Privacy Policy

1. Who we are

Strux Competitions Ltd ("Strux", "we", "us", "our") is the data controller for personal data collected through struxcompetitions.co.uk. We're registered in England & Wales under company number [insert company number], registered office at [insert registered address], and registered with the Information Commissioner's Office under reference [insert ICO registration number].

This policy explains what we collect when you enter a competition, browse the site, or contact us, why we collect it, and the choices and rights you have over it. It should be read alongside our Terms & Conditions.

2. Data we collect

We collect the following, depending on how you interact with us:

Entry details — name, date of birth, email address, phone number and postal address, given when you buy a ticket or use the free postal entry route.
Payment information — handled directly by our payment processor; we receive confirmation that payment succeeded and a reference for it, not your full card details.
Entry & ticket records — which competitions you've entered, your ticket numbers, and draw results.
Prize delivery details — for winners, any additional details needed to deliver a prize (for example, a preferred delivery address or, for vehicle prizes, details needed to arrange collection).
Correspondence — anything you send us by email or through the site, including support requests and free postal entries.
Technical & usage data — IP address, browser and device type, and pages visited, collected automatically via cookies and similar technologies (see section 5).
Marketing preferences — whether you've opted in to hear about future competitions, and which channel you preferred (email, SMS, etc.).

We don't knowingly collect any special category data (such as health information) — please don't include it in free-text fields like postal entries or support emails.

3. How we use your data

To process your entry, allocate a ticket number, and run the draw.
To verify you meet the eligibility rules in our Terms & Conditions — for example, that you're 18 or over.
To contact winners, arrange delivery or handover of a prize, and publish winner announcements (first name and general location only, unless you agree to more).
To take payment and handle refunds, where applicable.
To respond to questions, complaints or free postal entries sent to us.
To keep the site secure, prevent fraud, and enforce our terms — for example, detecting multiple accounts used to exceed a per-person ticket cap.
To send you marketing about future competitions, only where you've opted in — you can withdraw this at any time (see section 9).
To meet our own legal and regulatory obligations, including tax and accounting records.

4. Our legal basis

Under UK GDPR, we rely on:

Contract — processing needed to run the competition you've entered into, and deliver a prize if you win.
Legal obligation — for example, keeping financial records for tax purposes.
Legitimate interests — to prevent fraud, enforce our terms, and improve the site, balanced against your right to privacy.
Consent — for marketing communications and non-essential cookies, which you can withdraw at any time.

5. Cookies

We use a small number of cookies and similar local storage:

Strictly necessary — to keep the site working (for example, remembering that you've dismissed the announcement banner). These can't be switched off, as the site won't function properly without them.
Analytics — to understand how the site is used, so we can improve it. [Insert your analytics provider here, e.g. Google Analytics / Plausible, and link to their privacy policy.]
Marketing — only set with your consent, if you've opted in to marketing and we use a third-party platform to send it.

You can control or delete cookies through your browser settings at any time; blocking non-essential cookies won't stop you entering a competition.

7. International transfers

Some of the providers in section 6 may store or process data outside the UK. Where that happens, we put appropriate safeguards in place — such as the UK's International Data Transfer Addendum or adequacy regulations — to make sure your data stays protected to UK standards.

8. How long we keep it

Entry & ticket records — kept for as long as needed to run the draw, resolve any dispute, and meet our accounting obligations, then deleted or anonymised.
Winner & prize delivery records — kept for [insert retention period, e.g. 7 years] to meet tax, accounting and consumer-protection obligations.
Marketing preferences — kept until you unsubscribe or ask us to delete them.
Free postal entries — securely destroyed once the draw has taken place and the results are confirmed, unless you're the winner.

9. Your rights

Under UK data protection law, you have the right to:

ask what personal data we hold about you, and get a copy of it (access);
ask us to correct inaccurate or incomplete data (rectification);
ask us to delete your data, where we don't have a legal reason to keep it (erasure);
ask us to restrict or stop processing your data in certain circumstances;
ask for your data in a portable format, where we process it based on consent or contract (portability);
object to processing based on our legitimate interests, including for marketing;
withdraw consent at any time, where we rely on consent — this won't affect anything already done based on it;
complain to the UK's data protection regulator (see section 13).

To exercise any of these, contact us using the details in section 13. We'll normally respond within one month.

10. Children

Our competitions are for entrants aged 18 and over, and the site isn't directed at children. We don't knowingly collect personal data from anyone under 18. If you believe a child has given us data, contact us and we'll delete it.

11. Keeping your data secure

We use technical and organisational measures — including encrypted connections, access controls and working only with reputable payment and hosting providers — to protect your data against unauthorised access, loss or misuse. No online system is completely secure, but we review our safeguards regularly.

12. Changes to this policy

We may update this policy from time to time, for example to reflect a new feature or a change in the law. Material changes will be flagged on the site. The "last updated" date at the top of this page shows when it last changed.

13. Contact us & complaints

Questions about this policy, or to exercise any of your rights: draws@struxcompetitions.co.uk.

If you're unhappy with how we've handled your data, you also have the right to complain to the UK's independent regulator, the Information Commissioner's Office (ICO): ico.org.uk/make-a-complaint, or by phone on 0303 123 1113. We'd appreciate the chance to put things right first, so please talk to us before you do.

This page is a starting template, not legal advice — have it checked by a solicitor or DPO familiar with UK GDPR before you rely on it, and fill in the bracketed placeholders above (company details, ICO number, retention periods, cookie/analytics providers) with your real information.