — those go straight to Stripe, our payment provider. We do not use advertising trackers or sell data to anyone.

Why we can use it

To perform the contract with you (delivering and running your ticket), to comply with tax and accounting law, and to handle support requests.

Sharing

Data is shared only with the providers that make the service work:

• Stripe — our payment provider. Stripe processes payments and refunds, and may calculate, collect and remit applicable taxes on our behalf depending on your location.
• Our email delivery provider, which sends ticket and support emails.
• Our hosting and database provider, which stores order and ticket data.

Each provider acts on our instructions and only for the purposes described here.

Security

We protect your data with encryption in transit (TLS), access controls on our database, unique secret ticket tokens, and restricted access to production systems. Payment data is handled entirely by Stripe and never touches our servers.

Retention

Ticket and order records are kept for as long as tax law requires (typically several years). Contact messages are deleted once resolved and no longer needed.

Your rights

You can ask for a copy of your data, correction, or deletion at any time through the contact form. Deletion requests are honoured except where we must keep a payment record by law.