Privacy Policy

Prizesino is operated by Orderly Group LTD, a company registered in England and Wales under company number 15890394.

For the personal information described in this Privacy Policy, Orderly Group LTD is generally the data controller. This means we determine why and how your personal information is processed.

Prizesino is the trading and consumer-facing brand used by Orderly Group LTD. Privacy enquiries can be sent to privacy@prizesino.com.

This Privacy Policy applies when you:

• visit the Prizesino website;
• create or use a Prizesino account;
• enter a competition online;
• submit a free postal entry;
• purchase competition entries;
• communicate with customer support;
• win or claim a prize;
• subscribe to marketing communications;
• interact with our advertising;
• use features of the website that collect personal information; or
• otherwise interact with Prizesino.

This Privacy Policy should be read alongside our:

• Terms & Conditions
• Cookie Policy
• Free Postal Entry information

Depending on how you interact with Prizesino, we may collect the following categories of personal information.

Account and identity information

• full name;
• date of birth;
• username / account identifier;
• email address;
• telephone number;
• postal address; and
• account login and security information.

Competition information

• competitions entered;
• date and time of entry;
• entry / ticket numbers;
• number of entries;
• qualifying question answers;
• order information;
• competition history;
• free postal entries; and
• whether an entry was valid, cancelled or refunded.

Payment and transaction information

• purchase amount;
• transaction date;
• transaction reference;
• payment status;
• refund information;
• payment method type; and
• limited payment information returned to us by our payment provider (such as card type and, where provided, the last four digits of the card number).

Full card numbers are handled by our external payment provider, Shopify Payments, and are not stored by Prizesino.

Winner and verification information

Where necessary to verify eligibility or deliver a prize, we may request:

• proof of identity;
• proof of age;
• proof of address;
• residency information;
• delivery information; and
• other information reasonably necessary to confirm eligibility.

Customer support information

• emails;
• contact form submissions;
• support messages;
• complaints;
• telephone communications where applicable; and
• other correspondence with Prizesino.

Technical and device information

• IP address;
• browser type;
• device type;
• operating system;
• website session information;
• pages viewed;
• referring website;
• approximate geographic information derived from IP address;
• technical logs;
• error information; and
• security information.

Marketing information

• marketing preferences;
• consent records;
• unsubscribe status;
• campaign interaction information; and
• whether marketing emails or messages were opened or interacted with, where the technology is used lawfully.

Cookie and advertising information

Where permitted, this may include information collected through cookies, pixels, tags, conversion APIs, advertising identifiers, analytics tools and similar technologies. Further information is provided in our Cookie Policy.

We may collect personal information directly from you when you:

• register;
• purchase entries;
• complete forms;
• contact us;
• submit a postal entry;
• claim a prize;
• provide identity documentation;
• change your account settings; or
• subscribe to marketing.

We may also collect information automatically through website technologies such as cookies, server logs and security systems.

Where appropriate, information may also be received from third parties including payment processors, identity or age verification services, delivery providers, fraud and security providers, advertising platforms, analytics providers and professional advisers.

We may use personal information to:

• create and administer your Prizesino account;
• authenticate users;
• process competition entries;
• record entry numbers;
• process purchases and refunds;
• operate competitions and draws;
• process free postal entries;
• verify entrant eligibility;
• identify and contact winners;
• verify winner identity;
• deliver or transfer prizes;
• respond to customer support enquiries;
• investigate complaints;
• detect or prevent fraud;
• protect the website and users;
• maintain business and accounting records;
• comply with legal obligations;
• enforce our Terms & Conditions;
• analyse and improve the website;
• understand how customers use Prizesino;
• measure advertising effectiveness where permitted;
• personalise advertising where consent has been obtained where required; and
• send marketing communications where legally permitted.

UK data protection law requires us to have a lawful basis for using personal information. The table below sets out the main purposes for which we use personal information and the lawful bases we rely on.

Customers are always given a simple way to opt out of direct marketing. We do not activate non-essential tracking simply because someone continues browsing the website.

When you enter a Prizesino competition, we process information needed to:

• confirm your eligibility;
• record your entry;
• allocate entry numbers;
• process your answer to any qualifying question;
• administer the competition;
• select and contact winners; and
• maintain appropriate competition records.

Paid and free postal entrants may provide information using different entry methods, but both may require personal information so that the entry can be administered and the entrant contacted if they win.

Payments are processed by our external payment service provider, Shopify Payments.

Our payment provider receives the payment information necessary to authorise and process your transaction. Prizesino typically receives back:

• transaction ID;
• amount;
• payment status;
• card type; and
• the last four digits of the card, where provided.

Payment providers process information in accordance with their own privacy practices.

When a customer uses the Free Postal Entry route, Prizesino may process information included on the postal entry, such as:

• full name;
• date of birth;
• postal address;
• email address;
• telephone number;
• competition entered; and
• qualifying question answer.

This information is used to:

• assess whether the entry satisfies the competition requirements;
• allocate a valid entry;
• include the entry in the applicable competition;
• contact the entrant if they win; and
• maintain appropriate competition records.

Read about Free Postal Entry

If you win a competition, we may need additional information to confirm that:

• you are the genuine entrant;
• you are aged 18 or over;
• you meet applicable residency requirements; and
• you comply with the relevant competition terms.

Depending on the prize, we may share necessary information with parties involved in delivering or transferring the prize, including delivery companies, vehicle dealerships, vehicle transport providers, prize suppliers, professional advisers or other service providers required to fulfil the prize. We only share information reasonably necessary for that purpose.

Prizesino may send information about competitions, prizes, promotions or other Prizesino services where permitted by applicable electronic marketing and data protection law.

Marketing may be sent where:

• you have provided valid consent; or
• another lawful electronic marketing exemption applies, such as the customer "soft opt-in" where all relevant conditions have been satisfied.

Every electronic marketing message will provide a simple method of unsubscribing. You can also change your marketing preferences through your account where that functionality exists.

Stopping marketing does not prevent Prizesino from sending service communications necessary to operate your account or competitions you have entered. Examples include order confirmations, account security notices, competition administration, winner notifications, prize delivery information and important changes affecting an entry.

When somebody opts out of marketing, Prizesino may retain limited suppression information so that the person's preference continues to be respected.

Prizesino uses cookies and similar technologies. We group them into the following categories.

Strictly necessary

Required for security, authentication, shopping basket functionality, account sessions and essential website operation. These cannot be switched off.

Preferences

Used to remember user choices where applicable.

Analytics

Used to understand website performance and how visitors interact with Prizesino.

Advertising

Used, where permitted, to measure campaigns and provide or personalise advertising.

Non-essential cookies and tracking technologies are not activated by default where consent is required. Our cookie banner allows you to Accept All, Reject Non-Essential or Manage Preferences, with comparable prominence. You can change your choices at any time using the Cookie Settings link in the footer.

Where Prizesino uses Meta advertising technologies (such as Meta Pixel or server-side conversion tools), information about website interactions may be shared with Meta where permitted. This may include website visits, pages viewed, competition interactions, purchases/conversions, advertising campaign attribution and technical identifiers.

Optional Meta advertising and tracking respects the website's cookie and consent settings where required.

We may disclose personal information where necessary to categories of recipient including:

• payment processors;
• website hosting and infrastructure providers;
• IT and cybersecurity providers;
• email and communications providers;
• payment fraud prevention providers;
• analytics providers;
• advertising platforms where permitted;
• identity / age verification providers;
• prize suppliers;
• vehicle dealers or delivery providers;
• professional advisers such as solicitors and accountants;
• insurers where relevant;
• regulators, courts or law enforcement authorities where legally required; and
• prospective buyers or professional advisers involved in a genuine corporate transaction.

We only share personal information where there is a valid reason to do so.

Some suppliers used by Prizesino may process personal information outside the United Kingdom.

Where personal information is transferred internationally, Prizesino will ensure that the transfer is carried out using an applicable legal mechanism. Depending on the destination and recipient this may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• an applicable UK Addendum to approved contractual clauses;
• the UK Extension to the EU-US Data Privacy Framework where applicable; or
• another lawful transfer mechanism.

Users may contact us for further information about the safeguards applicable to international transfers involving their information.

We keep personal information only for as long as necessary for the purposes described in this Privacy Policy. The table below summarises our approach.

Prizesino takes appropriate technical and organisational measures designed to protect personal information against unauthorised access, accidental loss, misuse, disclosure, alteration and destruction. These measures may include appropriate access controls, authentication, encrypted communications, monitoring, backups, staff access restrictions and security testing.

No internet-based system can guarantee complete security, and we cannot promise that personal information will always remain secure — but we work hard to protect it.

Depending on the circumstances, UK data protection law may give you the following rights.

Right to be informed

The right to receive clear information about how your personal information is used.

Right of access

The right to request a copy of the personal information Prizesino holds about you.

Right to rectification

The right to ask us to correct inaccurate information or complete incomplete information.

Right to erasure

The right to ask us to delete personal information in certain circumstances. This right is not absolute.

Right to restrict processing

The right to ask us to restrict the use of personal information in certain circumstances.

Right to data portability

The right, in certain circumstances, to receive personal information you provided in a structured, commonly used and machine-readable form and/or request transfer to another controller where technically feasible.

Right to object

The right to object to certain processing based on legitimate interests. You have an absolute right to object to the use of your personal information for direct marketing.

Rights relating to automated decisions

Where applicable, individuals may have rights relating to certain significant decisions made solely through automated processing.

Withdrawal of consent

Where processing relies on consent, you may withdraw that consent at any time. Withdrawing consent does not make earlier processing based on valid consent unlawful.

To exercise your rights contact privacy@prizesino.com. We may need to verify your identity before fulfilling certain requests. We aim to respond within the time limits required by applicable data protection law.

Where we rely on consent, you can withdraw it.

For marketing: use the unsubscribe link in the relevant message or update your account preferences where available.

For cookies: use Cookie Settings.

Withdrawing consent does not affect processing that occurred lawfully before withdrawal.

Prizesino may use automated tools to detect:

• suspicious payment behaviour;
• multiple or fraudulent accounts;
• unusual entry activity;
• website abuse;
• attempted security breaches; or
• other potential fraud.

Where an account or entry is restricted based on automated risk indicators, human review is provided where appropriate.

Prizesino competitions are intended for people aged 18 or over. We do not knowingly permit people under 18 to enter Prizesino competitions.

If we become aware that personal information relating to an under-18 has been collected in circumstances where it should not have been, we will take appropriate steps to investigate and delete or otherwise handle the information appropriately.

Prizesino may publish limited winner information where necessary to demonstrate that prizes have genuinely been awarded. This may include:

• surname;
• county or general location;
• prize won;
• competition;
• winning entry number; and
• draw date.

Where we wish to use additional information such as full photographs, videos, testimonials, interviews or promotional winner stories, we will handle those uses in accordance with applicable privacy requirements and obtain consent where necessary. Winners are never required to take part in optional promotional activity merely to receive a prize.

If you have concerns about how Prizesino handles your personal information, please contact us first at privacy@prizesino.com. We will investigate your concern.

You also have the right to complain to the UK data protection regulator, the Information Commissioner's Office (ICO).

Make a complaint to the ICO

We may update this Privacy Policy from time to time. When we make changes, we will update the "Last updated" date shown at the top of this page.

Where a change materially affects how we use personal information, we will take reasonable steps to bring the change to the attention of affected users before the new use begins where required.

For privacy questions or to exercise your data protection rights: