Privacy Policy

Last updated: June 2025

Who We Are

This Privacy Policy outlines how PrizeRaffle UK ("we" or "the Company") collects, uses, and protects your personal data. Our website is intended for use by individuals 18 years of age or older; it is not directed at children, and we do not knowingly collect data from anyone under 18. By using our website, you agree to the terms of this Privacy Policy.

Personal Data We Collect

When you create an account or participate in our raffles, we collect certain personal information from you. This may include:

• Identity and Contact Data: Your name, email address, postal address, phone number, and age/date of birth (to verify you are 18+). We require an account for all participants, so you will provide an email and other details during registration.
• Payment Data: If you purchase entries, we collect payment details (e.g. card information) via our secure payment providers. We do not store full card numbers on our servers for security.
• Usage Data: Information on how you use our site (pages visited, interactions, etc.), and technical data like IP address and browser type. This helps us improve our services and prevent fraud.
• Entry Information: When you enter a raffle (either by purchasing a ticket or via free postal entry), we log your entry and any answers or choices required for the competition. We may also record correspondence if you contact us.

We collect this information either because you provide it directly (e.g. signup forms, raffle entries) or through automated means (like cookies when you browse the site).

How We Use Your Data

We use personal data to operate and improve the raffle service. Specifically, the data is used to:

• Administer Raffles and Contact Winners: We use your contact details to inform you if you win a prize and arrange delivery. For example, we will email or phone winners to notify them and coordinate prize fulfillment.
• Provide and Improve Services: Your data allows us to create and manage your user account, process your ticket purchases, and display relevant content. We track entries and sales for internal record-keeping (e.g. for tax and legal compliance). We may use usage data and cookies to personalize your experience and improve our website functionality.
• Marketing (with Consent): If you opt in, we will use your email or contact info to send newsletters or future competition announcements. You can unsubscribe from marketing at any time. We do not sell your data to third-party companies. Marketing communications are only sent to those who have given explicit consent, and you can opt out easily via your account settings or the unsubscribe link in emails. Opting out of marketing will not affect transactional communications related to your entries or account.
• Fraud Prevention and Security: We may use personal and technical data to monitor for suspicious activity, enforce our Terms & Conditions, and ensure the integrity of our raffles. This includes verifying eligibility (such as age and identity) to prevent unlawful entries.

Legal Basis (GDPR)

For users in the UK or EU, our processing of personal data is in accordance with the UK Data Protection Act 2018 and the EU General Data Protection Regulation (GDPR). The legal bases we rely on include:

• Performance of a contract (we need your data to provide the raffle service and fulfill prizes)
• Our legitimate interests (e.g. to prevent fraud or improve our services, balanced against your rights)
• Your consent (for optional uses like marketing cookies or newsletters)

We only retain personal data as long as necessary for the purposes above or as required by law. For example, we may retain winner information for auditing and legal obligations.

Cookies and Tracking

Like most websites, we use cookies and similar technologies to enhance your experience. Cookies are small files stored on your browser that help the site remember your preferences and understand how you use our site.

We use cookies to keep you logged in, remember your settings, and gather analytics about site traffic (via Google Analytics). Some cookies are necessary for the site to function (e.g. for the shopping cart), while others are optional. By using our site, you consent to our use of cookies as described. You can manage or block cookies in your browser settings at any time; however, blocking certain cookies may affect site functionality.

For more details, please see our separate Cookie Policy. We also may employ web beacons or similar technologies in emails to know if you open them, helping us improve our communications.

Sharing of Data

We treat your personal data with care and confidentiality. We share data only with trusted third parties as needed to provide our services, for example:

• Payment Processors: If you make a purchase, your payment details are transmitted securely to our payment providers such as PayPal or Stripe. They receive only the information necessary to process the transaction (like your name, order total, and billing info).
• Delivery Partners: If you win a physical prize, we will share your delivery address and contact number with the courier or supplier delivering the prize. This is solely for fulfillment of your prize.
• Service Providers: We may use cloud hosting, email service providers, or analytics tools that process data on our behalf. For instance, our website host or analytics platform may handle usage data. These providers are bound by contracts to protect your information.
• Legal or Compliance: If required by law or legitimate authority request, we might disclose data (for example, to regulators or law enforcement). We may also share data to enforce our Terms or in connection with a corporate transaction (like a merger or asset sale, in which case the new owner must honor this Privacy Policy).

We do not sell or rent your personal information to any third-party for their own marketing. Any sharing is only done as needed to run the raffles or as legally required. If we transfer personal data outside of the UK/EEA (for example, using a US-based service provider), we will ensure an adequate level of protection for your data in line with GDPR requirements (such as standard contractual clauses).

Data Security

We implement appropriate technical and organizational measures to secure your data. This includes encryption of sensitive information, secure servers, and access controls so that only authorized staff can access personal data.

However, no method of transmission over the internet is 100% secure, so we cannot guarantee absolute security. We have procedures to deal with any suspected data breach and will notify users and regulators as required by law in the event of a serious breach.

Your Rights

Under GDPR and other data protection laws, you have several rights regarding your personal data:

• Access and Portability: You may request a copy of the personal data we hold about you (a "subject access request"). We will provide this in a structured, commonly used format. You can also request that we transfer your data to another service where feasible.
• Rectification: If any personal data we have is incorrect or incomplete, you have the right to have it corrected. You can update much of your information through your account settings or by contacting us.
• Erasure: You can request that we delete your personal data if it's no longer necessary for us to retain it, or if you withdraw consent (where applicable) or object to our legitimate interests and we have no overriding reason to keep it. We will comply unless we are required by law or have other lawful grounds to retain the data (for example, we may need to keep certain transaction records for financial reporting).
• Restriction: You have the right to ask us to restrict processing of your data (effectively, to keep but not use it) in certain circumstances – for example, if you contest its accuracy or you have objected to processing and we are evaluating your request.
• Objection: You may object to our processing of your data when we rely on legitimate interest as the basis, if you feel it impacts your rights. The main example is you can object to direct marketing at any time, and we will stop sending you marketing messages. For other objections, we will stop processing unless we have compelling legitimate grounds that override your rights.
• Withdraw Consent: Where we are processing your data based on your consent, you can withdraw that consent at any time (for instance, you can revoke consent to marketing emails or certain cookie use). This will not affect the legality of processing done before you withdrew consent.

To exercise any of these rights, please contact us at the email address provided below. We may need to verify your identity before fulfilling your request. We will respond within the timeframe required by law (generally one month).

Note that these rights are not absolute – for example, we might deny an erasure request if we must keep data to comply with a legal obligation, but we will explain our reasoning in such cases.

Data Retention

We keep your personal data only as long as necessary for the purposes stated. This means we will typically retain your account information while your account is active. If you close your account, we will delete or anonymize your personal data within a reasonable period, except for information we are required to keep for longer (e.g. transaction records for tax/regulatory purposes, which are kept for the statutory retention period).

Entries, winners, and related fulfillment records may be retained for a period (e.g. 6 years) in line with legal requirements and our legitimate interests in record-keeping. We continuously review what data we have and delete or anonymize data that is no longer needed.

International Users

Our raffle platform is based in the United Kingdom. If you are accessing the site from outside the UK, be aware your data will be stored on servers located in the UK (and possibly the EEA). By using our services, international users consent to their data being transferred to and processed in the UK. We will take steps to ensure adequate protection for international data transfers as noted above.

Changes to this Policy

We may update this Privacy Policy from time to time to reflect changes in law or our practices. We will notify users of any significant changes. The date of the latest revision will be indicated at the top of the policy page. It's important that you review the policy periodically. If you continue to use the site after changes, it means you accept the updated policy.

Contact Us

The Company is the "data controller" responsible for your personal information. If you have questions about this Privacy Policy or wish to make a data rights request, you can contact us at:

Email: [email protected]

We will also provide a mailing address and phone number on our website's contact page for privacy inquiries.

Additionally, you have the right to lodge a complaint with the UK Information Commissioner's Office (ICO) or your local supervisory authority if you believe we have violated data protection laws. However, we encourage you to contact us first so we can address your concerns directly.

Your privacy is extremely important to us, and we are committed to protecting your personal data in compliance with GDPR and all relevant laws.