🔐 Privacy Policy

Last Updated Mon 23 Mar 15:31

1. Introduction

This Privacy Policy explains how PrizeRunner Limited (“we”, “us”, “our”) collects, uses, stores and protects personal data when you access or use PrizeRunner.com and any associated applications or services (the “Services”).

We process personal data in accordance with applicable data protection legislation, including the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Data Controller

PrizeRunner Limited is the data controller in respect of personal data processed under this Privacy Policy.

Company number: 17091802

Registered office:
167–169 Great Portland Street, 5th Floor, London, W1W 5PF

Correspondence address:
Suite 165069, PO Box 7169, Poole, BH15 9EL

Email: legal@prizerunner.com

3. Scope and Eligibility

The Services are intended for:

• individuals aged 18 years or over; and
• residents of the United Kingdom

We do not knowingly collect personal data from individuals under the age of 18. If we become aware that such data has been collected, it will be deleted without undue delay.

4. Categories of Personal Data

4.1 Data Provided by You

When creating an account:

• full name
• email address
• confirmation of age (18+) and UK residency

When claiming a prize (where applicable):

• postal address
• telephone number
• date of birth
• proof of identity
• proof of UK residency
• bank account details (for cash prize payments)

When corresponding with us:

• any personal data included in communications

4.2 Data Collected Automatically

When you use the Services, we may automatically collect:

• IP address
• device type, operating system and browser information
• usage data (including pages visited, actions taken and session duration)
• competition participation and transaction history

4.3 Payment Data

All payments are processed by Stripe as an independent payment processor.

• We do not store or have access to full payment card details
• Stripe processes payments, including recurring billing, in accordance with its own privacy policy

5. Purposes of Processing

We process personal data for the following purposes:

• to create and administer user accounts
• to process competition entries (including postal and online entries)
• to conduct draws and allocate outcomes
• to contact winners and arrange prize fulfilment
• to verify identity, eligibility and compliance with the Terms
• to detect, prevent and investigate fraud or misuse
• to provide customer support
• to send service-related communications
• to send marketing communications (where consent has been provided)
• to monitor, analyse and improve the performance and functionality of the Services
• to comply with legal and regulatory obligations

6. Lawful Bases for Processing

We rely on the following lawful bases under UK GDPR:

• Performance of a contract (Article 6(1)(b))

• to provide access to the Services and administer competitions

• Compliance with a legal obligation (Article 6(1)(c))

• to meet regulatory, tax, and legal requirements

• Legitimate interests (Article 6(1)(f))

• to operate and improve the Services
• to ensure fair and proper administration of competitions
• to prevent fraud, abuse or misuse
• to maintain system security

• Consent (Article 6(1)(a))

• to send marketing communications
• to use non-essential cookies and analytics tools (as set out in the Cookie Policy)

Where processing is based on consent, you may withdraw consent at any time.

7. Marketing

We will only send direct marketing communications where you have provided explicit consent.

You may withdraw consent at any time by:

• using the unsubscribe link in any marketing email; or
• updating your preferences within your account

Withdrawal of consent does not affect the lawfulness of processing prior to withdrawal.

We may continue to send non-marketing communications necessary for the provision of the Services.

8. Disclosure of Personal Data

We may disclose personal data to the following categories of recipients where necessary:

• Payment processors (e.g. Stripe)
• Cloud hosting and infrastructure providers (e.g. AWS)
• Email and communications service providers
• Prize suppliers and fulfilment partners
• Professional advisers, including legal, accounting and insurance providers
• Regulators, law enforcement agencies or courts, where required by law

We do not sell personal data and do not disclose personal data to third parties for independent marketing purposes.

9. International Transfers

Personal data may be transferred to, and processed in, countries outside the United Kingdom.

Where such transfers occur, we ensure appropriate safeguards are in place, including:

• reliance on UK adequacy regulations; or
• the use of approved standard contractual clauses

to ensure that personal data is protected to an equivalent standard.

10. Data Retention

We retain personal data only for as long as necessary for the purposes for which it was collected, including to satisfy legal, regulatory, accounting or reporting requirements.

Indicative retention periods:

• Account data – retained for the duration of the account and up to 6 years after closure
• Transaction and competition records – retained for up to 6 years
• Winner verification data – retained for up to 6 years following prize fulfilment
• Customer support communications – retained for up to 2 years
• Marketing records – retained until consent is withdrawn, with suppression data retained thereafter

Retention periods may be extended where required by law or for the establishment, exercise or defence of legal claims.

11. Winners and Publicity

In accordance with our Terms:

• we may publish the full name of major prize winners to demonstrate that a genuine award has taken place
• entrants may object to such publication before the relevant Closing Date

Where additional promotional content is used (such as photographs, videos or testimonials), this will be subject to the entrant’s consent.

12. Data Subject Rights

Under applicable data protection law, you have the following rights:

• the right to access your personal data
• the right to rectification of inaccurate or incomplete data
• the right to erasure (“right to be forgotten”)
• the right to restrict processing
• the right to object to processing based on legitimate interests
• the right to data portability
• the right to withdraw consent at any time

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO).

Requests should be submitted to:
legal@prizerunner.com

13. Security Measures

We implement appropriate technical and organisational measures to safeguard personal data, including:

• access controls and authentication procedures
• secure hosting environments
• encryption where appropriate

Despite these measures, no system can be guaranteed to be completely secure.

14. Third-Party Websites

The Services may contain links to third-party websites. We are not responsible for the content or privacy practices of such websites.

15. Changes to This Policy

We may amend this Privacy Policy from time to time. The most current version will be made available on the website.

16. Contact

For any questions regarding this Privacy Policy or our data practices, please contact:

PrizeRunner Limited
Suite 165069, PO Box 7169, Poole, BH15 9EL
Email: legal@prizerunner.com