No payment details in membership.
No names on the winner wall.
Consent, withdrawal, and deletion tools.
The platform needs a name, verified email, eligibility declarations, and terms acceptance to run membership. It creates entry, access, support, and prize records as the service is used. Public winner pages are anonymous, marketing is optional, and account controls are available from the dashboard.
Who is responsible
The Winning Circle is responsible for deciding how personal information is used within this membership service. Privacy questions and rights requests can be submitted through the secure contact form. Use the email connected to your membership when asking about a private record.
External competition providers are responsible for their own sites and processing. Their privacy information applies when they receive personal details for eligibility checks, a claim, or fulfilment.
Information collected
- Membership details: name, email address, account status, join and verification dates.
- Eligibility and agreement: UK residency and age declarations, terms version, acceptance time, and optional marketing choice.
- Participation: timestamped competition-entry links and the status of those competitions.
- Prize administration: award details, value, claim and fulfilment status, private notes, and fulfilment references.
- Access and security: hashed single-use tokens, request IP address, session data, and audit events.
- Support: the name, email, subject, and message submitted through the contact form.
Most information comes directly from you. Entry, access, audit, and prize information is created through use and administration of the platform.
Why and how information is used
Objective membership rules determine whether an active verified account is included when an entry is confirmed. The service does not use personal data for behavioural advertising or solely automated profiling that produces legal or similarly significant effects.
Who can receive information
Access is limited to authorised administrators and service providers needed for hosting, database operations, security, email delivery, and support. Professional advisers or authorities may receive information where reasonably necessary or legally required.
An external competition provider or fulfilment partner receives only the details needed to validate or deliver a named prize. Personal information is not sold. Public prize pages show the competition, prize, month, value where appropriate, and progress status—not a name, email, initials, or private reference.
If a supplier processes information outside the UK, appropriate contractual or other recognised safeguards should be used where required.
How long records are kept
Active membership details are kept while the account is in use. Short-lived access tokens expire after the configured period and cannot be reused. Support, security, audit, entry, and prize records are kept only for as long as reasonably needed to operate the service, resolve requests, demonstrate participation, fulfil an award, and meet legal obligations.
Withdrawal prevents future entry records. A deletion request anonymises identifying details where they are no longer needed. Non-identifying historical evidence may remain, and limited contact details may be retained temporarily while a prize is unresolved.
Your UK data rights
Depending on the circumstances, you may ask for access to your information, correction, deletion, restriction, portability, or an objection to particular uses. You can withdraw marketing consent without affecting earlier lawful processing.
The team may need to verify identity before acting on a request. Some information may need to remain where there is a legal obligation, a live prize, or a compelling need to establish or defend a claim.
Make a privacy requestMarketing, essential messages, and cookies
Competition news and updates are optional. Essential messages—such as verification, secure access, and a personal prize notification—are sent to operate the service and are not marketing. The preference can be changed in the member profile.
The site uses essential cookies and session storage for security, sign-in, request protection, and core operation. It does not currently use advertising cookies or behavioural advertising.
Security
Controls include passwordless single-use access, hashed tokens, short expiry, rate limits, session regeneration, restricted administrator access, private fulfilment notes, and an audit trail for sensitive actions. No online system can promise absolute security; suspected misuse should be reported promptly through the contact form.
Contact and complaints
Use the contact form for a privacy question or rights request. If a concern is not resolved, you can complain to the UK Information Commissioner’s Office. The ICO explains the right to clear privacy information and available individual rights on its official website.
This notice may be updated when the service, suppliers, or legal requirements change. Material changes will be highlighted where appropriate. The date at the top identifies the current version.