Privacy Policy
This Privacy Policy explains how Quantum Dispatch Ltd ("we", "us", "our") collects, uses, shares, and protects your personal data when you use our raffle platform (the "Platform"). We are the data controller for the purposes of the UK GDPR and the Data Protection Act 2018.
Note:This document is a template example and should be reviewed by a data protection specialist and, where required, registered with the Information Commissioner's Office (ICO) before use.
1. Data We Collect
| Category | Examples |
|---|---|
| Account data | Name, email address, password (hashed), phone number |
| Transaction data | Tickets purchased, order history, amounts paid (card details handled by Stripe) |
| Profile data | Delivery address, marketing preferences, linked social accounts |
| Technical data | IP address, device and browser type, session activity |
2. How We Use Your Data
- To create and manage your account and process ticket purchases.
- To run draws, notify winners, and deliver prizes.
- To detect and prevent fraud, and to meet our legal and regulatory obligations.
- To send service messages (e.g. order confirmations and draw results).
- With your consent, to send marketing about upcoming raffles.
3. Legal Bases
- Contract: to provide the Platform and fulfil your entries.
- Legal obligation: to comply with gambling, tax, and anti-money-laundering laws.
- Legitimate interests: to secure the Platform and prevent fraud.
- Consent: for optional marketing communications and non-essential cookies.
4. Who We Share Data With
We share personal data only where necessary, including with:
- Stripe, for secure payment processing;
- our hosting and infrastructure providers;
- delivery partners, to send physical prizes;
- regulators, law enforcement, or advisers where legally required.
We never sell your personal data.
5. Data Retention
We keep your data for as long as your account is active and for as long as required to meet legal obligations (for example, financial records are typically retained for six years). When data is no longer needed, it is securely deleted or anonymised.
6. Your Rights
Under UK data protection law you have the right to:
- access a copy of the personal data we hold about you;
- request correction of inaccurate data;
- request erasure of your data in certain circumstances;
- object to or restrict certain processing;
- request portability of your data;
- withdraw consent at any time.
To exercise any of these rights, email [email protected]. You also have the right to lodge a complaint with the ICO at ico.org.uk.
7. Security
We use appropriate technical and organisational measures to protect your data, including encryption in transit, hashed passwords, and restricted access controls. No system is completely secure, but we work to protect your information and to notify you and the ICO of breaches where required.
8. Cookies
We use cookies and similar technologies as described in our Cookie Policy.
9. Contact
For any privacy questions, contact our data protection team at [email protected].