1. Data we collect
- Account data: email address, name, date of birth, password (hashed).
- Entry data: competitions entered, ticket numbers, payment confirmations (we do not store full card numbers).
- Communications: emails you send us, support tickets.
- Technical: IP address, browser, device, cookie identifiers.
2. Why we use it
- To process your competition entries and notify you of results.
- To verify eligibility (age, UK residence) as required by law.
- To enforce monthly spend limits and self-exclusion choices.
- To send marketing emails, only if you have opted in.
- To detect fraud and protect the integrity of our draws.
3. Who we share it with
- Cashflows — for processing card payments.
- Resend — for sending transactional and (opt-in) marketing emails.
- Supabase — for secure database hosting.
- Vercel — for website hosting and infrastructure.
- Law enforcement or regulators, where required by UK law.
4. How long we keep it
Account data: while your account is active, plus 6 years after closure (HMRC and DCMS record-keeping). Entry and payment records: 6 years. Marketing data: until you unsubscribe.
5. Your rights
- Access — request a copy of the data we hold about you.
- Rectification — ask us to correct inaccurate data.
- Erasure — ask us to delete your data, subject to legal record-keeping requirements.
- Restriction and objection — limit how we process your data.
- Portability — receive your data in a machine-readable format.
6. Cookies
See our dedicated Cookie Policy.
7. Contact / complaints
Data protection queries: info@astrocomps.com. You also have the right to complain to the UK Information Commissioner's Office at ico.org.uk.