L

Legal

Your privacy choices & cookies

How LuckySOUL collects, uses, and protects your information, and the choices you have. Last updated August 2026.

Who is collecting it

luckysoul.shop is operated by LuckySoul, a Melbourne studio at Level 4, 181 Toorak Road, South Yarra VIC 3141, Australia. LuckySoul collects and holds the personal information described on this page, and you can reach us about any of it at privacy@luckysoul.shop.

What we collect

When you shop with us we collect the details needed to fulfil your order: your name, email, delivery address, and order history. If you create an account, your profile details, wishlist, saved DIY designs, referral code and any vouchers or fortune draws you earn are stored against it. Payment details go directly to our payment processor, Stripe — card numbers never touch our servers. If you write to client services, or apply for a role via careers@luckysoul.shop, we keep that correspondence too.

How we use it

Your information is used to prepare and deliver orders, respond to client service enquiries, and, only if you choose, send occasional notes on new edits and events. We do not sell your personal information.

Who we share it with

We share personal information only with the providers who run parts of the shop for us, and only what each needs: Supabase (our database and sign-in), Stripe (payments), Vercel (hosting), Cloudflare (bot protection on our forms), Australia Post (delivery), and Feishu/Lark (our mailboxes, for order and service emails). We do not sell personal information, and no provider may use it for its own purposes.

Overseas disclosure

Some of these providers store or process data outside Australia — principally in the United States (Supabase, Stripe, Vercel, Cloudflare) and, for our mailboxes, on infrastructure operated by Feishu. Where information leaves Australia we take the steps Australian Privacy Principle 8 requires of us before disclosing it.

Retention & security

Order and payment records are kept for at least five years to meet Australian tax and consumer-law obligations. Account information is kept while your account is open and deleted on request. Job applications are kept on file for up to twelve months, or removed sooner if you ask. Everything travels over HTTPS, card details are handled entirely by Stripe, and access to customer records is limited to the people who prepare orders and answer client services.

Your rights & complaints

You may request access to, correction of, or deletion of your personal information at any time by contacting privacy@luckysoul.shop. We handle personal information in line with the Australian Privacy Principles and respond within 30 days. If you are not satisfied with our response, you can complain to the Office of the Australian Information Commissioner at oaic.gov.au.

Cookie preferences

Essential cookies keep your bag, wishlist, and login working and are always on. You can choose whether to allow the following:

Essential

Required for the shopping bag, wishlist, checkout, and account to function.

Always on

Analytics

Helps us understand how the Site is used so we can improve it.

Marketing

Allows us to show you relevant LuckySOUL content elsewhere.