How we collect, use, store and protect your personal data

This Privacy Policy explains how TheBonusBall collects, uses, stores and protects personal data when you use our website, create an account, contact us or enter one of our competitions.

Who we are

TheBonusBall is the operator of thebonusball.co.uk and acts as the data controller for personal data collected through the website and associated competitions.

• Website operator: TheBonusBall.
• Website: thebonusball.co.uk.
• Business address: [INSERT BUSINESS ADDRESS].
• Privacy contact: support@thebonusball.co.uk — use the subject line “Privacy”.

What data we collect

The information we collect depends on how you use the website, whether you make a purchase, enter by post, contact support or create an account.

• Identity and contact information such as name, email address, phone number and postal address.
• Account information including login details, preferences and order history.
• Competition and entry data including selected numbers, entry timestamps and support correspondence.
• Payment-related information processed through third-party payment providers. We do not store full payment card details.
• Technical information such as IP address, browser type, device information, cookies and website log data.

How we use your data

• To create and manage your account and display entry information.
• To administer competitions, record entries and verify results.
• To contact winners and arrange verification, delivery or prize fulfilment.
• To answer support queries, investigate concerns and communicate with you.
• To prevent fraud, protect our website and enforce our Competition Rules.
• To meet legal, regulatory, accounting and dispute-resolution obligations.

Lawful basis for processing

Depending on the activity involved, we rely on one or more lawful bases to process personal data.

• Contract: to provide an account, process entries and arrange prize fulfilment.
• Legal obligation: where record keeping, fraud prevention or dispute handling is required.
• Legitimate interests: for website security, service improvement and preventing misuse.
• Consent: where you have chosen to opt in to marketing emails or optional cookies.

Who we may share data with

We only share data where it is necessary to operate the website, process entries, provide prizes, meet legal obligations or protect the integrity of our competitions.

• Payment processors for secure payment handling.
• Delivery and courier partners for prize fulfilment.
• Website hosting, analytics, email, security and customer support service providers.
• Professional advisers such as legal, accounting or compliance advisers where necessary.
• Authorities or regulators where disclosure is required by law.
• We do not sell your personal data.

International data transfers

Some service providers may process personal data outside the United Kingdom. Where this happens, we aim to use appropriate safeguards designed to protect your information.

How long we keep your data

We keep personal data only for as long as reasonably necessary for the purposes described in this policy, including customer support, competition administration, fraud prevention, auditing, accounting, disputes and legal obligations.

• Competition and order records may be retained for audit and verification purposes.
• You can request deletion of certain data where legally permitted.
• Some information may need to be retained where required for compliance, fraud prevention or dispute resolution.

Your data protection rights

Subject to applicable law, you may have rights in relation to the personal data we hold about you.

• The right to request access to your personal data.
• The right to correct inaccurate or incomplete information.
• The right to request erasure in certain circumstances.
• The right to restrict or object to certain processing.
• The right to data portability in certain situations.
• The right to withdraw consent where processing is based on consent.

Cookies and website technology

We use essential cookies and similar technology to make the website function correctly, including features such as login, shopping cart, checkout, security and website settings.

• Some cookies are necessary for core website functions.
• Analytics cookies may be used to understand website performance where enabled.
• You can manage cookies using your browser settings and any cookie controls displayed on the site.

Security

We use reasonable technical and organisational measures intended to help protect personal data from unauthorised access, loss, misuse or disclosure.

• Access to personal data is restricted to authorised personnel and trusted service providers.
• Payment information is processed through secure third-party payment providers.
• No method of data transmission or storage can be guaranteed completely secure.

Automated decision-making

We do not make decisions about you that have legal or similarly significant effects solely through automated means. Fraud prevention systems may identify unusual activity for review in order to help protect the website and its users.

Contact and complaints

For questions about this Privacy Policy or how your data is handled, contact us at support@thebonusball.co.uk using the subject line “Privacy”.

You may also have the right to make a complaint to the UK Information Commissioner’s Office. We would appreciate the opportunity to help resolve a concern directly first.