Privacy Policy

Introduction

SWEEPSTARZ LTD Company number 15392271,
Unit A, 82 James Carter Road, Mildenhall, Suffolk, United Kingdom, IP28 7DE
values your privacy and is dedicated to safeguarding your personal data. This privacy policy informs you how we process and manage your personal data when visiting our website (irrespective of location).

It also covers your privacy rights and applicable legal protections.

Consult the Glossary for definitions of terms used in this privacy policy.

Important information and who we are

Purpose of this privacy policy

This privacy policy informs you how SWEEPSTARZ LTD collects and processes personal data through your use of this website, including information provided when you sign up for our newsletter, purchase products or services, or join prize draws or competitions. 

This website is not intended for children, and we do not knowingly collect children’s data.

Read this privacy policy, together with any other privacy or fair processing policies we issue on specific occasions involving your data protection, for full awareness of its purpose and handling. This policy supplements and does not override them.

Controller

SWEEPSTARZ LTD is the data controller responsible for your personal data (collectively “we”, “us” or “our” in this privacy policy). 

We have designated a data privacy manager to handle all questions about this policy. Contact the data privacy manager using the details below for any inquiries, including requests to exercise your legal rights.

Contact details

If you have any questions about this privacy policy or our privacy practices, please contact our data privacy manager in the following ways:

[email protected]

Changes to the privacy policy and your duty to inform us of changes

We regularly review our privacy policy. This version was last updated on 25/02/2026.

We need the personal data we hold about you to be accurate and current. Please inform us promptly if your personal data changes while you are engaged with us.

Third-party links

Links to third-party websites, plug-ins and applications may appear on this website. Using those links or connections could permit third parties to gather or share data about you. These third-party sites are beyond our control, and we are not responsible for their privacy statements. Please check the privacy policy of every linked site you visit.

The data we collect about you

Personal data, or personal information, refers to any information about an individual from which that person can be identified. Anonymous data (where identity is removed) is excluded.

We may collect, use, store and share different types of personal data about you, categorised as follows:

• Identity Data includes [first name, maiden name, last name, username or similar identifier, marital status, title, date of birth and gender].
• Contact Data includes [billing address, delivery address, email address and telephone numbers].
• Financial Data includes [bank account and payment card details].
• Transaction Data includes [details about payments to and from you and other details of products and services you have purchased from us].
• Technical Data includes [internet protocol (IP) address, your login data, browser type and version, time zone setting and location, browser plug-in types and versions, operating system and platform, and other technology on the devices you use to access this website].
• Profile Data includes [your username and password, purchases or orders made by you, your interests, preferences, feedback and survey responses].
• Usage Data includes [information about how you use our website, products and services].
• Marketing and Communications Data includes [your preferences in receiving marketing from us and our third parties and your communication preferences].

We collect, use and share Aggregated Data (such as statistical or demographic data) for any purpose. Although derived from your personal data, Aggregated Data is not deemed personal data in law because it does not directly or indirectly identify you. For instance, we may aggregate Usage Data to determine the percentage of users accessing particular website features. If we link Aggregated Data with your personal data in a way that directly or indirectly identifies you, the combined data is treated as personal data under this privacy policy. 

No Special Categories of Personal Data about you are collected by us (such as details regarding race or ethnicity, religious or philosophical beliefs, sex life, sexual orientation, political opinions, trade union membership, health information, genetic or biometric data). We also do not collect data on criminal convictions and offences.

We collect the minimum personal data required for you to participate in prize draws and competitions and for us to operate the promotion. Should you win, more detailed information may be necessary to provide your prize, and we will notify you of this when advising you of your success.

If you fail to provide personal data

Where legal or contractual requirements mean we must collect personal data from you, failure to provide it when asked may prevent us from performing our contract (such as delivering goods/services or entering you into a competition). We may then cancel your existing product/service or reject your competition entry, notifying you at such a time. 

How is your personal data collected?

We use different methods to collect data from and about you including through:

• Direct interactions. You may give us your Identity, Contact and Financial Data by filling in forms or by corresponding with us by post, phone, email or otherwise. This includes personal data you provide when you:
• Create an account on our website;
• Request marketing to be sent to you;
• Enter a competition; or
• Give us feedback or contact us. 
• Automated technologies or interactions. As you interact with our website, we will automatically collect Technical Data about your equipment, browsing actions and patterns. We collect this personal data by using cookies and other similar technologies. Please see our section on cookies further below for more details.
• Third parties or publicly available sources. We will receive personal data about you from various third parties as set out below: 

Technical Data from the following parties:

1. Analytics providers such as Google Analytics outside the UK; 
2. Advertising networks such as Facebook based inside and outside the UK; and
3. Search information providers.
4. Contact, Financial and Transaction Data from providers of technical, payment and delivery services.

How we use your personal data

We use your personal data only when legally permitted. Typically, this occurs in the following situations:

Where necessary to perform the contract we are about to enter into or have already entered into with you. (A legally binding contract forms when you purchase goods or services from us, or enter a competition).

Where required for our legitimate interests (or a third party’s) and your interests and fundamental rights do not take precedence.

Where we need to comply with a legal obligation.

For more information about the lawful bases we rely on to process your personal data, please refer to the Glossary below.

We generally do not use consent as a basis for processing your personal data, but we will obtain your consent before sending you third-party direct marketing via email or text message. You may withdraw marketing consent at any time by contacting us.

Purposes for which we will use your personal data

Below we outline the main ways we use your personal data and the legal bases we rely on.

Your personal data may be processed for more than one lawful ground depending on the purpose. Please contact us for details on the specific legal basis used when multiple grounds are shown below.

Competition winners will be invited to take part in related publicity exercises. Participation is not mandatory but would be much appreciated. Your decision not to participate will have no impact on your entry or winning chances.

If you opt out of publicity and being named, we may still be required to share your details with the Advertising Standards Authority (ASA) to verify proper competition administration and prize delivery. This fulfils a legal obligation. Contact us for information on the ASA’s data processing.

We process personal data for the following purposes and on the following legal bases:

• To register you as a new customer or account holder
Data used: Identity and Contact Data
Lawful basis: Performance of a contract with you.

• To allow you to enter competitions or prize draws
Data used: Identity, Contact and Profile Data
Lawful basis: Performance of a contract with you.

• To deliver prizes to competition winners
Data used: Identity, Contact and Transaction Data
Lawful basis: Performance of a contract with you.

• To manage payments and transactions
Data used: Identity, Financial and Transaction Data
Lawful basis: Performance of a contract with you.

• To administer and protect our business and website (including troubleshooting, data analysis, testing, system maintenance, support, reporting and hosting of data)
Data used: Technical and Usage Data
Lawful basis: Legitimate interests (running our business, providing website functionality, and preventing fraud).

• To analyse how users interact with our website and improve our services
Data used: Technical, Usage and Profile Data
Lawful basis: Legitimate interests (to improve our website, services and user experience).

• To send marketing communications and promotional offers
Data used: Identity, Contact, Technical, Usage, Profile and Marketing & Communications Data
Lawful basis: Legitimate interests (developing our services and marketing strategy) or consent where required.

• To verify eligibility, prevent fraud, and ensure fair competition administration
Data used: Identity, Technical and Profile Data
Lawful basis: Legitimate interests (ensuring fair and lawful promotions).

Marketing

We work to give you options concerning specific uses of your personal data, in particular marketing and advertising.

Promotional offers from us

We may use your Identity, Contact, Technical, Usage and Profile Data to determine what we believe you may want or need, or what might interest you. This informs our decisions about relevant products, services and offers (referred to as marketing). 

Marketing communications will be sent to you if you have requested information, purchased goods or services, or entered a competition or prize draw, and you have not opted out.

Third-party marketing

Before sharing your personal data with any third party for marketing purposes, we will secure your express opt-in consent.

Opting out

At any time, you may ask us or relevant third parties to cease sending marketing messages by following the opt-out links contained in those messages, or by reaching out to us directly.

Opting out of marketing messages does not apply to personal data submitted in connection with product or service purchases, warranty registrations, product or service experiences, or other transactions.

Cookies

Your browser settings allow you to refuse all or specific cookies, or to receive alerts when websites set or access them. If you choose to disable cookies, please be aware that certain sections of the website may not operate correctly or may be inaccessible. For further information about the cookies we use, please refer to our Cookie Policy or contact us.

Change of purpose

We will process your personal data only for the reason it was collected, except where we reasonably determine another use is necessary and consistent with the original purpose. If you would like to understand how a new use aligns with the original purpose, please reach out to us.

Should we need to use your personal data for an unrelated purpose, we will inform you and outline the legal grounds that allow such use.

Please be aware that in certain circumstances we may process your personal data without your knowledge or consent, where this is required or allowed by law and in accordance with the above conditions.

Disclosures of your personal data

Your personal data may be shared with the parties set out below for the purposes described in the section titled “Purposes for which we will use your personal data”.

External Third Parties as set out in the Glossary.

Specific third parties listed in the section titled “Purposes for which we will use your personal data” above.

We may sell, transfer, or merge parts of our business or assets with third parties, or we may acquire other businesses or merge with them. In the event of such a business change, the new owners will be permitted to use your personal data in accordance with this privacy policy.

All third parties are required to safeguard your personal data and to process it in compliance with the law. We do not permit our third-party service providers to use your personal data for their own purposes and only allow them to process it for specific purposes and in accordance with our instructions.

International transfers

Some of our external service providers are based outside the United Kingdom. Whenever we transfer your personal data outside the UK, we ensure appropriate safeguards are in place, such as adequacy regulations or approved contractual clauses.

Data security

Appropriate security measures have been implemented to protect your personal data from accidental loss, unauthorised use or access, alteration, or disclosure. Access to your information is limited to employees, agents, contractors, and third parties who need it for legitimate business reasons. These parties will process your personal data only in accordance with our instructions and are bound by confidentiality obligations.

We have also established procedures to respond to any suspected personal data breach and will notify you and the relevant authorities of such a breach where legally required.

Data retention

How long will you use my personal data for?

Your personal data will be kept only as long as necessary to fulfil the purposes for which it was collected, including to comply with legal, regulatory, tax, accounting, or reporting requirements. In some cases, we may retain your personal data for longer, for example in connection with a complaint or if we reasonably anticipate legal proceedings related to our relationship with you.

To establish the appropriate retention period, we take into account the quantity, nature, and sensitivity of the personal data; the risk of harm from unauthorised access or disclosure; the purposes of processing; whether these purposes can be met in other ways; and relevant legal and regulatory requirements.

Our retention policy, available upon request, outlines the specific retention periods for different types of personal data.

In some instances, you may request that we delete your personal data—see “Your legal rights” below for more details.

In certain cases, we may anonymise your personal data (rendering it no longer identifiable as yours) for research or statistical purposes, allowing us to use this information indefinitely without further notice.

Your legal rights

Under certain circumstances, you have rights under data protection laws in relation to your personal data.

If you wish to exercise any of these rights, please contact us.

You do not have to pay a fee to access your personal data or exercise your rights. However, if a request is clearly unfounded, repetitive, or excessive, we may charge a reasonable fee or choose not to comply with it.

What we may need from you

To confirm your identity and safeguard your right to access your personal data (or exercise any other rights), we may request certain information from you. This security measure ensures that personal data is not shared with anyone who is not authorised to receive it. We may additionally reach out for more information about your request to expedite our response.

Time limit to respond

We make every effort to respond to legitimate requests within one month. If your request is complex or you have made several at once, our response may take longer. In these circumstances, we will let you know and provide updates as appropriate.

External Third Parties

Service providers acting as processors based in the United Kingdom and the European Economic Area who provide IT hosting, analytics, payment processing and system administration services.

Professional advisers acting as processors or joint controllers including lawyers, bankers, auditors and insurers based in the United Kingdom and, where necessary, outside the United Kingdom who provide consultancy, banking, legal, insurance and accounting services.

HM Revenue & Customs, regulators and other authorities such as the Advertising Standards Authority acting as processors or joint controllers based in the United Kingdom who may require reporting of processing activities in certain circumstances.

YOUR LEGAL RIGHTS 

You have the right to:

Request access to your personal data (commonly referred to as a “data subject access request”). This allows you to obtain a copy of the personal data we hold about you, and to verify that we are processing it lawfully.

Request the correction of personal data we hold about you. This allows you to have any incomplete or inaccurate information corrected. We may, however, need to verify the accuracy of the new data you provide us.

Request the erasure of your personal data. This allows you to ask us to delete or remove your data when there is no valid reason for us to continue processing it. You may also request deletion where you have objected to processing (see below), where your data has been processed unlawfully, or where applicable law requires its erasure. Please note that, in some circumstances, we may not be able to meet your request for legal reasons, which will be explained to you at the time.

Object to our processing of your personal data where it relies on legitimate interests (ours or a third party’s) and you believe that, due to your particular situation, such processing impacts your fundamental rights and freedoms. You also have the right to object when we process your personal data for direct marketing purposes. In some circumstances, we may demonstrate that we have legitimate grounds for processing your information which override your rights and freedoms. 

Request the restriction of processing of your personal data. This right allows you to ask that we suspend the processing of your personal data in the following scenarios:

If you want us to establish the data’s accuracy.

When your personal data has been unlawfully used and you do not wish for it to be deleted. 

Where you need us to retain the data even though we no longer require it, because you need it to establish, exercise, or defend legal claims.

You have raised an objection to our processing, and we must determine whether compelling legitimate grounds exist for us to continue using it. 

Request the transfer of your personal data to you or to a third party. Your data will be provided to you in a structured, commonly used, and machine-readable format. This right applies only to automated data that you consented to share with us or that we processed under a contract with you. 

Withdraw consent at any time where we rely on consent to process your personal data. This withdrawal will not affect any lawful processing completed prior to that point. Should you withdraw your consent, some products or services may no longer be available. We will advise you accordingly at this time.