PRIZE GUILD PRIVACY NOTICE
1. Who we are
Prize Guild Ltd is the controller responsible for personal data handled through prizeguild.co.uk and the Prize Guild service.
Prize Guild Ltd
Company number 17404758
Registered in England and Wales
Registered office:
8 Bryer Close Whitehaven CA28 9BN
Privacy and support contact:
2. What this Notice covers
This Notice explains how we use personal data when you:
- visit the Prize Guild website;
- create or use an account;
- confirm eligibility;
- participate in the Founder programme;
- enter a Prize Guild promotion;
- vote or take part in community features;
- become a potential or confirmed winner;
- contact us; or
- otherwise interact with Prize Guild.
It also explains the rights available to you.
3. Information we may collect
Depending on how you use Prize Guild, we may process:
Account information
- email address;
- account identifier;
- Guild handle;
- account creation and verification timestamps; and
- authentication and account-security information.
Eligibility information
- your declaration that you are aged 18 or over;
- your declaration that you are resident in the United Kingdom;
- confirmation timestamps; and
- where reasonably necessary, evidence requested to verify eligibility, age, residency or identity.
Legal and rules records
- versions of the Terms and promotion rules you accepted;
- acceptance timestamps; and
- records showing which Privacy Notice was made available to you or acknowledged as read where such acknowledgement is used.
Founder information
- Founder status;
- Founder number; and
- the date Founder status was granted.
Promotion information
- promotions entered;
- entry status;
- entry numbers;
- entry timestamps;
- answers or selections submitted where applicable;
- entry-limit and validation information; and
- Guild voting information where applicable.
Winner and fulfilment information
- winner-selection records;
- verification information;
- name and contact details;
- delivery address where needed;
- communications concerning the prize; and
- information needed to demonstrate that a valid prize was awarded.
Communications
- messages sent to or from Prize Guild;
- support enquiries;
- complaints; and
- related correspondence.
Technical and security information
- IP address where processed by our systems or service providers;
- browser/device information;
- timestamps;
- security events;
- anti-abuse and fraud-prevention results; and
- other limited technical information needed to operate and protect the service.
Marketing information
- marketing preferences;
- consent records where consent is relied on; and
- unsubscribe or suppression records.
4. Where we obtain information
Most personal data is provided directly by you when you create an account, make declarations, enter a promotion, vote, communicate with us or provide information required to receive a prize.
Technical and security information may be generated automatically when you use the service or by service providers that help us operate and protect it.
Prize Guild does not currently intend to buy consumer mailing lists or obtain personal data from data brokers for general marketing purposes.
5. Why we use personal data and our lawful bases
We use account and authentication information to create and operate accounts, verify email addresses, provide account functions, reset passwords and send necessary service communications.
Our main lawful bases are performance of a contract or steps taken at your request before entering into a contract, together with legitimate interests in operating and securing the service where appropriate.
We use age and UK-residency declarations to administer eligibility requirements and protect the integrity of promotions.
Our main lawful bases are contract and legitimate interests in running fair, eligibility-restricted promotions.
We use Terms and promotion-rule acceptance records to demonstrate which conditions applied to participation and what was agreed.
Our main lawful bases are contract and legitimate interests in maintaining reliable records and resolving disputes.
We use Founder information and promotion-entry information to administer the Founder programme, competitions, prize draws and related member features.
Our main lawful basis is contract, together with legitimate interests where necessary to prevent abuse and maintain promotion integrity.
We use winner, verification and prize-fulfilment information to select, verify and contact winners, award prizes and demonstrate that promotions have been properly completed.
Depending on the activity, our lawful bases may include contract, legitimate interests and legal obligation.
We use support and complaint communications to respond to you, administer the service, resolve issues and maintain appropriate records.
Our lawful bases may include contract and legitimate interests.
We use technical and security information to protect accounts, prevent fraud and abuse, investigate incidents and maintain the security and reliability of Prize Guild.
Our main lawful basis is legitimate interests in securing our systems, members and promotions.
Where we send direct electronic marketing that requires consent, we rely on consent and the applicable electronic marketing rules.
Where another lawful route applies, such as a permitted existing-customer marketing route, we will provide the required opportunity to opt out.
You may object to direct marketing at any time.
6. Privacy information is not general consent
This Privacy Notice explains how Prize Guild handles personal data.
Reading or acknowledging this Privacy Notice is not general consent to the processing described in it and is not marketing consent.
We rely on the lawful basis appropriate to each processing activity.
Where consent is specifically required, we will ask for it separately and you may withdraw it as permitted by law.
7. Age and residency verification
Prize Guild is intended for people aged 18 or over who are resident in the United Kingdom.
We record authenticated eligibility declarations as part of the Founder and promotion process.
We do not currently require identity documents merely to create an ordinary Prize Guild account.
We may request reasonable evidence of age, identity or UK residency where necessary to verify a potential winner, investigate suspected abuse, satisfy a legal obligation or administer an eligibility requirement fairly.
Where verification evidence is requested, we will aim to collect only what is reasonably necessary and retain it only for as long as required for the relevant purpose.
8. Founder information
A qualifying Founder may receive a permanent Founder number linked to their account.
Founder numbers are intended not to be reused.
If an account is later closed, Prize Guild may retain a minimal record necessary to preserve the integrity and uniqueness of historic Founder allocations, while removing or minimising personal data that is no longer required.
9. Promotion entries
When you enter a promotion, we may record your account identifier, entry details, entry number, submission time, status and other information necessary to administer and validate that entry.
Competition entry numbers and Founder numbers are separate identifiers.
10. Winners
If you are selected as a potential winner, we may contact you through the email address associated with your account.
We may request information reasonably necessary to verify eligibility and deliver the prize.
We will not request more information than is reasonably necessary for those purposes.
Where promotion rules or applicable advertising requirements require information demonstrating that a valid award took place, we may retain or make available limited winner information in accordance with those requirements and applicable law.
11. Marketing
Creating an account, confirming eligibility, entering a promotion, becoming a Founder or acknowledging this Privacy Notice does not by itself give Prize Guild consent to send you optional marketing where consent is required.
Where we ask for marketing consent, the request will be separate and optional.
You can unsubscribe from marketing communications at any time using the method provided in the message or by contacting [email protected].
We may retain a minimal suppression record so that we can respect an opt-out.
Service communications necessary to operate your account or administer a promotion are not treated as optional marketing merely because they are sent by email.
These may include verification emails, password-reset messages, account-security notices, entry administration, winner notifications and prize-fulfilment communications.
12. Cookies and similar technologies
Prize Guild and its service providers may use cookies, local storage or similar technologies that are necessary for authentication, account security, fraud prevention and core website functionality.
Cloudflare Turnstile is used as part of our security and anti-abuse controls.
If Prize Guild introduces analytics, advertising or other non-essential technologies requiring consent, we will provide appropriate information and obtain consent before setting or using them where required.
13. Who we may share information with
We do not sell personal data to advertisers.
We may share personal data with organisations that help us operate Prize Guild, where reasonably necessary.
These may include:
- Supabase, used for account authentication and database services;
- Cloudflare, used for website/security services including anti-abuse controls such as Turnstile;
- email and communications providers;
- prize suppliers and delivery/courier providers where necessary to fulfil a prize;
- professional advisers, accountants, insurers or legal advisers;
- regulators, law-enforcement bodies, courts or other authorities where disclosure is required or appropriate under law.
Service providers may process information only as permitted by their agreements with us and applicable law.
14. International transfers
Some service providers may process personal data outside the United Kingdom.
Where personal data is transferred internationally, we will use a lawful transfer mechanism where required, such as applicable UK adequacy regulations or appropriate safeguards.
15. How long we keep information
We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including legal, regulatory, fraud-prevention, dispute and record-keeping requirements.
Our intended retention approach is:
- active account information: while the account remains open and for a limited period afterwards where reasonably necessary;
- Terms, promotion-rule acceptance, eligibility and promotion administration records: normally up to six years after the relevant relationship or promotion where needed to evidence participation, resolve disputes or establish, exercise or defend legal claims;
- minimal Founder allocation records: for as long as necessary to preserve the integrity and uniqueness of the Founder scheme;
- winner and prize-fulfilment records: normally up to six years where needed for accounting, evidence, disputes or legal obligations;
- ordinary support correspondence: normally up to two years after the matter is resolved unless longer retention is reasonably required;
- routine security logs: normally no longer than 12 months unless associated with a security incident, suspected fraud, legal claim or other matter requiring longer retention;
- marketing information: while marketing remains applicable, with a minimal suppression record retained where necessary to honour an opt-out.
Actual retention may be shorter where the information is no longer required, or longer where a legal obligation, dispute, security matter or other lawful reason requires it.
16. Security
We use reasonable technical and organisational measures designed to protect personal data.
These include authenticated account controls, restricted database access, row-level security, trusted server-side operations for sensitive actions and anti-abuse measures.
No internet service can guarantee absolute security.
If a personal-data breach occurs, we will assess and manage it in accordance with applicable law.
17. Automated processing
Prize Guild does not currently intend to make decisions producing legal or similarly significant effects about members solely through automated processing.
Automated systems may identify suspicious activity, security events or potential abuse.
Where a significant adverse action such as disqualification, account suspension or prize refusal depends on such a flag, Prize Guild intends to review the relevant circumstances before making a final decision where reasonably practicable.
18. Your rights
Depending on the circumstances and lawful basis, you may have rights including:
- access to personal data;
- correction of inaccurate data;
- erasure;
- restriction of processing;
- data portability;
- objection to processing; and
- withdrawal of consent where processing is based on consent.
These rights are not absolute in every circumstance.
You have an absolute right to object to your personal data being used for direct marketing.
To exercise a privacy right, contact:
We may need to verify your identity before acting on a request.
19. Complaints
If you have concerns about how Prize Guild uses personal data, please contact us first at:
You also have the right to complain to the UK Information Commissioner's Office.
20. People under 18
Prize Guild is not intended for people under the age of 18.
If we discover that an account belongs to a person under 18, we may close or restrict the account and delete or retain information as appropriate, taking account of legal, security and record-keeping requirements.
21. Future paid promotions
Prize Guild does not currently need payment-card information for the free Founders Drop.
Before introducing paid promotions, this Privacy Notice will be reviewed and updated where necessary to explain any additional personal-data processing.
Where possible, payment-card handling will be performed by a specialist payment provider rather than Prize Guild storing full card details itself.
22. Changes to this Privacy Notice
We may update this Notice to reflect changes in our services, law or personal-data practices.
Each version will show a version number and effective date.
Where a material change involves a processing activity that requires a separate consent or other action from you, we will request that consent or action separately.
We will bring material new uses of personal data to the attention of affected individuals before starting the new use where required.
23. Contact details
Prize Guild Ltd
Company number 17404758
Registered in England and Wales
Registered office:
8 Bryer Close Whitehaven CA28 9BN
Email: