Privacy policy

Lady Winks is run by Altered Status (ABN on request). This is a private test version shared with family and friends. We handle personal information in line with the Australian Privacy Principles.

What we collect

• List owners: email, password (stored securely hashed by our login provider, never by us), your first name (which you give when you sign up, or the name on the list you make for yourself; used to greet you and shown to anyone filling in a list you made for them), the lists and items you add (including who each list is for, such as "my son" or "our dog", which only you see), ideas you save in "Let me think…" (only you can see these), any favourites you choose to add to a list (such as your coffee order or favourite chocolate), which anyone with that list's link can see (on a child's list, only the child-friendly ones a parent adds, such as a favourite ice cream or movie), the friends' lists you save to come back to (just their links; only you can see them, and your friend isn't told), occasion dates, and the payment details you choose to show for each list: a PayID and bank display name, a BSB, account number and account name, or a gift link (such as Spriggy). These are shown to anyone you share that list with, once they tap Chip in.
• Friends and family: the name, optional email, amount and message you enter when you reserve an item or chip in. Your name and message stay sealed until the occasion day, then the list owner sees them together in one card.

Age

Accounts are only for adults aged 18 or over, and we ask you to confirm this when you sign up. Children's lists are made and managed by a parent (see below). On a child's list we only ask friends for a first name and a message, never an email.

No tracking

Lady Winks has no analytics services, advertising trackers or session recording, and doesn't record what you type or how you move around the site. The only thing we count is taps on a "Buy it here" button: we store which item and when, and nothing about who tapped it. Our fonts are stored on our own site, so loading a page doesn't send your details to Google or other font services. Pictures on a list load from the shop or website the list owner linked to, so that website can see your device's internet address when the picture loads, as it would if you visited it.

Lists made for another adult

If someone makes a list for you and sends you a fill-in link, the ideas you add are stored on their account until you make the list your own. We don't ask for your name, email or anything else to add ideas. If you choose to make an account, the list moves to you.

Reading shop links

When you paste a shop link, our server visits that page once to read the product's name, picture and price, so you don't have to type them. The shop sees our server, not you. We don't keep anything from the page apart from what you choose to save.

Phone notifications

If you turn on notifications, we store a technical address for your phone's browser so we can send you a message on the occasion day saying your chip-in card is ready. We use it for nothing else, there is no marketing, and turning notifications off or signing out removes it.

Money

We never receive, hold or process gift money. Chip-ins are paid directly from your bank to the list owner's PayID or bank account, or through the gift link they chose, on that service's own website. We only record what you tell us you sent.

How it's used and shared

Only to run the list: showing the owner chip-ins to confirm, keeping reservations secret until the occasion, and showing items to people with the link. We don't sell data or show ads. Data is stored with Supabase (Sydney region) and the site is hosted by Netlify, which may process data overseas.

Children's lists

A parent or guardian can make a list for a child under 18 inside their own account, after reading and agreeing to a short note. We store the child's first name, the things on their list and the occasion date, in the parent's account. Children don't have their own account, email or login. They can add ideas from the parent's phone, and nothing shows to anyone until the parent approves it. Children's lists are never public and never searchable, and they have no advertising, sponsored picks, tracking or personalised suggestions. The parent can change or delete the list at any time.

Your choices

Share links are private but anyone with the link can view the list, so share it with people you trust. You can ask us to see, correct or delete your information at any time. Complaints that we can't resolve can go to the OAIC at oaic.gov.au.

Contact

Brooke, Altered Status: hello@ladywinks.com