Privacy Policy

1. Overview

This policy explains how IVAWIN collects, uses, stores and protects personal data when you use our website, create an account, enter competitions, contact support, receive marketing or claim a prize.

2. Data controller

The data controller is SPARRED LTD, company number 06553786, registered office 9 Byford Court Crockatt Road, Hadleigh, Ipswich, Suffolk, England, IP7 6RD. Contact: support@ivawin.com.

3. Personal data we collect

We may collect:

• name
• email address
• telephone number
• postal address
• date of birth/age confirmation
• account login/security information
• competition entries and ticket numbers
• payment status and transaction references (not full card details)
• communications with support
• marketing preferences
• cookie/device information
• fraud-prevention, security and audit logs
• winner verification documents, where required

4. Why we use personal data

We use personal data to:

• create and manage accounts
• process competition entries
• confirm tickets/entries
• administer paid and free-entry routes
• run draws and verify winners
• deliver prizes
• respond to support requests and complaints
• send transactional emails
• send marketing where consent/permission applies
• prevent fraud, abuse and underage entry
• comply with legal obligations
• maintain security and audit trails

5. Lawful bases

Depending on context, we rely on contract, legal obligation, legitimate interests, consent and/or substantial public/compliance interests where appropriate. Marketing consent can be withdrawn at any time.

6. Winner publicity

We may publish or make available enough information to show that a valid prize award took place. Where broader publicity is requested, we will ask for consent. Refusing optional publicity will not affect the chance of winning.

7. Sharing data

We may share necessary data with:

• payment processors
• email/SMS/push notification providers
• hosting/cloud providers
• fraud-prevention and age/identity verification providers
• prize suppliers/delivery providers
• professional advisers
• regulators, law enforcement or courts where required

8. International transfers

Where providers process data outside the UK/EEA, IVAWIN ensures appropriate safeguards are in place.

9. Retention

We keep data only as long as needed for the purpose collected, including competition administration, audit, legal, accounting, fraud-prevention and complaint handling. See Data Retention Policy.

10. Your rights

You may have rights to access, correct, delete, restrict, object, portability and withdraw consent. Contact support@ivawin.com.

11. Account deletion

You may request account deletion. We may retain limited records where necessary for legal, fraud-prevention, competition integrity, accounting or audit purposes. See Data Retention Policy.

12. Security

We use technical and organisational measures to protect personal data, including access controls, secure password storage, HTTPS, logging and admin controls.

13. Complaints

You may complain to us using /complaints. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.