Privacy Notice for website users and prize draw entrants
About this document
This privacy notice explains how Win Amazing Limited (“WinAmazing Limited”, “we”, “our”, or “us”) collects, uses and shares the personal data of website users on www.winamazing.co.uk, and entrants who submit postal entries to our prize draws, or otherwise interact with us as detailed further below (the “Site”) (“Users”, “you”, or “your”).
We may amend this privacy notice from time to time. We will notify you of any material changes in this privacy notice by posting an updated copy on the Site. Please check the Site periodically for updates. This page was last updated on 3 September 2023.
Who will process your personal data?
Win Amazing Limited (referred herein as “WinAmazing Limited”) is a private limited company with registered number 14646429 and registered address Create Business Hub, Ground Floor 5 Rayleigh Road, Hutton, Brentwood, Essex, England, CM13 1AB. Our ICO Registration number is: C1350634.
Win Amazing Limited is the ‘data controller’ of your personal data and is subject to the UK General Data Protection Regulation (the “UK GDPR”), the Data Protection Act 2018, the Privacy and Electronic Communications Regulations 2003 and any successor legislation or regulations governing data protection and privacy in the UK.
How we collect your personal data
We may collect your personal data in a number of ways, for example:
- when you communicate with us by post, email, telephone, text message or via the Site, for example when you enter one of our prize draws; and
- through other interactions us.
The types of personal data we collect
We may collect the following types of personal data about Users:
- names and contact details, including home address, email addresses and telephone numbers;
- other information that Users provide through the Site (or via other communication), for example in emails; and
Under the UK GDPR, certain categories of personal information are recognised as sensitive, including health information and information regarding race, religious beliefs and political opinions. We do not seek to collect such “sensitive personal data”.
The basis for processing your personal data and how we use it
We may process your personal data because it is necessary for the performance of a contract with you organisation or in order to take steps at your request prior to entering into such a contract. This includes your entry into one of our prize draws which constitutes a contractual relationship.
We may also process your personal data because it is necessary for our or a third party’s legitimate interests. Our “legitimate interests” include our interests in operating the Site and our services in a focused, efficient and sustainable manner. In this respect, we may use your personal data for the following:
- to assess the information that you provide to us through email, telephone, text message, post or the Site, and to find out more about you and verify your identity, where appropriate;
- to interact with you via email, telephone, text message, post or through the Site (for example, to respond to enquiries or contact you about a prize draw);
- for record keeping purposes, so that we have a record of the enquiries we receive as a result of your use of the Site and/or via other means of communication;
- outsourcing selected website administration functions to third parties for the purposes of the efficient management of the Site; and
- to monitor and evaluate the performance and effectiveness of the Site and our other means of communication, including to administer, support, keep secure or improve the Site and our other means of communication.
We may also process your personal data for our compliance with our legal obligations. In this respect, we may use your personal data for the following:
- to meet our compliance, legal and regulatory obligations, including in order to comply with any requirement of any applicable statute, regulation or regulatory rule to which we are subject;
- for the prevention, detection and investigation of fraud and crime;
- to deal and assist with legal claims, requests and investigations, including those made under data protection law, or requests for formal disclosure by competent authorities; and
- to administer and maintain such records as may be required by applicable laws and regulations from time to time.
We may also process your personal data for additional reasons where:
- it is necessary for reasons of substantial public interest;
- it is necessary for the establishment, exercise or defence of legal claims (for example, to protect and defend our rights, property, or those of any affiliates); and
- we have your specific or, where necessary, explicit consent to do so.
Sharing Users’ personal data with others
For the purposes referred to in this privacy notice and relying on the bases for processing as set out above, we may share your personal data with certain third parties. We may disclose limited personal data to a variety of recipients, including:
- our employees, agents, contractors, where there is a legitimate reason for their receiving the information, including:
- those of our staff and consultants who may provide or offer to provide services to you in response to an enquiry; and
- providers of outsourced services to us (for example, technology partners and any other third party we engage to administer the Site on our behalf).
- internal and external auditors and our legal professional advisors;
- regulatory authorities where we are legally required or authorised to do so by a court, government body, law enforcement agency or other authority of competent jurisdiction; and
- with a third party in a business transaction which involves the transfer of the Site.
Transferring your personal data overseas
Your personal data may be transferred to and processed outside of the UK in countries or territories that do not provide the same level of protection for personal data as the does. Where this happens, we will put in place appropriate measures to ensure the adequate protection of your personal data when it is transferred outside of the UK, as required by the UK GDPR (as applicable). If required, Win Amazing Limited will put in place Standard Contractual Clauses with relevant parties to whom personal data will be transferred.
Win Amazing Limited collects standard internet log information and details of individual User behaviour patterns on the Site through the use of tracking tools, such as browser cookies, including using the third party service provided by Google Analytics. We do this to analyse the performance of the Site, such as the number of visitors and interactions Users have with the various parts of the Site. Further information regarding how Google Analytics use your personal data can be found here: Google Analytics
A cookie is a small file of letters and numbers that we store on your browser or the hard drive of your computer if you agree. Cookies contain information that is transferred to your computer's hard drive.
We use the following cookies:
Strictly necessary cookies. These are cookies that are required for the operation of our website. These essential cookies are always enabled because our website won’t work properly without them. They include, for example, cookies that enable you to log into secure areas of our website, use a shopping cart or make use of e-billing services. You can switch off these cookies in your browser settings but you may then not be able to access all or parts of our website.
Analytical or performance cookies. These allow us to recognise and count the number of visitors and to see how visitors move around our website when they are using it. This helps us to improve the way our website works, for example, by ensuring that users are finding what they are looking for easily.
Functionality cookies. These are used to recognise you when you return to our website. This enables us to personalise our content for you, greet you by name and remember your preferences (for example, your choice of language or region).
Targeting cookies. These cookies record your visit to our website, the pages you have visited and the links you have followed. We will use this information to make our website and the advertising displayed on it more relevant to your interests. We may also share this information with third parties for this purpose so that they can serve you with relevant advertising on their websites.
You can find more information about the individual cookies we use and the purposes for which we use them in the illustration below:
Examples of purposes for which a cookie may be used:
This cookie is essential for our site and enables us to:
(a) Estimate our audience size and understand how our website it used.
(b) Recognise you when you return to our site.
To deactivate the use of third party advertising cookies, you may visit the relevant consumer page to manage the use of these types of cookies
To opt out of being tracked by Google Analytics across all websites, visit http://tools.google.com/dlpage/gaoptout.
You can choose which analytical, functionality and targeting cookies we can set by clicking on the button(s):
Strictly necessary cookies ALWAYS ACTIVE
Analytical or performance cookies OFF
Functionality cookies OFF
Targeting cookies OFF
You can also choose to "Reject All" cookies in the cookie banner.
However, if you use your browser settings to block all cookies (including essential cookies) you may not be able to access all or parts of our website.
How long your personal data is kept
We will only retain your personal data for as long as reasonably necessary to fulfil the purposes we collected it for, including for the purpose of providing our services to you or for the purposes of satisfying any legal, regulatory, tax, accounting or reporting requirements. We may retain your personal data for a longer period in the event of a complaint or if we reasonably believe there is a prospect of litigation in respect to our relationship with you.
To determine the appropriate retention period for personal data, we consider the volume, nature, and sensitivity of the personal data, the potential risk of harm from any unauthorised use or disclosure, the purposes for which we process your personal data, whether we can achieve those purposes through other means, and the applicable legal requirements.
Your rights in relation to your personal data
Under the UK GDPR, you have the following rights in relation to our processing of your personal data:
- to obtain access to, and copies of, the personal data that we hold about you;
- to require us to correct the personal data we hold about you if it is incorrect;
- to require us to erase your personal data, in certain circumstances;
- to require us to restrict our data processing activities, in certain circumstances (and, where our processing is based on your consent, you may withdraw that consent, without affecting the lawfulness of our processing based on consent before its withdrawal);
- to receive from us the personal data we hold about you which you have provided to us, in a reasonable format specified by you, including for the purpose of your transmitting that personal data to another data controller;
- to object, on grounds relating to your particular situation, to any of our particular processing activities where you feel this has a disproportionate impact on your rights; and
- to complain about the processing of your data to the UK data protection regulator – the Information Commissioner’s Office (“ICO”) (www.ico.org.uk). The ICO does however recommend that you first try and resolve the complaint with us.
Please note that the above rights are not absolute, and we may be entitled (or required) to refuse requests where exceptions apply. For example, if we have reason to believe the personal data we hold is accurate or we can show our processing is necessary for a lawful purpose set out in this privacy notice.
If you have any questions about this privacy notice or how we process personal data, or if wish to exercise any of your rights under applicable law, please contact us at email@example.com