Privacy Policy

The data controller is Choose You Raffles, registered in England and Wales. Our registered address is available on request.

If you have any questions about this policy or how we handle your data, please contact us via our website.

We collect the following categories of personal data:

• Identity data: first name, last name, date of birth.
• Contact data: email address, telephone number, postal address.
• Transaction data: ticket purchases, competition entries, payment records (we do not store full card details).
• Technical data: IP address, browser type, device type, pages visited, referring URL, session duration.
• Profile data: account preferences, marketing preferences, competition entry history.
• Communications data: records of correspondence with our support team.

We do not collect any special category data (such as health, religious, or political data) and do not knowingly collect data from persons under the age of 18.

We use your personal data for the following purposes:

• To register and manage your account.
• To process competition entries and allocate ticket numbers.
• To conduct prize draws and notify winners.
• To fulfil prizes and verify winner eligibility.
• To communicate with you about your entries and account.
• To send you marketing communications where you have given consent.
• To improve our website, detect fraud, and ensure platform security.
• To comply with our legal and regulatory obligations.

We rely on the following legal bases to process your personal data:

• Contract: processing necessary to enter into and perform our competition terms with you.
• Legitimate interests: fraud prevention, platform security, analytics, and service improvement.
• Legal obligation: compliance with applicable laws and regulations.
• Consent: marketing communications (you may withdraw consent at any time).

We do not sell your personal data. We may share your data with:

• Payment processors: to process ticket purchases securely (e.g. Stripe). These processors are PCI-DSS compliant and act as data processors under our instruction.
• Prize fulfilment partners: where required to deliver physical prizes (e.g. vehicle dealers, courier services).
• Legal and regulatory authorities: where required by law.
• IT and hosting providers: who provide the infrastructure on which our platform operates, under data processing agreements.

All third parties are required to handle your data in accordance with UK GDPR and our instructions. We do not transfer your data outside the UK or EEA without appropriate safeguards in place.

We retain your personal data only for as long as necessary for the purposes for which it was collected, or as required by law. Specifically:

• Account data is retained for the lifetime of your account and for 6 years following account closure for legal and accounting purposes.
• Transaction and entry records are retained for 6 years from the date of the relevant competition.
• Marketing preferences are retained until you withdraw consent or close your account.

When data is no longer required, it is securely deleted or anonymised.

Under UK GDPR, you have the following rights regarding your personal data:

• Right of access: to request a copy of the personal data we hold about you.
• Right to rectification: to request correction of inaccurate or incomplete data.
• Right to erasure: to request deletion of your data in certain circumstances.
• Right to restrict processing: to ask us to limit how we use your data in certain circumstances.
• Right to data portability: to receive your data in a structured, machine-readable format.
• Right to object: to object to processing based on legitimate interests or for direct marketing.
• Right to withdraw consent: at any time where processing is based on consent, without affecting the lawfulness of prior processing.

To exercise any of these rights, please contact us via our website. We will respond within one calendar month.

We use cookies and similar technologies on our website. For full details of the cookies we use and your choices, please see our Cookie Policy.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These include encryption in transit (TLS), access controls, and regular security reviews.

No transmission of data over the internet is completely secure. While we take all reasonable steps to protect your data, we cannot guarantee the security of data transmitted to our site.

We may update this Privacy Policy from time to time. Where changes are material, we will notify you by email or by a prominent notice on our website. The date at the top of this policy reflects when it was last updated.

If you have any concerns about how we handle your personal data, please contact us in the first instance via our website.

If you remain dissatisfied, you have the right to lodge a complaint with the Information Commissioner’s Office (ICO), the UK’s data protection supervisory authority, at ico.org.uk or by calling 0303 123 1113.