Privacy Policy

Wildside Media is the data controller for personal data processed through The Lucky Escape. For privacy enquiries, contact us at hello@theluckyescape.com.

Depending on how you use the service, we may process:

• Account data: email address and authentication session data when you sign in via magic link (Supabase Auth)
• Profile data: display name, avatar, share code, and region preferences stored in your account
• Activity data: giveaways you save or mark as entered
• Membership data: subscription status and plan if you join Hidden Gems membership
• Newsletter data: email address if you subscribe on the landing page without creating an account (stored separately from your account)
• Technical data: basic server and security logs from our hosting provider

We do not use advertising trackers or sell your personal data to data brokers.

We process personal data to:

• Provide and secure your account (contract / legitimate interest)
• Remember saved and entered giveaways (contract)
• Manage membership access (contract)
• Send product emails you sign up for, such as the Friday email (consent or legitimate interest, depending on context)
• Respond to support and legal requests (legitimate interest / legal obligation)
• Protect the service against abuse and fraud (legitimate interest)

We use trusted service providers to run the product, including:

• Supabase — authentication, database, and file storage
• Cloudflare — hosting and delivery of the website

When you enter a giveaway, you interact directly with the sponsor’s site. We do not control how sponsors handle your data once you leave The Lucky Escape.

Payments are processed by Stripe. Billing details (for example card numbers) are collected and stored by Stripe under its privacy notice. We store Stripe customer and subscription identifiers so we can manage your membership.

We keep account and activity data while your account is active. If you delete your account, we remove associated profile, preference, entry, and membership records and delete your authentication user, subject to limited backup retention by our processors.

Newsletter emails are kept until you unsubscribe or ask us to remove them.

If you are in the UK or EEA, you may have rights to access, rectify, erase, restrict, or object to processing, and to data portability where applicable. You may also lodge a complaint with your local supervisory authority.

You can delete your account in Settings. For other requests — including access or erasure of newsletter-only data — email hello@theluckyescape.com.

We use essential cookies and local storage needed for sign-in sessions and basic site functionality. We do not use third-party advertising cookies.

The Lucky Escape is not directed at children under 16. We do not knowingly collect personal data from children. Contact us if you believe a child has provided personal data and we will take appropriate steps to delete it.

Our processors may store or process data outside the UK. Where required, we rely on appropriate safeguards such as standard contractual clauses or equivalent mechanisms.

We may update this policy from time to time. Material changes will be reflected in the “Last updated” date at the top of this page.

Privacy questions or requests: hello@theluckyescape.com. You can also visit our Contact page.

These terms are governed by the laws of England and Wales for contractual matters relating to our service.