Privacy Policy

Information we collect

Account data: name, email address, hashed password (if credentials login enabled), and verification status.

Competition data: the draws you enter, number of tickets purchased, and payment confirmations.

Verification data: identity documents or proof-of-address supplied for AML checks when you win a prize.

Usage data: IP address, device/browser details, and activity logs captured by our infrastructure provider (Vercel).

Analytics data: page views, clicks, scroll depth, and session replays captured through Microsoft Clarity. Clarity automatically masks form inputs marked as sensitive and recordings skip secure flows such as checkout or authentication steps.

How we use your information

Operate your account, process payments, and deliver competition entries.

Contact you about results, prize fulfilment, or material changes to our service.

Meet legal and regulatory obligations, including anti-money-laundering checks and record keeping.

Send transactional notifications (e.g., receipts). Marketing emails are opt-in and can be unsubscribed at any time.

Understand how visitors navigate public pages so we can improve draw listings and ensure key compliance information remains visible. We use aggregated analytics and heatmaps for this purpose.

Legal bases

Contract: processing entries, delivering prizes, and managing your account.

Legal obligation: maintaining AML/KYC records, responding to lawful requests.

Legitimate interests: fraud prevention, service analytics (including Microsoft Clarity), and keeping the platform secure.

Consent: optional marketing emails and cookies (where applicable).

Who we share data with

PCI-compliant payment processors and acquiring banks so we can accept card payments.

Our transactional email provider to deliver receipts, verification links, and draw updates.

Trusted hosting and database partners who store the platform in secure UK/EU data centres.

Identity- and AML-check partners when we need to verify a winner before releasing a prize.

We never sell personal data and only share what is necessary to deliver the service.

Analytics & session recordings

We use Vercel Analytics (aggregate performance metrics) and Microsoft Clarity (session recordings, click heatmaps, rage-click detection) on our public marketing pages.

Clarity helps us see which draws or CTAs get attention so we can improve the experience, but we mask text inputs using `data-clarity-mask="true"` and avoid capturing passwords, payment details, or other sensitive entry forms.

You can opt out by declining analytics cookies (where presented) or by using common tracker-blocking tools. Set your browser’s “Do Not Track” signal if you prefer not to be included in aggregated analytics.

Retention

Account data is kept while you maintain an account and for up to six years afterwards to meet legal obligations.

Postal entries and verification documents are retained for the minimum period required by UK law and then securely deleted.

Your rights

You can request access, correction, deletion, or restriction of your personal data. You can also object to certain processing or request a copy in a portable format.

To exercise any right, email [email protected]. We will respond within 30 days.

International transfers

Some partners (e.g., Resend) may process data outside the UK/EEA. We ensure appropriate safeguards such as Standard Contractual Clauses are in place.

Updates to this policy

We review this policy at least annually. Material changes will be announced in-app or by email.

Contact

For privacy questions or complaints, email [email protected] or write to us using the postal address available on request. You can also contact the UK ICO if you are unhappy with our response.