1) Who we are (Data Controller)

• Website operator / controller: TheBonusBall (“we”, “us”, “our”).
• Website: thebonusball.co.uk.
• Registered/business address: [INSERT BUSINESS ADDRESS].
• Privacy contact email: support@thebonusball.co.uk (Subject: “Privacy”).

2) What data we collect

• Identity & contact data (name, email, phone number, postal address).
• Account data (username, login, preferences).
• Order/entry data (competition entered, ticket number(s), timestamps, correspondence).
• Payment data (processed by third-party providers — we do not store full card details).
• Technical data (IP address, browser, device info, cookies, log data).

3) How we use your data

• To administer competitions, record entries, and show entry history in your account.
• To contact winners and arrange verification and prize fulfilment.
• To provide customer support and respond to enquiries.
• To prevent fraud, protect the website, and enforce our terms.
• To meet legal obligations (e.g., record keeping, compliance, disputes).

4) Lawful basis for processing

• Contract: to provide services you request (account, entry processing, prize fulfilment).
• Legal obligation: record keeping, dispute handling, fraud prevention where required.
• Legitimate interests: website security, service improvement, fraud detection.
• Consent: where you have explicitly opted in (e.g., marketing cookies or emails, if used).

5) Sharing your data

• Payment processors (e.g., Stripe) for secure payment handling.
• Delivery/courier partners for prize fulfilment.
• Service providers that support our website and operations (hosting, analytics, email sending, customer support tools).
• Professional advisers (legal/accounting) where necessary.
• Authorities/regulators where required by law.
• We never sell your personal data.

6) International transfers

• Some service providers may process data outside the UK.
• Where this happens, we use appropriate safeguards (such as approved contractual clauses) to protect your data.

7) Data retention

• We keep personal data only for as long as necessary for the purposes described in this policy.
• Competition and order records may be retained for auditing, dispute handling, and legal obligations.
• You can request deletion where legally permitted (some data must be retained for compliance).

8) Your rights

• Right of access to your personal data.
• Right to rectify inaccurate data.
• Right to erasure (where applicable).
• Right to restrict processing.
• Right to object to processing (including certain legitimate interest processing).
• Right to data portability (in certain circumstances).
• Right to withdraw consent (where processing is based on consent).

9) Cookies

• We use cookies to ensure the website functions correctly (e.g., login, cart, security).
• We may use analytics cookies to understand site performance (where enabled).
• You can control cookies in your browser settings and/or through any cookie banner provided.

10) Security

• We use appropriate technical and organisational measures to protect your data.
• Access is restricted to authorised personnel and trusted suppliers.
• No method of transmission is 100% secure, but we work hard to protect your information.

11) Automated decision-making

• We do not make decisions about you that have legal or similarly significant effects solely by automated means.
• Fraud prevention systems may flag activity for review to protect the website and participants.

12) Contact & complaints

• Questions about this policy: email support@thebonusball.co.uk (Subject: “Privacy”).
• You can also use our Contact page.
• You have the right to lodge a complaint with the UK Information Commissioner’s Office (ICO).

Ready to enter?

If you’re happy with how we handle your data, you can enter a live competition below.