Effective Date: Oct 01 2025

1.0 Introduction

Bucketlist Rewards Inc. is a technology company headquartered in British Columbia, Canada. This Privacy Policy is applicable to Bucketlist Rewards Inc. (“we,” “our,” or “us”) as related to our Services, which collectively include:

• the use of www.bucketlistrewards.com > (the “Website”)
• the use of the application websites at www.bucketlist.org and www.bucketlistrewards.ca (“Application”) 
• social media messages and marketing campaigns and 
• the use of our products and services (collectively “Services”). 

This Privacy Policy sets out how Bucketlist Rewards Inc. collects, uses and disclosures the personal information of the following individuals:

• Website visitors
• End users of the application (“end user”)
• prospective customers
• Job applicants and
• Partners

In this Policy, we use the word “Customer” to refer to anyone who has subscribed to or paid for use of our Services. We use the word “you” to refer to any other individual user of our Services, such as an employee of a Customer, or an individual browsing or using our Website and web-based resources.     

If you are a user of one of our Customers, the Customer controls your information processed within the Services, including your contact information, billing details, and other records. Please contact the relevant Customer for any questions about your personal information.

Meaning of Personal Information

“Personal information” means information about an identifiable individual.  This information may include, but is not limited to, your name, mailing address, e-mail address, telephone number and country of residence.

Personal information does not include information where there is no serious possibility that it can be used to identify an individual, whether on its own or in combination with other information, or personal information that has been anonymized such as to be considered anonymized information or no longer personal information under applicable laws.

2.0 Personal Information We Collect 

We collect Personal Information from you in the following ways:

• Through your use of the Services, whether directly uploaded and created by you, or automatically collected by us as you use the Services.  
• Through your engagement with our Website, including information submitted by you within a website form or obtained from us through cookies or similar technologies. 
• From other third party sources, such as our partners and service providers. 

2.1 Information You Choose to Provide to Us

You may provide personal information directly to us:

• During our sales process 
• In communication with our customer success team 
• Register for marketing events and communications 

If you provide personal information about another individual to us, it is your responsibility to obtain the consent of that individual to enable us to collect such information from you, and to use and disclose his or her information as described in this privacy policy. 

TYPES OF INFORMATION WE COLLECT:

We collect personal information that may include first and last name, business email address, phone number and/or company name. 

As an end user of the application, we collect your name, business email address and any recognitions or comments you make in the application.

As a job applicant, we may also collect your resume and cover letter. 

Further information, including specific obligations of the Bucketlist Rewards Inc., can be found in the Service and/or Data Processing Agreements.

2.2 Information We Collect Through Cookies and Similar Technology

We collect information about your visits to the website and the application when you land on any of our web pages through cookies and similar tracking technology. 

A cookie is a very small text document stored on your computer/other device (and maintained by your browser), and often includes a randomized unique identifier so that our Website can ‘recognize’ this cookie again. They guarantee websites’ functioning or improve the browsing, and also supply certain information to the owners of these websites, in particular in terms of audience measurement.

Information collected through cookies help us to analyze the use of the Website and to enables us to offer users a better experience when visiting the Website. We will only keep cookies for as long as necessary to achieve the relevant purposes set out in this Cookies Policy, notably for marketing and statistical purposes. 

Generally-speaking, we use 1st and 3rd-party sessions and persistent cookies. The cookies set by us are called “1st-party cookies” and the cookies set by our third-party partners and service providers are called “3rd-party cookies.” 

Session cookies are temporary cookies that remain on your device until you close your web browser. Many session cookies are essential to make our Website work correctly, as they typically enable you to move around our Website and use our features.

Persistent cookies remain on your device after you close your browser or until you manually delete it (for the former, how long the cookie remains on your device will depend on the duration or “lifetime” of the specific cookie and your browser settings). Persistent cookies help us recognize you as an existing user of our Website, so it is easier and more convenient to return to our Website or interact with our Services without signing in again. In addition, persistent cookies also help us recognize you when you view a resource belonging to our Website from another website or app (such as an advertisement) and help us record information about your web browsing habits during the lifetime of the persistent cookie.

If you have any concerns about our use of cookies, you can refuse them on the cookies banner, take action to prevent them from being set, such as by changing your browser settings to block certain types of cookies. You may also delete cookies held on your device at any time by going to the appropriate settings within your web browser. 

You have the option to configure your devices to accept all cookies, to notify you when a cookie is issued or to never accept cookies. However, the latter option may result in some personalized services not being provided and, as a result, you may not be able to take full advantage of all the features offered by the Site. If you do not wish to receive cookies in general or only to refuse certain cookies, you can change your browser settings accordingly.

TYPES OF INFORMATION WE COLLECT:

The information collected includes:

• access times
• the pages you view
• the links you click on 
• the search terms you enter 
• actions you take in connection with any of the visited pages
• your device information such as IP address, location, browser type and language
• the Uniform Resource Locator (URL) of the website that referred you to our website and 
• the URL you browse away from our pages if you click on an external link

We may also collect information when you open email messages from us or click on links within those email messages.

2.3 Information We May Collect From Third Parties

We may combine the information we collect from your direct interactions with us with information obtained through other third-party sources, such as our partners and service providers or from linked accounts We also obtain and/or purchase lists from third parties about individuals and companies interested in our products. 

3.0 How We Use Personal Information  

We use your personal information to: 

• Deliver the contracted services and allow full use of the application functionality as purchased by our  Customers. [GDPR Basis: Contractual Obligations]
•      Advertise and market our products and services, including delivering interest-based advertisements on this website and other sites or content syndication platforms and websites. [GDPR Basis: Consent]  Carry out market research to understand how to improve our services and their delivery. [GDPR Basis: Legitimate Interests]Enforce our website and application terms and/or separate contracts (if applicable) with you [GDPR Basis: Legal Obligations]Prevent fraud and other prohibited or illegal activities. [GDPR Basis: Legal Obligations]     

Please note that sometimes we may record the video conferencing call in which you participate to analyze and improve our staff’s communication skills. If we do so, we will be announcing it at the beginning of the conference call and in the meeting invite, and we will only proceed with your consent. 

We do not sell your information to any third party. 

Opting Out of Communications

If you no longer want to receive marketing-related emails from us, you may opt out of receiving marketing-related emails by clicking the “unsubscribe” link at the bottom of any email you receive from us.  You may also opt out by contacting us directly using the contact information on our website.

Sharing with Third Parties and Service Providers

We use third parties to help us provide our services. They will have access to your information as collected by the website or the application, as reasonably necessary to perform the contracted tasks on our behalf. 

If we provide your information to service providers for our provision of the Services, then we require that service providers maintain the confidentiality of your personal information and keep your personal information secure. We also require that they only use your personal information for the limited purposes for which it is provided. When our service providers no longer need your personal information for those limited purposes, we require that they dispose of the personal information. In some circumstances, we may permit our service providers to retain anonymized or statistical information that does not identify you. We do not authorize the service providers to disclose your personal information to unauthorized parties or to use your personal information for their direct marketing purposes.  If you would like more information about our service providers, please contact us using the contact information on our website.

Service Provider Name	Business Purpose	Data Location
Digital Ocean	Infrastructure as a Service Hosting Provider	USA or Canada
Amazon Web Services	Platform as a Service Hosting Provider	USA or Canada
Amazon Physical Goods	Points redemption	USA or Canada
Hubspot Inc.	Customer Support, Sales, and Marketing services	USA or Canada
Google Workspace	Productivity & Internal Communications	USA or Canada
Slack	Internal Communications	USA or Canada
Sentry	Error logs	USA or Canada
Sharefile	Secure file transfer	USA or Canada
Cloudflare	WAF, DNS Management, & Other Security Tools	USA or Canada
ChargeOver	Billing automation	USA or Canada
Gong	Revenue intelligence platform	USA or Canada
Zoom	Communication platform	USA or Canada
Docusign	Document signing software	USA or Canada
Apollo	Lead Generation	USA or Canada
LinkedIn Sales Navigator	Lead Generation	USA or Canada
Zapier	Data Flow Automation	USA or Canada
HotJar	Website Heatmaps, Behaviour Analytics Tools, Surveys	USA or Canada
Survey Monkey	Survey Tool	USA or Canada
Grafana/Loki	Log Aggregation & Visualization	USA or Canada
Merge	Integration API	USA or Canada
SendGrid	Email Service	USA or Canada
Rewards Genius	Gift Card Redemption Processing	USA or Canada
OpenAI	Content Moderation (if enabled on client’s platform) General productivity tasks (ChatGPT)	USA

Other Disclosures

Additionally, we may disclose your information when we believe such disclosure is permitted, necessary or appropriate: (a) under applicable law, including laws outside your country of residence; (b) to comply with legal process. 

4.0 How We Secure Personal Information

We have implemented commercially reasonable physical, organizational, contractual and technological security measures with a view to protecting your personal information from accidental or unlawful destruction, loss or theft, unauthorized access, disclosure, copying, use or modification.  We have taken steps to ensure that the only personnel who are granted access to your personal information are those with a business ‘need-to-know’ or whose duties reasonably require such information.

Despite the measures outlined above, no method of information transmission or information storage is 100% secure or error-free, so we unfortunately cannot guarantee absolute security.  In the case of a breach of security safeguards, we will act promptly to mitigate the risks and to inform you where there is a real risk of significant harm, or as otherwise required by law.

If you have reason to believe that your interaction with us is no longer secure (for example, if you feel that the security of any information that you provided to us has been compromised), please contact us immediately using the contact information on our website. 

5.0 Your Rights

We provide the same suite of services to all of our Customers and end users worldwide. Individuals have a number of rights concerning their personal information under global privacy laws. You may make a written request to access, correct or delete any personal information about you that we have collected, used or disclosed, and we will provide you with any such personal information to the extent required by law. You may also challenge the accuracy or completeness of your personal information in our records. If you successfully demonstrate that your personal information in our records is inaccurate or incomplete, we will amend the personal information as required. If you provided personal information to a Customer and believe it is being processed by us on behalf of that Customer, please make any requests or queries regarding that personal data to the Customer directly.

More details about how you can exercise your rights in respect to data held by us are provided below:

• Access your personal information or request a copy.

You have the right to obtain information about what personal information we process about you or to obtain a copy of your personal information. 

If you have provided personal information to us, you may contact us to obtain an outline of what information we have about you or a copy of the information. 

If you are an end user of the application, you can log in to see the personal information in the account or approach your employer for more information.

We may require that you provide sufficient identification to fulfill your request to access or correct your personal information.  Any such identifying information will be used only for this purpose. We will not charge you any fees to access your personal information in our records without first providing you with an estimate of the approximate fees, if any.  

• You have the right to be notified of what personal information we collect about you and how we use it, disclose it and protect it.

This Privacy Policy describes what personal information we collect and our privacy practices. We may also have additional privacy notices and statements available to you at the point of providing information to us directly.

• Change or correct your personal information.

You have the right to update or correct your personal information or ask us to do it on your behalf. 

You can edit your information through the user account in the application or ask us to change or correct it by contacting us at <[email protected]>.

• Delete or erase your personal information.

You have the right to request the deletion of your personal information at any time. We will communicate back to you within reasonable timelines the result of your request. We may not be able to delete or erase your personal information, but we will inform you of these reasons and any further actions available to you.

• Object to the processing of your personal information.

You have the right to object to our processing of your personal information for direct marketing purposes. This means that we will stop using your personal information for these purposes.

• Ask us to restrict the processing of your personal information.

You may have the right to ask us to limit the way that we use your personal information. 

• Export your personal data.

You have the right to request that we export to you in a machine-readable format all of the personal information we have about you.

• Right to withdraw your consent under conditions

You have the right to withdraw your consent for us to use and disclose your personal information under certain conditions, like when consent is the only ground of processing your personal information.      

We do not process personal information through the use of automated means. 

Please note that such rights are not absolute. There are instances where applicable law, contractual obligations, or regulatory requirements allow or require us to refuse to provide some or all of the personal data that we hold about you. In the event that we cannot accommodate your request, we will inform you of the reasons why, subject to any legal or regulatory restrictions. You also have the right to lodge a complaint with the local organizations in charge of enforcing the privacy legislation applicable in your territory.

6.0 How Long We Keep Your Personal Information

We will maintain your personal information for as long as they are needed, or as required by applicable laws, regulations, or government orders. After the relevant amount of time has passed, we will delete your information. The general retention periods for data that we hold are as follows.   

• Customer Data: We retain Customer Data for as long as an account is active, and for a reasonable time after account termination.  We will retain some of your information as necessary to comply with our legal obligations, to resolve disputes, to enforce our agreements, and to support business operations. 

• Services Improvement and Development: Where we retain information for Service improvement and development, we take steps to make that information non-personal, non-identifiable and anonymous. We only use this information to uncover collective insights about the use of our Services, and not to specifically analyze personal characteristics about you.  

• Information you share on the Services: If your account is deactivated or disabled, some of your information and the content you have provided will remain in order to allow your team members or other users to make full use of the Services.  

• Managed accounts: If the Services are made available to you through an organization (e.g., your employer), we retain your information as long as required by the administrator of your account.  

• Marketing information: If you have elected to receive marketing emails from us, we retain information about your marketing preferences for a reasonable period of time from the date you last expressed interest in our Services, such as when you last opened an email from us. We retain information derived from cookies and other tracking technologies for a reasonable period of time from the date such information was created. 

  7.0 International Transfer and Storage of Information

Personal information is primarily stored and processed in the United States or Canada]. Personal information may be processed in any country where we have facilities or in which we engage third party service providers to fulfill the purpose for which we collected the personal information. As a result, your personal information may be transferred to countries outside your country of residence, which may have different data protection rules than in your country.  While such information is outside of your country, it is subject to the laws of the country in which it is located, and may be subject to disclosure to the governments, courts or law enforcement or regulatory agencies of such other country, pursuant to the laws of such country.

Our practices regarding your personal information will at all times continue to be governed by this privacy policy and we will continue to comply with all applicable legal requirements. 

8.0 How to Select Your Communications Preferences 

You may choose to receive or not receive marketing communications from us. Please click the “Unsubscribe” link in the email we sent you to stop receiving marketing communications. 

You may choose which information we collect automatically from your device by controlling cookie settings on your browser or by selecting your preferences.

Even if you opt-out of receiving marketing communications, we may still communicate with you regarding security and privacy issues, servicing your account, fulfilling your requests, or administering any promotion or any program in which you may have elected to participate. 

9.0 Third Party Websites and Services

This privacy policy applies only to our products and services.  This privacy policy does not extend to any websites or products or services provided by third parties. We do not assume responsibility for the privacy practices of such third parties, and we encourage you to review all third party privacy policies prior to using third party websites or products or services.

10.0 Children’s Information

Our website is not intended for children under the age of 16. Children under the age of 16 should not use our website. If we learn that we have collected or received personal information from a child under 16 without verification of parental consent, we will delete that information. If you believe we might have any information from or about a child under 16 without the consent of their parent or legal guardian, please contact us per the “contact us” section below.

11.0 Privacy Policy Updates

This privacy policy is current as of the “updated” date which appears at the top of this page.  We may modify this privacy policy from time to time.  When changes are made to this privacy policy they will become immediately effective when published in a revised privacy policy posted on our website, unless otherwise noted.  We may also communicate the changes through our Services or by other means.  By submitting your personal information to us, by registering for or using any of the Services we offer, by using our Website, or by voluntarily interacting with us after we publish or communicate a notice about the changes to this privacy policy, you consent to our collecting, using and disclosing your personal information as set out in the revised privacy policy.

12.0 Contact Information

You may contact us to exercise any of your rights or ask for more information about your personal information and our privacy practices by contacting us at [email protected]

Appendix 

A.1 For Individuals Based in the  European Economic Area (EEA), United Kingdom (UK) and Switzerland

If you are based in one of these jurisdictions, Bucketlist Rewards Inc. is the controller of your personal data collected in the following instances:

• When you visit our Website  
• When we process your personal data for sales and marketing purposes

Bucketlist Rewards Inc. is a processor of all personal data processed on the application, on behalf of our Customers. We only process the personal data under their direction. Please contact your employer or the organization that granted you access to the application for details on their privacy practices.

We only process personal data if we have a lawful basis for doing so. The lawful bases applicable to our processing as controller are:

• Consent: We will ask for your express and informed consent every time we collect your personal data on this legal basis.
• Contractual basis: We process the personal data as necessary to fulfill our contractual terms with you or our Customers.
• Legitimate interest: We process the names, contact details, job titles, companies of our existing and prospective Customers for our marketing purposes, including market research and sales leads generation. 

The applicable bases that Bucketlist relies upon in using Personal Information are indicated next to the applicable uses above.  

You have the following rights under the GDPR:

• Be informed about the collection and use of your personal data
• Access your personal data
• Correct errors in your personal data
• Erase your personal data
• Object to the processing of your personal data.
  • This right is also available to individuals whose personal data is processed by us for direct marketing purposes. If you object to the processing of your personal data for direct marketing purposes, we shall stop processing within 30 days of receipt of your request. 
• Export your personal data
• Restrict our processing of your personal data for specific reasons, including any of the purposes supported by the legitimate interest legal bases (see the section above). 
• Not to be subject to a decision based solely on automated decision-making

We process personal data in the USA and Canada and share it with our service providers who are primarily located in the USA and Canada,  and other jurisdictions. We use standard contractual clauses, approved by the European Commission or competent UK authority (as applicable), as the data transfer mechanism for transferring personal data from the EEA or UK to other countries subject to data transfer requirements. See the table of our service providers here. (link to the table above)

You may contact us at [email protected]

You may also lodge a complaint with your local supervisory authority:

• EU Data Protection Authorities (DPAs). See their contact details here National Data Protection Authorities.
• Information Commissioner’s Office (ICO)
• Swiss Federal Data Protection and Information Commissioner (FDPIC). 

A.2 For Individuals Based in the United States

This Additional Information is made pursuant to our obligations under the California Consumer Privacy Act, and California Privacy Rights Act, Virginia Consumer Data Protection Act, Colorado Privacy Act, Connecticut Data Privacy Act, and Utah Consumer Privacy Act, and any such applicable Act that may come into force and be amended from time to time (collectively, “US Privacy Laws”).

A.2.1 Collection and Use of Personal Information

In the last 12 months, we have collected the following categories of personal information:

• Identifiers, such as your name, mailing address, email address, zip code, telephone number or other similar identifiers
• California Customer Records (Cal. Civ. Code § 1798.80(e)), such as username and password, company name, job title, business email address and department
• Internet or network information, such as your browsing history, log and analytics data, information about the device(s) used to access the services, and information regarding your interaction with our websites or services and other usage data
• Geolocation data, such as information about your location (at country and city level) collected from your IP address
• Sensory Information, the content, audio, and video recordings of conference calls between you and us that we record where permitted by you and/or the law
• Profession/employment information that you send to us when applying for a position included in your CV and cover letter
• Other personal information, such as personal information you provide to us in relation to a survey, comment, question, request, article download or inquiry and any other information you upload to our application

We collect personal information directly from you, from your browser or device when you visit our websites, from third parties that you permit to share your information or from third parties that share public information about you, as stated above.

See the section above, “How We Use Personal Information,” to understand how we use the personal information.

A.2.2 Sensitive Information

We do not collect, sell or share sensitive personal information, nor do we sell or share any personal information about individuals who we know are under sixteen (16) years old.

A.2.3 No Discrimination. 

We will not discriminate against any consumer for exercising their rights under the US Privacy Laws.

A.2.4 Recipients of Personal Information

We do not sell Personal Information for monetary or other value. In the preceding twelve months, we have not sold any Personal Information of consumers, as those terms are defined under the US Privacy Laws. We share personal information with third parties for business purposes. The categories of third parties to whom we disclose your personal information may include: (i) our service providers and advisors, (ii) marketing and strategic partners; (iii) ad networks and advertising partners; (iv) analytics providers; and (v) social networks. 

Please see the “How We Share Information” section of the Privacy Policy above for more information on categories of information disclosed in the preceding 12 months as well as third parties information disclosed with. 

A.2.5 Individual Privacy Rights

You may request to review, make amendments, have deleted, or otherwise exercise your rights, under applicable privacy laws, with respect to your personal information that we hold by emailing us at the contact information below. Please note that we may maintain copies of information that you have updated, modified, or deleted, in our business records and in the normal course of our business operations, as permitted or required by applicable law.

• Under the CCPA, California residents have the following rights (subject to certain limitations):The right to access/know any or all of the following information relating to your personal information that we have collected and disclosed in the last 12 months (upon verification of your identity):
  • The specific pieces of personal information we have collected about you
  • The categories of personal information we have collected about you
  • The categories of sources of the personal information
  • The categories of personal information that we have disclosed to third parties for a business purpose, and the categories of recipients to whom this information was disclosed
  • The categories of personal information we have sold and the categories of third parties to whom the information was sold, and
  • The business or commercial purposes for collecting, selling or sharing the personal information.
• The right to request deletion of personal information we have collected from you, subject to certain exceptions.
• The right to opt-out of personal information sales to third parties now or in the future. However, we do not sell your personal information.
• The right to opt-in to personal information sales to third parties for consumers under the age of 16. However, we do not sell personal information of minor consumers.
• The right to limit certain uses and disclosures of sensitive personal information: the right to limit our use or disclosure of sensitive personal information to those uses authorized by the CCPA. However, as explained above, we do not use and disclose sensitive personal information beyond what is authorized pursuant to the CCPA.

You also have the right to be free of discrimination for exercising these rights. 

In addition to the rights mentioned above, the CPRA grants California residents with the following additional rights:

• The right to opt-out of sharing of personal information to third parties now or in the future.
• The right to request rectification/correction of inaccurate personal information, considering the nature and purposes of the processing of the information.
• The right to limit use and disclosure of sensitive personal information to that which is necessary to perform the services or provide the goods reasonably expected by an average consumer

Please note that if exercising these rights limits our ability to process personal information (such as a deletion request), we may no longer be able to provide you with our products and services or engage with you in the same manner.

A.2.6 How to Exercise Your California Consumer Rights

To exercise any of your right mentioned above, please submit a request by contacting us at [email protected]  or by clicking the following links https:/subdomain.bucketlist.org/support/ or  https:/subdomain.bucketlistrewards.ca/support/ 

We will need to verify your identity before processing your request. 

In order to verify your identity, we will generally require sufficient information from you so that we can match it to the information we maintain about you in our systems. Sometimes we may need additional personal information from you to be able to identify you. We will notify you. 

We may decline a request to exercise the right to know and/or right to deletion under the CCPA as well as your right to rectification under the CPRA, particularly where we cannot verify your identity or locate your information in our systems or as permitted by law.

You may choose to designate an authorized agent to make a request under the CCPA or CPRA on your behalf. No information will be disclosed until the authorized agent’s authority has been reviewed and verified. Once an authorized agent has submitted a request, we may require additional information (i.e., written authorization from you) to confirm the authorized agent’s authority. 

If you are an employee/former employee of a Bucketlist Rewards Inc. Customer that uses our application and services, please direct your requests and/or questions directly to your employer or former employer.

If you are a third party (auditor, business associate, etc.), who was given access to the Bucketlist Rewards Inc. application by a Bucketlist Rewards Inc. Customer, please direct your requests and/or questions directly to the Bucketlist Rewards Inc. Customer that gave you access.

Minors Under Age 16

Our application and services are intended for business use, and we do not expect them to be of any interest to minors. We do not intentionally collect any personal information of consumers below the age of 16. 

A.3  For Individuals Based in Australia 

This section is applicable to individuals whose personal information is collected, stored, used or disclosed by an APP Entity under the Australian Privacy Principles (“APPs”) contained in the Privacy Act of 1988. 

A.3.1 Providing Anonymous and Pseudonymous Options 

You have the option of anonymity or using a pseudonym when dealing with Bucketlist Rewards Inc.. However, this option may not be made available to you in certain cases, including if it’s impractical for Bucketlist Rewards Inc. to allow this option or when Bucketlist Rewards Inc. is required or authorized to deal with an identified individual by or under the law.  

A.3.2 Collection, Use and Disclosure of Personal Information 

Bucketlist Rewards Inc. collects personal information only by lawful and fair means. Additionally, Bucketlist Rewards Inc. collects personal information directly from you or your authorized representative, unless we have your consent for collection from another source (i.e., third parties), it is required or authorized by law, or it is unreasonable to collect the information only from you. Bucketlist Rewards Inc. may collect ‘sensitive information’ about you where you have consented to the collection and it is reasonably necessary for one of our functions or activities or if it is required or authorized by law.

Bucketlist Rewards Inc. only uses and discloses your information for the purpose for which it was collected (the primary purpose) unless one or more of the following apply: 

• You have consented 
• You would reasonably expect the secondary purpose 
• It is required or authorized by or under law 
• Bucketlist Rewards Inc. believes that it is reasonably necessary for an enforcement body’s activities 

We disclose your personal information with our service providers in <update name of locations> and other jurisdictions. We do not disclose your personal information to any overseas recipients unless one of the following applies:

• You have consented to the disclosure 
• The recipient is subject to a law or binding scheme substantially similar to the APPs, and you can enforce that law/binding scheme 
• It is required or authorized by law 
• It is required or authorized by an international agreement relating to information sharing 
• It is reasonably necessary for an enforcement body’s or similar entity’s activities 

See the table of our service providers here. (link to the table above)

A.3.3 Your Rights Under the APPs 

You have the following rights related to the collection, use and disclosure of your personal data:

• Be informed about the collection and use of your personal data
• Access your personal information
• Correction of your personal information to ensure accuracy and completeness  
• Request to not receive direct marketing communications from us or to not disclose your personal information to others for direct marketing purposes 

If you wish to access your personal information or correct that information, please contact us at [email protected] . You may opt-out (unsubscribe) of receiving marketing communications by using the links provided in our emails. If you are unable to find the opt-out instructions, please contact us at [email protected] for assistance. 

If you are concerned about Bucketlist Rewards Inc.’s handling of your personal information, you may lodge a complaint in writing to the email address listed below and we will provide a written response to your complaint within a reasonable time (30 days).

[email protected]

You may also complain directly to the Office of the Australian Information Commissioner (OAIC) by:

• Email: [email protected] (be aware that email isn’t encrypted, if you’re concerned about this, use the online form on OAIC’s website which is secure)
• Mail: GPO Box 5218, Sydney NSW 2001 (send it by registered mail if you’re concerned about sending it by standard post)
• Fax: 02 9284 9666