Privacy Policy

**Last updated:** June 2026

1. Who We Are

YadaYada Prizes is the data controller for personal data collected through this website. Contact: prizes@yadayadaprizes.co.uk

**Account data:** Name, email, phone, address, date of birth

**Entry data:** Ticket numbers, skill challenge answers, payment status

**Payment data:** Processed by DNA Payments; we do not store full card details

**Technical data:** IP address, browser type, device information (via cookies/logs)

To create and manage your account

To process competition entries and payments

To conduct draws and notify winners

To comply with legal obligations

To send entry confirmations and service emails

**Contract:** Processing necessary to provide competition entry services

**Legal obligation:** Age verification, record keeping

**Legitimate interests:** Fraud prevention, security, service improvement

**Consent:** Marketing communications (where applicable)

Account data: retained while your account is active plus 6 years

Entry and draw records: retained for 6 years for regulatory compliance

Payment records: retained as required by financial regulations

Passwords are hashed using bcrypt

Sensitive fields (address, DOB) are encrypted at rest

All data transmitted over HTTPS

Access restricted to authorised personnel

Under UK GDPR you have the right to:

Access your personal data

Rectify inaccurate data

Request erasure (subject to legal retention requirements)

Restrict or object to processing

Data portability

Lodge a complaint with the ICO (ico.org.uk)

Contact prizes@yadayadaprizes.co.uk to exercise your rights.

We share data with:

**DNA Payments:** Payment processing

**Email providers:** Entry confirmations

**Hosting providers:** Infrastructure

We do not sell your personal data.

We use essential cookies for authentication and session management. Analytics cookies (if used) require consent.

We may update this policy. Material changes will be notified on the website.