Privacy Policy

Qwandar ("we", "us", "our") runs this website and the competitions on it, and is responsible for your personal information as the data controller. Our contact details are on our Contact page. If you have a question about this policy or your information, please get in touch.

• Account details: your name, date of birth, email address, phone number, home address and password, and when you confirmed you're 18 or over.
• Entries: the competitions you enter, your ticket numbers, your answers to competition questions, and any prizes you win.
• Free postal entries: the details on your postcard or letter, such as your name, address, date of birth, email address and phone number.
• Payments: order amounts and payment references. Card payments are handled by our payment provider, which tells us whether a payment succeeded and may share limited card details (such as the card type and the first and last few digits). We never see or store your full card number. Where we run a refer a friend scheme, we keep a one-way code made from those limited details, so we can spot the same card being used across different accounts.
• Wallet and withdrawals: your site credit and cash balances and their history, and, if you ask to withdraw cash, your bank details and identity documents.
• Playing responsibly: any spend limits, breaks or account closures you choose, times you've reached a spend limit, and any steps we've taken to support you.
• Marketing preferences: whether you've agreed to hear from us, the wording you agreed to, and when.
• Notifications: if you turn on notifications on a device, the address your browser gives us for sending them to that device, the type of browser, and the wording you agreed to and when, including whether you also chose offers and new competitions.
• Messages: what you send us when you contact us or complain.
• Technical information: such as your IP address, browser and device, used to keep the website secure and working and to check referrals are genuine. See section 9 for how we count visits without cookies.

We use your information to:

• create and run your account and process your entries and payments;
• allocate ticket numbers, run draws, contact winners and deliver prizes;
• check that you're eligible to enter (including that you're 18 or over), confirm winners' identities and prevent fraud and misuse, for example duplicate accounts or misuse of offers and referrals;
• manage your wallet, offers, referrals and withdrawals;
• provide the responsible play tools in your account, apply spend limits and breaks, and look out for signs that someone may be finding it hard to stay in control;
• publish winners as described in our Terms;
• answer your messages and complaints;
• send you notifications you've turned on, such as telling you if you win and reminding you about draws you've entered;
• send you news and offers by email or notification, if you've agreed to this;
• understand how our website is used so we can improve it; and
• meet our legal and accounting obligations.

• Contract: to run your account and entries and award prizes.
• Legal obligation: for tax and accounting records, and to respond to lawful requests.
• Legitimate interests: to keep competitions fair and secure, prevent fraud, support responsible play, publish results and improve our website. We balance these against your rights.
• Consent: for marketing emails and notifications, for notifications on your device, and for non-essential cookies. You can withdraw consent at any time.

To help people play responsibly, we look at patterns in how accounts are used, such as how often someone reaches a spend limit. This can flag an account for a member of our team to review. Decisions to restrict an account are always made by a person, not by an automated system alone.

We don't sell your personal information. We share it only where needed with:

• the companies that provide our website platform, hosting and database;
• our payment provider, to take payments and refunds;
• email providers, to send account, order and winner emails (and marketing, if you've agreed);
• the push services run by your browser or phone maker (such as Google, Apple, Mozilla or Microsoft), to deliver notifications you've turned on. The messages are encrypted, so they can't read them;
• security services that help protect our forms from bots;
• analytics and advertising services, only if you accept those cookies;
• couriers and prize suppliers, to deliver prizes;
• our professional advisers; and
• the police, regulators or courts, where the law requires it or to prevent fraud.

These organisations may only use your information to provide their services to us.

Some of our service providers are based outside the UK, such as in the European Economic Area or the United States. Where this happens, we make sure your information is protected, for example by relying on UK adequacy regulations or approved contract terms.

• Account and entry records: while your account is open and for up to 6 years after, to deal with questions or claims.
• Payment, wallet and withdrawal records: 6 years, for tax and accounting.
• Identity documents for withdrawals: only as long as we need them to confirm who you are and meet our obligations.
• Breaks and account closures: for as long as needed to keep them in place, including if you register again with the same email address.
• Marketing consent records: for as long as you're on our list, and for a period afterwards to show we had your consent.
• Notifications: until you turn them off, your browser stops them, or you close your account.

When you close your account, we delete or anonymise your information unless we need to keep it for one of these reasons.

We count visits to our pages without cookies and without storing anything on your device. To tell visits apart, we use a code made from your IP address and browser that changes every day and can't be turned back into them. This helps us see which pages are popular and where visitors come from. If your browser sends a Do Not Track or Global Privacy Control signal, your visits aren't counted.

You have the right to:

• ask for a copy of your information;
• ask us to correct it;
• ask us to delete it, or to limit how we use it;
• object to how we use it, and to marketing at any time;
• ask us to send your information to you or another organisation; and
• withdraw your consent where we rely on it.

To use any of these rights, contact us using the details on our Contact page. You can unsubscribe from marketing emails using the link in each email, and turn off notifications, or just offers, on your account page or in your device settings. If you're unhappy with how we've handled your information, please tell us first; you can also complain to the Information Commissioner's Office (ico.org.uk, 0303 123 1113).

We use appropriate security to protect your information. Please keep your password private and let us know straight away if you think someone else has used your account.

Our website and competitions are only for people aged 18 or over. We don't knowingly collect information from anyone under 18, and we'll delete it if we find we have.

We may update this policy from time to time. The latest version is always on this page, and we'll let you know about significant changes.