Privacy Policy | Giveawayz

1. Introduction

Giveawayz Ltd ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your personal data when you use the Giveawayz platform ("Platform").

We are the data controller for personal data collected through the Platform. For data collected by competition Organisers through their competition pages, the Organiser is the data controller and we act as a data processor.

2. Data We Collect

Information you provide:

Account details: name, email address
Organisation details: business name, branding, contact information
Purchase information: ticket quantities, competition entries
Payment details: processed securely by Stripe (we do not store card numbers)
Communications: support requests, feedback

Information collected automatically:

Device information: browser type, operating system
Usage data: pages visited, features used, timestamps
Traffic source data: UTM parameters, referral information
IP address and approximate location

3. How We Use Your Data

We use your personal data to:

Provide and maintain the Platform
Process ticket purchases and competition entries
Send transactional emails (order confirmations, winner notifications, draw results)
Send marketing communications (competition launches, ending reminders) — with your consent
Prevent fraud and ensure platform security
Analyse platform usage to improve our services
Comply with legal obligations

4. Legal Basis for Processing

We process your personal data on the following legal bases:

Contract: Processing necessary to perform our contract with you (account management, ticket purchases)
Legitimate interests: Platform security, fraud prevention, analytics
Consent: Marketing communications (you can withdraw consent at any time)
Legal obligation: Tax records, regulatory compliance

5. Data Sharing

We share your personal data with:

Competition Organisers: Your name and email when you enter their competitions
Stripe: Payment processing
Clerk: Authentication services
Resend: Email delivery
Convex: Database hosting

We do not sell your personal data to third parties.

6. Data Retention

We retain your personal data for as long as necessary to provide the Platform and comply with legal obligations. Specifically:

Account data: until you delete your account
Transaction records: 7 years (tax/legal requirements)
Marketing preferences: until you unsubscribe
Analytics data: 26 months

7. Your Rights (GDPR)

Under the UK GDPR, you have the right to:

Access: Request a copy of your personal data
Rectification: Correct inaccurate data
Erasure: Request deletion of your data ("right to be forgotten")
Restriction: Restrict processing of your data
Portability: Receive your data in a machine-readable format
Object: Object to processing based on legitimate interests
Withdraw consent: Withdraw consent for marketing communications at any time

To exercise any of these rights, contact us at privacy@giveawayz.io.

8. Cookies

We use cookies and similar technologies. For full details, please see our Cookie Policy.

9. International Transfers

Your data may be transferred to and processed in countries outside the UK/EEA. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses).

10. Security

We implement appropriate technical and organisational measures to protect your personal data, including encryption in transit (TLS), secure authentication (Clerk), and PCI-compliant payment processing (Stripe).

11. Children

The Platform is not intended for use by anyone under the age of 18. We do not knowingly collect personal data from children.

12. Changes to This Policy

We may update this Privacy Policy from time to time. We will notify you of significant changes via email or a notice on the Platform.

13. Contact & Complaints

For privacy-related enquiries: privacy@giveawayz.io

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.