PRIVACY POLICY

Day One Prizes ("we", "us", or "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal information in relation to the operation of our monthly prize draw.

1. Who We Are

Day One Prizes operates a monthly UK-based prize draw, accessible via www.dayoneprizes.com.

Contact Details:
Day One Prizes
49 Discovery House, 15 Susans Road,
Eastbourne, East Sussex, BN21 3AG
Email: hello@dayoneprizes.com

2. What Personal Data We Collect

• Full name
• Email address
• Postal address (for postal entries or prize delivery)
• Payment details (processed securely via Stripe – we do not store card details)
• Answers to entry questions
• Consent to publicity (if you are a winner and agree to be featured)

We may also collect anonymised usage data from our website (e.g., IP address, browser type) for analytics and fraud prevention.

3. How We Use Your Data

We use your personal data to:

• Process and manage your entry into the prize draw
• Enforce 24-hour entry limits
• Notify winners and deliver prizes
• Publish winner details (only with consent)
• Prevent fraud and ensure fair play
• Maintain compliance with our legal obligations

4. Legal Basis for Processing

• Contract: to fulfil our obligations under the prize draw terms
• Consent: for optional publicity and marketing
• Legal obligation: for compliance with UK laws (e.g., age restrictions, fair competition)
• Legitimate interests: to run the business fairly and prevent abuse

5. Sharing Your Data

We do not sell your data. We may share it with:

• Our payment provider (Stripe) for processing payments
• Postal/delivery services to dispatch prizes
• Technical service providers for hosting and security
• Law enforcement or regulators if required by law

6. Data Retention

We retain personal data only for as long as necessary:

• Email addresses: retained to monitor entry limits and past participation
• Winner data: stored for up to 12 months for verification
• Financial records: retained for up to 6 years (required by UK tax law)

7. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccuracies in your data
• Request deletion of your data (where applicable)
• Object to or restrict certain types of processing
• Withdraw consent (e.g., for publicity or marketing)

To exercise these rights, contact us using the details above.

8. Cookies & Tracking

Our website uses cookies to enhance your experience. These include:

• Essential Cookies: Necessary for the website to function.
• Performance Cookies: Help us analyze website usage.
• Functional Cookies: Remember your preferences.

You can manage your cookie preferences in your browser settings.

9. Children & Age Eligibility

We do not knowingly collect data from children under 16. Entrants aged 16 or 17 must have parental consent and be supervised by an adult.

We run prize draws for people aged 18 or over.
Participants aged 16–17 may take part only if:

• A parent or legal guardian completes the payment on their behalf and
• Gives explicit permission for the entry.

We do not knowingly collect personal data from anyone under 16. If we learn we have done so, we will delete that data and refund any entry fee.

Why? UK consumer‑contract law requires a parent/guardian to be the contracting party for most paid services entered into by 16‑ and 17‑year‑olds. This approach also aligns with Stripe’s rules that anyone under 18 must have a guardian assume account ownership when a payment is processed through Stripe.

10. International Data Transfers

Your data may be transferred to and stored on servers located outside the UK. We ensure that appropriate safeguards are in place to protect your data, such as:

• Standard Contractual Clauses
• Privacy Shield Certification

For more information on these safeguards, please contact us.

11. Data Protection Officer

If you have any questions about data protection or wish to exercise your rights, please contact our Data Protection Officer at: [DPO Contact Information]

12. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the new effective date.

Last updated: 01/07/2025