Day One Prizes – Privacy Policy

Effective date: [Insert Date Here]

Day One Prizes ("we", "us", or "our") is committed to protecting and respecting your privacy. This policy explains how we collect, use, store, and protect your personal information in relation to the operation of our monthly prize draw.

1. Who We Are

Day One Prizes operates a monthly UK-based prize draw, accessible via www.dayoneprizes.com.

Contact Details:
Day One Prizes
49 Discovery House, 15 Susans Road,
Eastbourne, East Sussex, BN21 3AG
Email: [Insert contact email]

2. What Personal Data We Collect

• Full name
• Email address
• Postal address (for postal entries or prize delivery)
• Payment details (processed securely via Stripe – we do not store card details)
• Answers to entry questions
• Consent to publicity (if you are a winner and agree to be featured)

We may also collect anonymised usage data from our website (e.g., IP address, browser type) for analytics and fraud prevention.

3. How We Use Your Data

We use your personal data to:

• Process and manage your entry into the prize draw
• Enforce 24-hour entry limits
• Notify winners and deliver prizes
• Publish winner details (only with consent)
• Prevent fraud and ensure fair play
• Maintain compliance with our legal obligations

4. Legal Basis for Processing

• Contract: to fulfil our obligations under the prize draw terms
• Consent: for optional publicity and marketing
• Legal obligation: for compliance with UK laws (e.g., age restrictions, fair competition)
• Legitimate interests: to run the business fairly and prevent abuse

5. Sharing Your Data

We do not sell your data. We may share it with:

• Our payment provider (Stripe) for processing payments
• Postal/delivery services to dispatch prizes
• Technical service providers for hosting and security
• Law enforcement or regulators if required by law

6. Data Retention

We retain personal data only for as long as necessary:

• Email addresses: retained to monitor entry limits and past participation
• Winner data: stored for up to 12 months for verification
• Financial records: retained for up to 6 years (required by UK tax law)

7. Your Rights

Under UK data protection law (UK GDPR), you have the right to:

• Access the personal data we hold about you
• Correct inaccuracies in your data
• Request deletion of your data (where applicable)
• Object to or restrict certain types of processing
• Withdraw consent (e.g., for publicity or marketing)

To exercise these rights, contact us using the details above.

8. Cookies & Tracking

Our website may use cookies or similar tracking tools to improve your browsing experience and monitor traffic. You can manage cookie preferences in your browser.

9. Children

We do not knowingly collect data from children under 16. Entrants aged 16 or 17 must have parental consent and be supervised by an adult.

10. Changes to This Policy

We may update this Privacy Policy from time to time. Any changes will be posted on our website with the new effective date.

Last updated: [Insert Date Here]