Privacy Policy

Last updated: April 25, 2026

LuckyList.ca (“LuckyList”, “we”) takes your privacy seriously. This Privacy Policy explains what personal information we collect, how we use it, who we share it with, and what rights you have. It is written to comply with Canada’s Personal Information Protection and Electronic Documents Act (PIPEDA) and applicable provincial privacy laws.

1. Who We Are

LuckyList is operated by LLSC Enterprises (Canada). Our hosting provider is OrangeWebsite (Iceland). Payments in cryptocurrency are processed by Coinremitter. See “Third Parties” below for details.

2. Information We Collect

Information you provide

• Account information: email, username, password (hashed).
• Listing information: ad title, description, category, location, photos, contact preference, and any text you type into the post-ad form.
• Payment information: when you upgrade an ad or top up LuckyCoin, you transact with Coinremitter directly. We receive only an invoice ID, the USD amount, and a confirmation status — we do not see your wallet, your private keys, or your transaction history.
• Communications: support tickets, emails, abuse reports.

Information collected automatically

• IP address and approximate location (used for fraud and abuse prevention).
• Browser type, OS, device type (used for compatibility and security).
• Pages viewed and timestamps (used for performance and abuse detection).
• Cookies — see §5.

3. How We Use Your Information

• To operate the Site — create your account, publish your ads, process upgrades, and let you contact other users.
• To prevent fraud, abuse, spam, and illegal activity.
• To communicate with you about your account, transactions, and Site updates.
• To respond to legal process when properly served.
• To improve the Site and develop new features.

4. Sharing Your Information

We do not sell your personal information. We share it only as described below:

• Service providers — hosting (OrangeWebsite, Iceland), payment processing (Coinremitter), email delivery (our SMTP server), strictly to perform services for us.
• Legal requirements — if required by valid legal process, court order, or to protect the rights, safety, or property of LuckyList, our users, or the public.
• Aggregated, non-identifying data — we may publish overall statistics that do not identify any individual.

5. Cookies & Tracking

We use a small number of essential cookies to keep you logged in, remember your preferences, and prevent abuse. We do not currently run third-party advertising trackers. If you disable cookies, parts of the Site may not work correctly.

6. Data Retention

• Active ads — retained until you delete them or until they expire.
• Account data — retained while your account is active and for up to 24 months after closure for abuse-prevention purposes.
• Server logs — typically 90 days.
• Payment records — retained as required by Canadian tax and accounting law (currently 6 years).

7. Your Rights (PIPEDA)

You have the right to:

• Access the personal information we hold about you.
• Correct any inaccurate information.
• Withdraw consent for ongoing processing (subject to legal/contractual constraints).
• Delete your account and associated personal information, subject to retention requirements above.
• File a complaint with the Office of the Privacy Commissioner of Canada if you believe we have not addressed your concerns adequately.

To exercise any of these rights, email legal@luckylist.ca from the email address on file. We will respond within 30 days.

8. Security

We protect your data with industry-standard measures: HTTPS site-wide, hashed passwords, .htaccess-protected configuration files, and access controls on our hosting account. No system is perfect. If we ever experience a breach affecting your personal information, we will notify you and the Privacy Commissioner of Canada as required by law.

9. International Data Transfers

Our hosting is in Iceland (OrangeWebsite). When you use the Site, your data is transferred to and stored in Iceland, which has data-protection laws that the European Commission considers adequate. Coinremitter operates internationally; consult their privacy policy for their handling.

10. Children’s Privacy

The Site is for adults only. We do not knowingly collect information from anyone under 18. If we learn that we have, we will delete it immediately. If you believe a minor has used the Site, contact us at legal@luckylist.ca.

11. Changes to This Policy

We may update this Policy from time to time. The “Last updated” date reflects the most recent change. Material changes will be highlighted on the Site.

12. Contact

Privacy questions, access requests, or complaints? Email legal@luckylist.ca.

This Privacy Policy is a starting point and is not legal advice. We recommend review by qualified Canadian privacy counsel before relying on it.