Privacy Policy

The data controller is Frontier Draws ("we", "us", "our"). For any data-related queries, contact us through the Platform.

We are registered as a data controller with the Information Commissioner's Office (ICO) as required by UK law.

We collect the following categories of personal data when you use our Platform or enter a Competition:

• Identity data: full name
• Contact data: email address, telephone number, postal address (for postal entries)
• Financial data: payment card details (processed securely by our payment provider — we never store full card details)
• Transaction data: details of competitions entered, ticket quantities, amounts paid, payment references
• Technical data: IP address, browser type and version, time zone, operating system, device information
• Usage data: information about how you use our website and Platform
• Marketing preferences: your preferences in receiving marketing communications from us

Direct interactions: when you register, enter a Competition, make a payment, contact us, or subscribe to marketing.

Automated technologies: cookies and similar tracking technologies as you browse our Platform. See our Cookie Policy for details.

Third parties: payment processors and analytics providers may share data with us in accordance with their own privacy policies.

We use your personal data for the following purposes and legal bases:

We will only send you marketing emails if you have opted in to receive them. You can withdraw your consent at any time by clicking "unsubscribe" in any marketing email or by contacting us directly.

We will never sell your personal data to third parties for marketing purposes.

We may share your personal data with:

• Payment processors (e.g., Stripe) to process transactions securely
• Courier/logistics providers to deliver Prizes to winners
• IT service providers who host or maintain our Platform
• Analytics providers to help us understand how our Platform is used
• Regulatory authorities or law enforcement where required by law

All third parties are required to handle your data securely and in accordance with applicable data protection law.

Where we transfer your personal data outside the UK or European Economic Area (EEA), we ensure appropriate safeguards are in place, such as Standard Contractual Clauses approved by the ICO, to protect your data to the same standard as required under UK GDPR.

We retain your personal data only for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting, or reporting requirements.

• Competition entry records: 7 years (financial record-keeping obligations)
• Winner records: 3 years after the draw date
• Marketing preferences: until you withdraw consent
• Technical/usage data: 26 months

Under UK GDPR you have the following rights regarding your personal data:

• Right of access — request a copy of the personal data we hold about you
• Right to rectification — request correction of inaccurate or incomplete data
• Right to erasure — request deletion of your data in certain circumstances ("right to be forgotten")
• Right to restrict processing — request we limit how we use your data
• Right to data portability — request a machine-readable copy of your data
• Right to object — object to processing based on legitimate interests or for direct marketing
• Right to withdraw consent — where processing is based on consent, withdraw it at any time

To exercise any of these rights, contact us via the Platform. We will respond within one month. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk or by calling 0303 123 1113.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, alteration, or disclosure. These include encrypted connections (HTTPS), access controls, and secure third-party payment processing.

Despite our precautions, no data transmission over the internet is 100% secure. In the event of a data breach that poses a risk to your rights, we will notify you and the ICO as required by law.

Our Platform and Competitions are strictly for persons aged 18 and over. We do not knowingly collect personal data from anyone under the age of 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. We encourage you to review this page periodically.