This policy explains how Grand Draws collects and uses your personal data when you use our site and enter competitions. We are the data controller.
We are registered with the UK Information Commissioner's Office (ICO). Our ICO registration number and registered company address will be published here once company registration is complete. You can reach us about your data at hello@granddraws.co.uk.
What we collect
- Account and entry details: name, date of birth, email, phone, address.
- Entry and order history, including tickets and skill-question answers.
- Payment confirmation from our payment processor (we do not store full card numbers).
- Technical data: device, browser and analytics data (see cookies).
Why we use it (lawful basis)
- To administer competitions, allocate tickets and run draws, performance of a contract.
- To verify age and identity and prevent fraud, legal obligation and legitimate interests.
- To contact winners and provide support, contract and legitimate interests.
- To send marketing where you have opted in, consent, which you can withdraw at any time.
Who we share it with
We share data only with the providers needed to run the service, for example our payment processor, email provider, and hosting/database provider, and with authorities where legally required. We never sell your data. The current list is on our sub-processors page.
Cookies
We use essential cookies to run the site and, with your consent, analytics cookies to understand usage. You can manage your preferences via the cookie banner.
Retention
We keep your data only as long as needed for the purpose it was collected:
- Entry and financial records: 6 years after the competition or transaction, to meet HMRC and consumer-law obligations.
- Account data: while your account is open, then up to 12 months after you close it, unless the law requires longer.
- Marketing data: until you unsubscribe or withdraw consent, after which we suppress your details so we do not contact you again.
- Analytics data: up to 14 months, then deleted or anonymised.
When a retention period ends we delete or anonymise the data.
Your rights
You have the right to access, correct, delete or restrict the use of your data, and to complain to the Information Commissioner’s Office (ICO). To exercise any right, contact hello@granddraws.co.uk.
Draft wording. Before launch this will carry our ICO registration number and registered company address, and be reviewed by a solicitor for UK GDPR/ICO compliance.