Privacy Policy

1. Who we are

IGP Group LTD is the data controller responsible for your personal information. You can contact our data protection lead at privacy@igpgroup.co.uk.

2. What we collect

• Identity data - name, date of birth, gender (optional).
• Contact data - email, phone number, postal address.
• Account data - username, hashed password, marketing preferences.
• Transaction data - entries purchased, prizes won, payment confirmation tokens (we never see your full card number).
• Technical data - IP address, device, browser type, pages visited.

3. How we use it

• To register your entries and pick winners.
• To deliver prizes and provide customer support.
• To comply with our legal and regulatory obligations.
• To send service emails (entry receipts, draw notifications, winner notifications).
• To send marketing emails - only where you have opted in and only until you opt out.
• To detect and prevent fraud and abuse of our platform.

4. Legal bases

We process your data under one or more of the following legal bases: performance of a contract (when you enter a competition), legal obligation (record-keeping, tax, anti-fraud), legitimate interest (running and improving our service) and consent (marketing emails and non-essential cookies).

5. Who we share it with

• Our payment provider, to process transactions.
• Our email and SMS providers, to send service messages.
• Our hosting and analytics providers, to operate this website.
• Couriers and fulfilment partners, to deliver prizes.
• Authorities, where required by law.

We never sell your personal data.

6. How long we keep it

We keep your account data for as long as your account is open, and transaction records for 7 years after your last entry, to meet UK tax and accounting obligations. Marketing data is deleted within 30 days of you opting out.

7. Your rights

You have the right to access, correct, delete or restrict our use of your personal data, the right to data portability, and the right to object to processing. To exercise any of these rights email privacy@igpgroup.co.uk. If you are not happy with our response, you can complain to the Information Commissioner's Office at ico.org.uk.

8. Security

We use industry-standard measures - encryption in transit, hashed passwords, role-based access controls and regular security reviews - to protect your data. No system is perfectly secure, but we take every reasonable step to keep yours safe.

9. Changes to this policy

We may update this policy. The "last updated" date above tells you when. Material changes will be communicated by email or a notice on the site.