Privacy Policy

1. About Us

Golden Dream Draw is a skill-based prize competition business operated as a sole trader in England and Wales. Our website is located at www.goldendreamdraw.uk.

For the purposes of data protection law, we act as the Data Controller in respect of any personal data we collect from you.

Contact details:
Golden Dream Draw
Email: contact@goldendreamdraw.uk
Website: www.goldendreamdraw.uk

2. What This Policy Covers

This Privacy Policy explains how we collect, use, store and share your personal data when you:

• Visit our website at www.goldendreamdraw.uk
• Register an account with us
• Purchase tickets for any of our competitions
• Contact us or communicate with us by any means
• Subscribe to our marketing communications

Please read this policy carefully. By using our website or services, you acknowledge that you have read and understood how we handle your personal data.

3. What Personal Data We Collect

3.1 Account Registration and Ticket Purchases

• Full name
• Email address
• Phone number
• Date of birth (to verify that you are aged 18 or over)
• Billing and delivery address
• Payment details (processed securely by Cashflows; we do not store full card details)
• Competition entries and ticket numbers

3.2 Website Usage Data

• IP address
• Browser type and version
• Device type and operating system
• Pages viewed and time spent on site
• Referring website or link
• Cookie data (see Section 9)

3.3 Communications

• Records of emails, enquiries or messages you send us
• Responses to any surveys or feedback forms

3.4 Marketing

• Your marketing preferences and consent
• Engagement data from marketing emails (e.g. opens and clicks)

4. How We Use Your Personal Data

We use your personal data for the following purposes:

• To create and manage your account on our website
• To process your ticket purchases and competition entries
• To verify your age and eligibility to enter our competitions (must be 18+, UK residents only)
• To administer competitions, select winners and coordinate prize delivery
• To process payments securely via Cashflows
• To send you order confirmations, ticket numbers and competition updates
• To respond to your enquiries and provide customer support
• To publish winners' first name and first initial of surname on our website and social media (as required by our competition rules)
• To send you marketing communications if you have opted in to receive them
• To comply with our legal and regulatory obligations
• To prevent fraud and ensure the security of our website
• To improve our website, products and services through analytics

5. Legal Basis for Processing

We rely on the following legal bases under UK GDPR to process your personal data:

Contract: Processing is necessary to fulfil our contract with you (e.g. processing your ticket purchase and running the competition).

Legal Obligation: Where we are required to process your data to comply with a legal obligation (e.g. financial record-keeping, age verification).

Legitimate Interests: Where processing is in our legitimate interests, for example to detect and prevent fraud, improve our services and manage the security of our website.

Consent: Where you have given us explicit consent, for example to send you marketing emails. You may withdraw this consent at any time.

6. Sharing Your Personal Data

We do not sell or rent your personal data to any third party. We will only share your data in the following limited circumstances:

• Cashflows: Our payment processor. Cashflows processes your payment securely. Please see Cashflows' privacy policy.
• Hosting & IT providers: We use Vercel to host our website. They act as a data processor on our behalf and are bound by appropriate data protection agreements.
• Email marketing: We may use an email service provider to manage marketing communications. They process data only on our instruction.
• Meta Platforms (Facebook/Instagram): We use Meta Pixel on our website for advertising purposes. Meta may process data in accordance with their own privacy policy.
• Legal requirements: We may disclose your information where required to do so by law, or where we reasonably believe such disclosure is necessary to protect our rights, protect your safety, or investigate fraud.

All third parties who process personal data on our behalf are required to keep your data secure and to use it only for the specified purposes.

7. International Transfers

Some of our third-party service providers may be based or process data outside of the UK or European Economic Area (EEA). Where this occurs, we ensure that appropriate safeguards are in place, such as the use of Standard Contractual Clauses approved by the ICO, to ensure your data remains protected to the same standards as required under UK GDPR.

8. Data Retention

We will only keep your personal data for as long as is necessary to fulfil the purposes for which it was collected, including to satisfy any legal, accounting or reporting requirements.

• Account data: retained for as long as you maintain an active account with us, plus a reasonable period thereafter
• Transaction and competition records: retained for 7 years to comply with HMRC financial record-keeping requirements
• Marketing consent records: retained until you withdraw consent, plus 1 year thereafter
• Website analytics data: retained for up to 26 months

When your data is no longer required, it will be securely deleted or anonymised.

9. Cookies

Our website uses cookies — small text files placed on your device — to improve your browsing experience and to enable us to analyse site usage and deliver relevant advertising.

We use the following types of cookies:

• Essential cookies: necessary for the website to function (e.g. maintaining your login session and shopping basket)
• Analytics cookies: to understand how visitors use our site
• Advertising/tracking cookies: including the Meta Pixel, to measure the effectiveness of our adverts and show relevant ads on Facebook and Instagram

You can manage or disable cookies through your browser settings at any time. Please note that disabling certain cookies may affect the functionality of our website. A full cookie policy and consent mechanism is available on our website.

10. Your Rights

Under UK GDPR, you have the following rights in respect of your personal data:

• Right of Access: You may request a copy of the personal data we hold about you (a Subject Access Request).
• Right to Rectification: You may ask us to correct any inaccurate or incomplete personal data.
• Right to Erasure: You may ask us to delete your personal data where it is no longer necessary for the purposes for which it was collected, subject to certain legal exceptions.
• Right to Restriction: You may ask us to restrict the processing of your data in certain circumstances.
• Right to Data Portability: You have the right to receive your personal data in a structured, commonly used and machine-readable format.
• Right to Object: You may object to the processing of your data where we rely on legitimate interests as our legal basis.
• Right to Withdraw Consent: Where we process your data on the basis of consent, you may withdraw that consent at any time. Withdrawal does not affect the lawfulness of processing prior to withdrawal.

To exercise any of these rights, please contact us at contact@goldendreamdraw.uk. We will respond to your request within one calendar month. We may need to verify your identity before processing your request.

11. Marketing Communications

We will only send you marketing emails, SMS messages or other promotional communications if you have given us your explicit consent to do so.

You can opt out of receiving marketing communications at any time by:

• Clicking the 'Unsubscribe' link at the bottom of any marketing email
• Contacting us at contact@goldendreamdraw.uk and requesting to be removed
• Updating your preferences in your account settings on our website

Please note that even if you opt out of marketing, we may still send you transactional or service-related messages such as order confirmations, ticket receipts and competition updates.

12. Children

Our competitions are strictly open to persons aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we may have inadvertently collected data from a minor, please contact us immediately at contact@goldendreamdraw.uk and we will delete the data without delay.

13. Security

We take the security of your personal data seriously and have implemented appropriate technical and organisational measures to protect it against unauthorised access, loss, destruction or alteration. These include:

• SSL/TLS encryption across our website (HTTPS)
• Secure payment processing via Cashflows (PCI DSS compliant)
• Access controls to restrict who within our business can access your data
• Regular review of our security practices

While we take all reasonable steps to protect your personal data, no method of data transmission over the internet is completely secure. If you have any concerns about data security, please contact us at contact@goldendreamdraw.uk.

14. Links to Other Websites

Our website may contain links to third-party websites. This Privacy Policy does not apply to those websites. We encourage you to read the privacy policies of any external sites you visit. We are not responsible for the privacy practices or content of third-party websites.

15. Changes to This Policy

We may update this Privacy Policy from time to time to reflect changes in our practices, technology or legal obligations. We will post the updated policy on this page with the revised 'Last updated' date. We encourage you to review this policy periodically. Where changes are significant, we will take reasonable steps to notify you directly.

16. Complaints

If you are unhappy with how we have handled your personal data, we ask that you contact us in the first instance so that we can try to resolve the matter:

Email: contact@goldendreamdraw.uk

If you remain unsatisfied, you have the right to lodge a complaint with the UK's supervisory authority for data protection:

Information Commissioner's Office (ICO)
Website: www.ico.org.uk
Telephone: 0303 123 1113
Address: Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF