Privacy Policy

Last Updated: February 2026

BuyDoubles ("we", "us", or "our") operates the website buydoubles.com.au and the platform app.buydoubles.com.au. This Privacy Policy explains how we collect, use, disclose, and protect your personal information in accordance with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth).

1. Information We Collect

1.1 Club Contact Information

When rugby league clubs sign up for BuyDoubles, we collect:

• Name, email address, and phone number of club committee members
• Club name, address, and ABN
• Banking details (via Stripe) for payouts
• Marketing materials (logos, photos, supporter database)

1.2 Subscriber/Supporter Information

When supporters subscribe to their club's digital doubles, we collect:

• Name and email address
• Payment details (processed securely via Stripe)
• Phone number (optional, for SMS notifications)
• Subscription status and payment history

1.3 Automatically Collected Information

When you visit our website or use our platform, we automatically collect:

• IP address and device information
• Browser type and version
• Pages viewed, time spent on pages, and navigation paths
• Referring website or source
• Cookie and tracking data (see Section 3 below)

2. How We Use Your Information

We use your personal information for the following purposes:

2.1 Service Delivery

• Processing weekly subscription payments
• Managing digital doubles draws and prize payouts
• Sending draw results and winner notifications
• Providing customer support
• Administering club accounts and dashboards

2.2 Marketing and Communications

• Sending email and SMS campaigns to club supporter databases (with club permission)
• Sending marketing emails to club committee contacts about our services
• Running Facebook and Instagram advertising campaigns
• Promoting club fundraising campaigns to their communities

2.3 Analytics and Advertising

• Analyzing website and platform usage via PostHog analytics
• Tracking advertising performance via Meta Pixel (Facebook)
• Improving our platform and services
• Understanding user behaviour and preferences

2.4 Legal and Compliance

• Complying with legal obligations
• Preventing fraud and ensuring platform security
• Enforcing our Terms of Service

3. Cookies and Tracking Technologies

We use cookies and similar tracking technologies to enhance your experience and analyze usage:

3.1 Essential Cookies

Required for the platform to function, including authentication and security.

3.2 Analytics Cookies

PostHog: We use PostHog to track user interactions, feature usage, and platform performance. PostHog collects anonymized usage data to help us improve our service.

3.3 Advertising Cookies

Meta Pixel (Facebook): We use the Meta Pixel to track website visitors, measure advertising effectiveness, and create targeted advertising audiences. The Meta Pixel may collect your IP address, browser information, page views, and actions taken on our website.

3.4 Cloudflare

Our website is hosted via Cloudflare, which may use cookies for security, performance optimization, and analytics.

Managing Cookies: You can control cookies through your browser settings. Disabling cookies may affect the functionality of our website and platform.

4. Third-Party Services

We share your personal information with the following trusted third-party service providers:

4.1 Stripe (Payment Processing)

All payment information (credit card details, bank accounts) is processed securely by Stripe. We do not store payment card details on our servers. Stripe's privacy policy is available at stripe.com/privacy.

4.2 PostHog (Analytics)

We use PostHog for product analytics to understand how users interact with our platform. PostHog may collect anonymized usage data. PostHog's privacy policy is available at posthog.com/privacy.

4.3 Meta/Facebook (Advertising)

We use Meta Pixel to track conversions and create advertising audiences. Meta may collect your IP address, device information, and browsing behavior. Meta's privacy policy is available at facebook.com/privacy/policy.

4.4 GoHighLevel (CRM and Email Marketing)

We use GoHighLevel to manage club contacts, send marketing emails, and run SMS campaigns. GoHighLevel's privacy policy is available at gohighlevel.com/privacy-policy.

4.5 Cloudflare (Hosting and CDN)

Our website is hosted and delivered via Cloudflare's content delivery network. Cloudflare may collect technical data for security and performance purposes. Cloudflare's privacy policy is available at cloudflare.com/privacypolicy.

5. Data Retention

We retain your personal information for as long as necessary to:

• Provide our services to you
• Comply with legal obligations (e.g., financial records for 7 years)
• Resolve disputes and enforce our agreements

When your subscription ends or your club account is closed, we may retain certain information for legal and compliance purposes.

6. Data Security

We implement reasonable technical and organizational measures to protect your personal information, including:

• Encryption of data in transit (HTTPS/TLS)
• Secure authentication (two-factor authentication for club accounts)
• Regular security audits and monitoring
• Restricted access to personal information

However, no method of transmission or storage is 100% secure. We cannot guarantee absolute security.

7. Your Rights Under Australian Privacy Law

Under the Australian Privacy Principles, you have the right to:

7.1 Access Your Information

You can request access to the personal information we hold about you.

7.2 Correct Your Information

You can request that we correct any inaccurate or incomplete information.

7.3 Delete Your Information

You can request that we delete your personal information, subject to legal and contractual obligations.

7.4 Opt-Out of Marketing

You can unsubscribe from marketing emails at any time by clicking the "unsubscribe" link in our emails, or by contacting us at [email protected].

7.5 Lodge a Complaint

If you believe we have breached the Australian Privacy Principles, you can lodge a complaint with us (see Section 10 below) or with the Office of the Australian Information Commissioner (OAIC) at oaic.gov.au.

8. Children's Privacy

Our services are not directed to children under 18. We do not knowingly collect personal information from children. If we become aware that we have collected information from a child under 18, we will take steps to delete it.

9. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and updating the "Last Updated" date above.

10. Contact Us

If you have questions about this Privacy Policy, wish to exercise your privacy rights, or want to lodge a complaint, please contact us:

We will respond to your inquiry within 30 days.