Privacy Policy

Last updated: 22 March 2026

1. Introduction

Lusto (ABN: 88 382 970 035) ("we", "us", "our") operates BigMilk(the "Platform"). We are committed to protecting the privacy and security of your personal information.

This Privacy Policy explains how we collect, use, disclose, and protect your personal information when you use our Platform. By using our Platform, you consent to the practices described in this policy.

We are bound by the Australian Privacy Principles (APPs) contained in the Privacy Act 1988 (Cth).

2. Information We Collect

2.1 Account Information

When you create an account, we collect:

  • Email address
  • Password (stored as a secure hash, never in plain text)
  • Phone number (for verification purposes)

2.2 Profile Information

If you create an escort profile, we collect:

  • Display name
  • Profile description and biography
  • Photos and videos you upload
  • Service locations (suburb, state)
  • Rates and services offered
  • Physical attributes (age, height, etc.)
  • Contact preferences

2.3 Payment Information

We use Stripe as our payment processor. When you make a purchase:

  • Your payment card details are collected and processed directly by Stripe
  • We do not store your full credit card number on our servers
  • We receive and store transaction records including amount, date, and Stripe transaction IDs

2.4 Usage Data

We automatically collect information about how you use our Platform, including:

  • Pages visited and features used
  • Time spent on the Platform
  • Device type and browser information
  • IP address and approximate location
  • Referring website

We use PostHog for analytics to understand how users interact with our Platform and improve our services.

2.5 Cookies and Session Data

We use cookies and similar technologies to:

  • Keep you logged in to your account
  • Remember your preferences (e.g., age gate confirmation)
  • Collect analytics data
  • Ensure security and prevent fraud

3. How We Use Your Information

We use your personal information to:

  • Provide and operate the Platform
  • Process your account registration and authentication
  • Display your profile to potential clients (for escorts)
  • Process payments and maintain transaction records
  • Communicate with you about your account and services
  • Send important notices and updates
  • Respond to your inquiries and support requests
  • Improve and optimize our Platform
  • Detect and prevent fraud, abuse, and security issues
  • Comply with legal obligations

4. Information Sharing

We do not sell your personal information. We may share your information with:

4.1 Service Providers

  • Stripe: Payment processing
  • PostHog: Analytics and user behavior tracking
  • Cloud hosting providers: Data storage and Platform infrastructure

4.2 Legal Requirements

We may disclose your information when required by law, such as:

  • In response to valid legal process (court orders, subpoenas)
  • To comply with applicable laws and regulations
  • To protect our rights, privacy, safety, or property
  • To investigate potential violations of our Terms of Service

4.3 Public Profile Information

If you create an escort profile, the information you include in your profile (name, photos, description, rates, etc.) will be publicly visible to all users of the Platform.

5. Data Retention

We retain your personal information for as long as necessary to:

  • Provide our services to you
  • Comply with legal obligations
  • Resolve disputes and enforce our agreements

Account Data: If you delete your account, we will delete your profile information within a reasonable timeframe. However, we may retain certain information as required by law.

Transaction Records: We are required to retain financial transaction records for a minimum of 7 years for tax and legal compliance purposes. This includes purchase history, payment amounts, and transaction dates, but not your payment card details.

6. Your Rights

Under Australian privacy law, you have the right to:

  • Access: Request a copy of the personal information we hold about you
  • Correction: Request correction of inaccurate or incomplete information
  • Deletion: Request deletion of your personal information (subject to legal retention requirements)
  • Complaint: Lodge a complaint with us or the Office of the Australian Information Commissioner (OAIC)

To exercise these rights, please contact us using the details provided below. We may need to verify your identity before processing your request.

Note: While we can delete your profile and account data, we must retain transaction records as required by law. These records will be kept secure and only used for legal and tax compliance purposes.

7. Data Security

We take reasonable steps to protect your personal information from unauthorized access, use, or disclosure. Our security measures include:

  • Encryption of data in transit (HTTPS/TLS)
  • Secure password hashing
  • Access controls and authentication
  • Regular security assessments
  • Secure cloud infrastructure

However, no method of transmission over the Internet or electronic storage is 100% secure. We cannot guarantee absolute security of your data.

8. Cookies

Our Platform uses cookies and similar technologies. By using our Platform, you consent to our use of cookies as described in this policy.

Types of cookies we use:

  • Essential cookies: Required for the Platform to function (login sessions, security)
  • Preference cookies: Remember your settings and choices
  • Analytics cookies: Help us understand how you use the Platform (PostHog)

You can control cookies through your browser settings. Note that disabling certain cookies may affect the functionality of the Platform.

9. Third-Party Links

Our Platform may contain links to third-party websites. We are not responsible for the privacy practices or content of these external sites. We encourage you to review the privacy policies of any third-party sites you visit.

10. Children's Privacy

Our Platform is strictly for adults aged 18 years and over. We do not knowingly collect or solicit personal information from anyone under 18. If we learn that we have collected personal information from a minor, we will delete it immediately.

If you believe we have inadvertently collected information from a minor, please contact us immediately.

11. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of material changes by posting the updated policy on the Platform and updating the "Last updated" date.

Your continued use of the Platform after changes are posted constitutes your acceptance of the updated policy.

12. Australian Privacy Principles Compliance

We are committed to complying with the Australian Privacy Principles (APPs) under the Privacy Act 1988 (Cth). This includes:

  • Collecting personal information only when necessary and by lawful means
  • Notifying you about the collection of personal information
  • Using and disclosing personal information only for the purposes for which it was collected
  • Taking reasonable steps to ensure personal information is accurate and up-to-date
  • Protecting personal information from misuse, interference, and unauthorized access
  • Providing access to and correction of personal information on request

13. Contact Information

If you have any questions about this Privacy Policy or wish to exercise your privacy rights, please contact us at:

Email: contact@lusto.au
Lusto
ABN: 88 382 970 035

If you are not satisfied with our response to your privacy concerns, you may lodge a complaint with the Office of the Australian Information Commissioner (OAIC) at www.oaic.gov.au.