WinFling home
Menu

Legal

Privacy policy

How we use personal data when you use the Site, enter a prize draw, or ask us to email you.

Last updated: 15 September 2026

Controller: [COMPANY LEGAL NAME] (company number [COMPANY NUMBER]), registered office [REGISTERED OFFICE ADDRESS]. Contact: hello@winfling.co.uk.

What we collect

  • Account and profile details (name, email, password, address, date of birth, phone).
  • Prize draw entries — paid (billing details from Stripe, ticket numbers, amount paid) and postal (name, address, email, date of birth and other details you write on the card).
  • Marketing preferences and records of emails we send you.
  • Technical data needed to run the Site (session cookies, campaign/attribution cookies).

Why we use it

  • Contract / steps to enter a draw: take payment, allocate tickets, run the draw, contact winners, award prizes.
  • Legitimate interests: keep the Site secure, prevent fraud, understand which ads brought you here, improve the Site.
  • Consent: optional marketing emails. You can opt out at any time using the link in those emails or by contacting us.
  • Legal obligation: keep records that a prize was awarded fairly, tax and accounting, respond to regulators.

Who we share it with

Payment processing is handled by Stripe. Transactional and marketing email is sent using Amazon SES. Hosting and database providers process data on our instructions. We do not sell your personal data. We may disclose winner surname and county as described in the Official Rules, or further details to the ASA or another regulator if required.

How long we keep it

We keep entry and winner records for as long as needed to run the draw, deal with queries and meet legal and regulatory requirements, then delete or anonymise them. Account data is kept while your account is open and for a reasonable period afterwards.

Your rights

Under UK GDPR you can ask for access, correction, deletion, restriction, objection, or portability in the usual way, and you can complain to the Information Commissioner’s Office (ico.org.uk). Some rights are limited where we must keep records of a prize draw.

International transfers

Some processors (including Amazon Web Services) may process data outside the UK. Where that happens we use an appropriate safeguard such as the UK addendum to the EU standard contractual clauses.

Cookies are explained in our Cookie Policy.