Privacy Policy

1. Introduction

SyndicateMaster ("we," "our," or "us") operates the SyndicateMaster.com website and mobile application (the "Service"). This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you use our Service.

We are committed to protecting your privacy and complying with the New Zealand Privacy Act 2020 and other applicable privacy laws.

2. Information We Collect

2.1 Personal Information

We collect information you provide directly to us, including:

• Name and email address
• Phone number (if provided)
• Payment information (processed securely through our payment provider)
• Syndicate member details you add to your syndicates
• Communications with us (support emails, feedback)

2.2 Lotto Ticket Information

When you upload lotto ticket images, we collect and process:

• Ticket numbers and draw dates
• Game types (Lotto, Powerball, Strike)
• Purchase dates and locations (if visible on tickets)
• Ticket images (stored securely and encrypted)

2.3 Usage Information

We automatically collect certain information when you use our Service:

• Device information (type, operating system, browser)
• IP address and location data
• Usage patterns and feature interactions
• Log files and error reports

2.4 Cookies and Tracking Technologies

We use cookies and similar technologies to:

• Remember your login status
• Improve website performance
• Analyze usage patterns
• Provide personalized experiences

3. How We Use Your Information

We use collected information for the following purposes:

3.1 Service Provision

• Managing your syndicate accounts and memberships
• Processing lotto ticket data and checking results
• Calculating and distributing winnings information
• Sending notifications about draws and results
• Providing customer support

3.2 Business Operations

• Processing payments and managing subscriptions
• Improving our Service and developing new features
• Analyzing usage patterns and performance
• Preventing fraud and ensuring security
• Complying with legal obligations

3.3 Communications

• Sending service-related emails and notifications
• Providing customer support responses
• Sending promotional communications (with your consent)

4. Information Sharing and Disclosure

We do not sell, rent, or share your personal information except in the following circumstances:

4.1 With Your Consent

We may share information when you explicitly consent to such sharing.

4.2 Service Providers

We work with trusted third-party service providers who assist us in operating our Service:

• Payment processors (Stripe, PayPal)
• Cloud hosting providers (AWS, Google Cloud)
• Email service providers
• Analytics providers

These providers are contractually bound to protect your information and use it only for specified purposes.

4.3 Legal Requirements

We may disclose information when required by law or to:

• Comply with legal processes or government requests
• Protect our rights, property, or safety
• Prevent fraud or illegal activities
• Enforce our Terms of Service

4.4 Business Transfers

In the event of a merger, acquisition, or sale of assets, your information may be transferred as part of that transaction.

5. Data Security

We implement robust security measures to protect your information:

• SSL/TLS encryption for data transmission
• AES-256 encryption for stored data
• Regular security audits and monitoring
• Restricted access to personal information
• Secure payment processing (PCI DSS compliant)

While we strive to protect your information, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will promptly notify you of any security breaches as required by law.

6. Data Retention

We retain your information for as long as necessary to provide our Service and fulfill legal obligations:

• Account information: For the duration of your account plus 7 years
• Ticket data: For the duration of your account plus 7 years
• Payment records: 7 years from the last transaction
• Support communications: 3 years from the last interaction

You may request deletion of your personal information at any time, subject to legal retention requirements.

7. Your Rights

Under the New Zealand Privacy Act 2020, you have the following rights:

7.1 Access and Correction

• Request access to your personal information
• Request correction of inaccurate information
• Download your data in a portable format

7.2 Deletion and Restriction

• Request deletion of your personal information
• Request restriction of processing in certain circumstances
• Object to processing based on legitimate interests

7.3 Exercising Your Rights

To exercise these rights, please contact us at privacy@syndicatemaster.com. We will respond within 20 working days as required by New Zealand law.

8. Children's Privacy

Our Service is not intended for children under 18. We do not knowingly collect personal information from children under 18. If you believe we have collected information from a child under 18, please contact us immediately.

9. International Data Transfers

Your information may be transferred to and processed in countries other than New Zealand. We ensure appropriate safeguards are in place for such transfers, including:

• Standard contractual clauses
• Adequacy decisions by relevant authorities
• Certification under recognized privacy frameworks

10. Changes to This Privacy Policy

We may update this Privacy Policy from time to time. We will notify you of any material changes by:

• Posting the updated policy on our website
• Sending an email notification to registered users
• Providing notice within our Service

Your continued use of the Service after any changes constitutes acceptance of the updated Privacy Policy.

This Privacy Policy is designed to comply with New Zealand privacy laws. If you access our Service from other jurisdictions, additional privacy rights may apply.