Privacy Policy

Who we are

RAVE+ is operated under the registered business name RAVE PLUS (ABN 14 631 834 405), based in New South Wales, Australia. Contact support@raveplus.co for privacy questions, access or correction requests, deletion requests and complaints.

This policy covers the RAVE+ website, free accounts, paid membership when offered, member area, BEATIQ, waitlist, enquiries and giveaways. It describes both live billing when available and controlled sandbox testing.

What we collect

• Account details: first and last name, email address, Australian mobile number, state or territory, date of birth, nickname and member number.
• Account records: sign-in and verification records, terms acceptance and applicable terms versions, marketing preferences and unsubscribe records, account status and profile changes.
• Membership and billing: plan, payment amounts and dates, invoice and checkout references, Stripe customer and subscription identifiers, billing status, paid coverage periods, cancellation, refund and dispute records. Card and payment-method details are collected by Stripe through its checkout or portal; our membership database does not store your full card number or security code.
• BEATIQ activity: scores, guesses, rounds, streaks and leaderboard statistics.
• Communications: information you provide in enquiries, partner applications or support requests. The waitlist collects an email address and signup/marketing records.
• Technical information: information associated with requests to our website, such as IP addresses, browser/device information, referral and campaign-tag information, session identifiers and operational or security logs.
• Promotions, when open: entry and eligibility records, historical profile details needed to establish eligibility at closing, campaign cutoff and rules, payment reconciliation records, locked entry lists, draw results, winner-contact records, reviewed public winner names, states and postcodes, publication dates and details needed to verify or deliver a prize, as explained in the promotion’s rules. We also keep private giveaway-exclusion reasons, such as family, close friend, staff or organiser relationships, and an audit of the administrator, action and date for exclusion and winner-publication changes.

We collect information directly from your forms, account activity and communications, and through the providers that operate these services, including payment updates received from Stripe. Authorised administrators may record eligibility exclusions from their knowledge of a relevant relationship or information provided to us, and winner-contact or publication details from the winner. We link payments to your account and member number so that billing and entry records refer to the same member. Account fields marked required are needed to complete a new signup. You can browse public pages without creating an account and make general enquiries without identifying yourself where practicable. We cannot create an account, authenticate you, check eligibility or fulfil a prize without the information needed for those functions. A nickname can be used publicly, but it does not make the underlying member account anonymous. Not providing required account fields prevents a new signup; missing prize-verification details may prevent us confirming eligibility or delivering a prize, subject to the published rules and law. We do not need identity documents for routine signup; if further verification is needed for a prize, we will explain what is required and how to provide it safely.

How we use your information

We use your information to create and authenticate your account, assign your member number, maintain your profile and game progress, process membership billing, establish paid-through dates, manage renewal and cancellation, handle refunds and disputes, provide support, check age and location eligibility, administer promotions, prevent misuse and meet applicable legal obligations.

Your mobile number is collected so we can call you if you win a giveaway and arrange prize verification or delivery. It is not shown publicly. Providing a mobile number does not opt you into marketing calls or texts. The field is required for new accounts; existing members without a mobile number are prompted to add it after signing in, and members can update it in their profile. Keep it current so we can reach you.

Your date of birth and state help determine access to age-restricted and location-specific benefits or promotions. Creating an account or supplying contact details does not itself enter you into a giveaway.

We compare verified paid coverage and historical eligibility details against each campaign’s published entry period and eligibility rule, then retain its final entry list and result for administration, audit and dispute handling. For campaigns using paid coverage during the entry period, we retain the earned entry after ordinary membership expiry or cancellation of renewal, subject to the published refund review. Current paid-benefit access is assessed separately. BEATIQ can show your private campaign entry status from the same member record; game points do not add entries. Authorised administrators can investigate discrepancies, maintain the master eligibility-exclusion register and review winner details before publication. Exclusion reasons and private review notes are not published or supplied to partners for marketing. Contact support to request review of an incorrect entry status.

What other people can see

BEATIQ shows your nickname, first name and last initial alongside your game statistics. Your email, mobile number, full date of birth and private account details are not included in the public leaderboard.

A promotion may require publication of limited winner details. Its rules will explain what is published, where and when, and any legal requirements. The Winners page can show the reviewed public name (which may be a first initial and full surname), state and postcode, prize, draw date and publication date. Publication is reviewed separately from the automatic private draw record. Contact us promptly with a safety or privacy concern; we will assess permitted alternatives or exemptions under the applicable rules. Optional winner photographs, testimonials and promotional interviews require separate agreement. Our draw display may show a winner’s member number, first name and last initial. We do not publish their mobile number or email address. Private entry confirmations show only the signed-in member’s status, not the list of other entrants or its size. Blurred animation is not a substitute for privacy controls; administrators may access entry records for authorised administration.

Marketing and service messages

Marketing email signup is optional. Where you opt in, we may email launch news, partner offers and giveaway updates. You can change your preference in your member profile, use the unsubscribe link in a marketing email or contact us. Unsubscribing is free and does not require signing in or providing extra personal information. We action marketing unsubscribe requests within five working days. Our marketing messages identify RAVE+ and include contact details and an unsubscribe option that remains functional for at least 30 days. We retain the minimum preference or suppression record needed to respect an opt-out; signing in or buying membership does not itself give fresh marketing consent.

Opting out of marketing does not prevent necessary service messages, such as sign-in links, account confirmations, billing and renewal notices, payment or cancellation updates, support responses or contact about a prize you have won. These communications are separate from marketing consent. A message is not exempt from marketing requirements merely because we call it a service or welcome email; promotional messages require the relevant consent and unsubscribe option. We do not give partners your contact details for their own marketing without separate permission.

Providers, sharing and overseas processing

We do not sell your personal information. Authorised RAVE+ administrators and service providers may access information needed to operate the service:

• Vercel: website hosting, request processing and operational logs.
• Supabase: account authentication, database records and storage.
• Stripe: payment processing, checkout, billing portal, subscriptions, refunds, fraud prevention and payment disputes. We provide the account details and member identifiers needed to link your purchase and receive billing updates. Stripe also handles information under its Privacy Policy.
• Resend: sending service and marketing emails.

These providers may process information outside Australia. Our current Supabase project is hosted in India; hosting, email delivery, Stripe payment processing and provider support may also involve the United States and other countries in the providers’ service networks. Processing locations depend on the service and its providers; contact us for information about the handling of your records.

We may share the minimum information needed with a prize supplier to verify eligibility or fulfil a prize, as explained in the relevant promotion, including a travel companion’s name and booking details where needed. Please tell a companion before providing their details; we may also collect necessary information directly from them. We may disclose relevant records to professional advisers, promotion scrutineers, regulators or law-enforcement bodies where reasonably necessary and authorised or required by law. Visiting a partner’s website is subject to that partner’s privacy policy. A partner logo on our website does not give that partner access to your member profile.

Cookies, security and retention

We use account/session cookies and game session identifiers to keep you signed in and maintain your BEATIQ session. We also use browser storage for game progress and interface preferences. Blocking or clearing these may require you to sign in again or affect saved browser preferences. Some images or media load from third-party hosts, which receive request information such as your IP address and browser details when the resource is loaded. External links and embedded third-party services, where used, have their own information-handling practices.

We use access controls, private account views and secure connections to help protect information. No online service can guarantee absolute security. Keep sign-in links private and contact us if you suspect unauthorised access. We assess suspected breaches, take steps to contain and remedy them, and make any notifications required by applicable law. Where the Notifiable Data Breaches scheme applies, this includes notifying affected individuals and the OAIC of an eligible data breach.

We keep personal information for as long as needed to provide the service, administer promotions, handle disputes and meet applicable record-keeping obligations. You can delete your account through the member area or request deletion by email. Deletion does not necessarily erase financial transactions, historical eligibility evidence, locked entry or winner records, refund/dispute records or provider records immediately. We retain only records needed for legal obligations, promotion administration, fraud prevention, audit or dispute resolution, restrict access, and delete or de-identify them when no longer required. Provider backups may remain until their normal retention cycle ends. Stripe maintains its own payment records under its policies and legal obligations. Confirming account closure switches off marketing and account access immediately. We verify cancellation of recurring subscriptions before removing your profile, BEATIQ data and authentication account. We show a pending request when billing or deletion needs a retry and confirm when closure is complete. Financial history is stored independently of your sign-in account. We retain private contact and eligibility evidence only where needed to administer an existing promotion or prize claim, and a minimum suppression record to respect an opt-out. Retained records have restricted access and a scheduled retention review; we delete or de-identify information when its purpose and any applicable legal retention period end. A new signup with the same email creates a new account and does not reconnect old billing or game data. Contact support for a retained-record request or an active prize claim.

Access, correction and complaints

You can update your contact details, nickname, date of birth, state and marketing preference in your member profile. Email support@raveplus.co to request access, correction or deletion, or to raise a privacy complaint. We may need to verify your identity before acting, using information proportionate to the request. Include enough detail to locate your record and explain the request; do not send a full card number, sign-in link or identity document by ordinary email unless we have agreed a suitable verification method. If we cannot grant access, make a correction or delete a record, we will explain the reason and available review or complaint options, except where law prevents us doing so. There is no fee for making a request or correcting your information.

We will review your privacy request or complaint and aim to respond within 30 days. If we need more time, we will explain why. If you remain dissatisfied, you may contact the Office of the Australian Information Commissioner at oaic.gov.au, where your complaint falls within its jurisdiction.

Updates to this policy will appear on this page with a revised date. We will let you know about significant changes to how we use your information.

Paid terms and refund audit records

Stripe requires you to accept the paid terms before completing checkout. We retain the terms version, selected plan, payment environment and Stripe checkout reference, using Stripe’s checkout completion event time as the acceptance record. Opening checkout alone is not recorded as acceptance. Earlier profile acceptance records are retained separately. We keep separate Stripe customer links for live and sandbox billing. Refund records include payment and refund references, amounts, verified status and processing times. Before a giveaway draw, we retain the original entry list and record completed-refund exclusions, the final draw list and the saved result. These records help explain eligibility decisions and investigate billing or entry complaints.