Privacy Policy

Privacy Policy - The People's Prizes

Last updated: 1 February 2026

Platform: https://peoplesprizes.com

This Privacy Policy explains how THE PEOPLES PRIZES LTD (company number 16966014) trading as The People's Prizes ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our website/platform, create an account, enter our competitions (paid or free postal), contact us, or otherwise interact with us.

1) Who we are and how to contact us

Data Controller: THE PEOPLES PRIZES LTD (Company No. 16966014) trading as The People's Prizes

Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

Email: support@peoplesprizes.com

Website: https://peoplesprizes.com

2) What this policy covers

This policy applies when you:

• create or use an account on our Platform;
• enter a competition online (paid) or by free postal entry;
• receive Instant Win plays/credits and/or results;
• win or claim a prize;
• contact customer support;
• browse our website (including via cookies, where enabled);
• interact with our official social media pages or ads.

3) Personal data we collect

We collect and process personal data in the following categories:

A) Account and contact data

• Full name
• Date of birth
• Email address
• Telephone number
• Postal address
• Account login data (e.g., encrypted/hashed password and security tokens)

B) Competition, entry, and prize administration data

• Entries/ticket numbers and entry history
• Competition participation data (e.g., draw entry confirmations)
• Instant Win activity and results (where applicable)
• Prize claim information and fulfilment status
• Communications and records relating to winner selection and verification

C) Payment and transaction data (paid entries)

• Order and transaction references
• Payment status (successful/failed/refunded)
• Chargeback/dispute records and related correspondence

We do not store full payment card numbers on our systems.

D) Free postal entry data

If you enter by post, we collect the information you provide on your postcard/envelope (e.g., name, date of birth, email, address, phone number, and the Competition name), plus:

• date/time of receipt and processing timestamps;
• internal validation checks (e.g., duplicate checks, legibility checks).

Postal entries and accounts: We use the email address written on the postal entry to match your entry to an existing Platform account or (where necessary) create an account for administration. Where a Competition includes Instant Wins, we credit the relevant Instant Win play/reveal to the account associated with that email address within the timeframes described in our Terms & Conditions.

E) Identity, eligibility, and anti-fraud (particularly for winners)

• Proof of identity and age verification documents (where required)
• Proof of address and/or bank account ownership evidence (for cash prizes)
• Fraud prevention and security signals (see Section 6)

F) Customer support and complaints

• Messages you send us and our replies
• Complaint details, investigation notes, and outcomes

G) Website and device data (where collected)

• IP address and approximate location derived from it
• Device/browser information
• Pages visited and actions taken
• Log and security event data (e.g., timestamps, error diagnostics)
• Cookie identifiers (where cookies are enabled)

Special category data

We do not intentionally collect "special category" data (e.g., health data, religious beliefs). Please do not provide it to us.

4) Where we get your data from

We collect personal data:

• directly from you (account creation, entries, support requests);
• from postal entries you send to us;
• automatically when you use the Platform (e.g., logs, security events, cookies where enabled);
• from service providers that help us operate the Platform (see Section 8).

5) How we use your data

We use your personal data to:

1. Provide and manage your account (authentication, security, account notifications).
2. Administer competitions (process entries, allocate ticket/entry identifiers, run Instant Win logic where applicable, select winners, maintain audit records).
3. Contact you (entry confirmations, winner notifications, verification requests, essential service messages).
4. Deliver prizes (shipping physical prizes, issuing vouchers, paying cash prizes).
5. Prevent fraud and protect the Platform (detect bots/automation, multiple-account abuse, suspicious payment activity, chargeback abuse, unlawful conduct).
6. Provide customer support and manage complaints/disputes.
7. Operate, secure, and improve the Platform (performance monitoring, troubleshooting, security logging, service continuity).
8. Comply with legal obligations and respond to lawful requests from regulators/law enforcement.
9. Marketing (where lawful) (send updates/offers if you opted in or where otherwise permitted; you can opt out at any time).

6) Our lawful bases for processing

We only process personal data where we have a lawful basis under UK GDPR:

A) Contract

Where processing is necessary to provide the Platform and administer your participation (e.g., account creation, entry processing, prize fulfilment, winner contact and verification).

B) Legitimate interests

Where processing is necessary for our legitimate interests, such as:

• maintaining platform security and preventing fraud;
• ensuring competition integrity and fair administration;
• handling disputes/chargebacks;
• limited publication of winner information for transparency (see Section 7).

We balance these interests against your rights and expectations.

C) Legal obligation

Where we must comply with legal requirements (e.g., certain financial recordkeeping, responding to lawful requests).

D) Consent

Where required (most commonly for non-essential cookies and certain types of electronic marketing). You can withdraw consent at any time.

7) Winner information and publicity

For transparency and fraud prevention, we may publish or make available limited winner information on our Platform and official social media channels (first name, surname initial, town/city and, where relevant, winning ticket/entry number).

Winner objection / reduction request: If you are a winner, you may object to publication or request that we reduce the amount of information shared by contacting us within 7 days of winner notification. We will consider such requests. If we are challenged by an advertising authority such as Advertising Standards Authority or another regulator, we may still need to provide winner details and evidence that a valid award took place.

8) Who we share your data with

We may share personal data with trusted third parties where necessary to operate the Platform and administer competitions:

Payment processing

Stripe (payments, refunds, chargebacks, and related fraud prevention). Data shared may include your name, email address, billing address, and transaction references. Payment card data is handled by Stripe.

Hosting and infrastructure

Render (hosting, infrastructure, logs/monitoring, and backups as configured). Data processed may include account and entry data stored in our database, service logs, IP address, and technical diagnostics.

Email delivery (SMTP)

Microsoft (sending account emails, entry confirmations, winner notifications, and support replies via Outlook/Exchange SMTP). Data processed may include your email address, message content, and delivery metadata (timestamps, bounces).

Other recipients (where applicable)

• Delivery/fulfilment partners (to ship physical prizes)
• Voucher issuers (to supply voucher prizes)
• Professional advisers (legal/accounting/insurance) under confidentiality
• Regulators, law enforcement, courts, and dispute/chargeback handlers where required or permitted by law

We do not sell your personal data.

9) International transfers

Some of our service providers may process personal data outside the UK. Where personal data is transferred internationally, we ensure appropriate safeguards are in place (for example, contractual protections and other measures recognised under UK data protection law) to protect your information.

10) Cookies and similar technologies

We use cookies and similar technologies to:

• keep the website working and secure (essential cookies);
• remember preferences (where enabled);
• measure and improve performance (analytics cookies, only if enabled);
• support marketing/advertising (only if enabled).

If non-essential cookies are introduced, they will be used only where you consent via a cookie banner or settings.

Cookie controls: Where applicable, you will be able to update cookie preferences via /cookies and/or through your browser settings. If you disable certain cookies, parts of the Platform may not function properly.

11) Marketing preferences

If you opt in (or where otherwise permitted by law), we may send marketing communications about competitions and offers.

You can opt out at any time by:

• using the "unsubscribe" link in emails; or
• contacting us at support@peoplesprizes.com.

Service messages (e.g., entry confirmations, winner notifications, important security updates) may still be sent even if you opt out of marketing.

12) Automated decision-making and profiling

We may use automated tools to help protect the Platform and prevent fraud (for example, identifying bot-like behaviour, multiple-account abuse, suspicious payment activity, or chargeback abuse).

Where a decision would have a legal or similarly significant effect on you, we will ensure appropriate safeguards (including meaningful human review where required). You can contact us to request review and to challenge a decision.

13) How long we keep your data (retention)

We keep personal data no longer than necessary for the purposes described in this policy, including to operate competitions, maintain security, resolve disputes, and comply with legal obligations.

Typical retention approach:

• Account and entry records: retained while your account is active and for a reasonable period after closure for audit/dispute purposes.
• Payment and financial records: retained for the period required by law/tax/accounting rules.
• Winner verification data: retained only as long as needed to verify eligibility, prevent fraud, and meet audit/regulatory expectations, then securely deleted/redacted where appropriate.
• Support and complaint records: retained to resolve the matter and for a reasonable period thereafter.

14) How we protect your data

We use appropriate technical and organisational measures designed to protect personal data, including (as appropriate):

• encryption in transit (HTTPS/TLS);
• access controls and least-privilege permissions;
• security monitoring, logging, and rate limiting;
• secure storage practices and credential hashing;
• vendor due diligence and contractual protections.

No system is completely secure, but we work to reduce risk and respond quickly to incidents.

15) Your data protection rights

You may have the right to:

• access your personal data;
• correct inaccurate data;
• request deletion (in certain circumstances);
• restrict or object to processing (in certain circumstances);
• request data portability (in certain circumstances);
• withdraw consent (where processing relies on consent);
• challenge certain automated decisions.

To exercise your rights, contact support@peoplesprizes.com. We may request information to verify your identity before fulfilling certain requests.

16) Complaints

If you have concerns about how we use your data, contact us first:

Email: support@peoplesprizes.com

Address: 71-75 Shelton Street, Covent Garden, London, United Kingdom, WC2H 9JQ

You also have the right to complain to the UK supervisory authority, the Information Commissioner's Office.

17) Children

Our Platform and competitions are intended for adults aged 18+. We do not knowingly collect personal data from children.

18) Third-party links

Our Platform may include links to third-party sites (e.g., payment providers or social media). We are not responsible for their privacy practices. Please review their privacy notices separately.

19) Changes to this Privacy Policy

We may update this Privacy Policy from time to time by publishing a new version on the Platform. The "Last updated" date at the top will change. Where appropriate, we will provide additional notice for material changes.

Last updated: 1 February 2026.