Privacy Notice

We respect your privacy and are committed to protecting your personal data. This privacy notice will inform you as to how we collect, process and look after your personal data when you visit our website Kingraffle.com ("Website") (regardless of where you visit it from), use our services and purchase our products ("Services"). It will also tell you about your privacy rights and how the law protects you. We collect, use and are responsible for certain personal data about you. When we do so we are subject to the applicable Data Protection Legislation.

Given the nature of our Website, we do not expect to collect the personal data of anyone under 18 years old. If you are aware that any personal data of anyone under 18 years old has been shared with our Website, please let us know so that we can delete that data.

We will only process personal information about you in accordance with the UK Data Protection Legislation which for the purposes of this privacy notice shall mean: all applicable data protection and privacy legislation in force from time to time in the UK including without limitation the UK GDPR; the Data Protection Act 2018 (and regulations made thereunder) and the Privacy and Electronic Communications Regulations 2003 (SI 2003/2426) as amended; and all other legislation and regulatory requirements in force from time to time which apply to a party relating to the use of personal data (including, without limitation, the privacy of electronic communications); and the guidance and codes of practice issued by the Commissioner or other relevant regulatory authority and which are applicable to a party ("Data Protection Legislation").

BY USING OUR WEBSITE AND/OR SERVICES YOU ACCEPT THESE TERMS

By using our Website and our Services you confirm that you accept this privacy notice and consent to us processing your data in accordance with these terms.

This privacy notice sets out how we look after your personal data if you are a:

• Visitor to our Website
• A member with authorised access and/or a registered account
• Supplier, retailer or business contact of Kingraffle Limited
• A client or customer of Kingraffle Limited
• Any third-party organisation that uses Kingraffle Limited or has access to the Website

If you do not agree to these terms, please contact us straight away.

This privacy notice describes the types of information that we collect from you through the use of the Website, and how that information may be used or disclosed by us and the safeguards we use to protect it. The personal information that we collect is used for providing and improving our Services to you. We will not use or share your information with anyone except as described in this privacy notice.

It is important that the personal data we hold about you is accurate and current. Please keep us informed if your personal data changes during your relationship with us.

We may update this notice from time to time, and you can find our latest notice on our Website, or by asking us for a copy.

The Data We Collect About You

Personal data, or personal information, means any information about an individual from which that person can be identified either directly or indirectly.

We may collect, use, store and transfer different kinds of personal data to include:

• Your identity, billing and delivery addresses and contact details
• Details about payments to and from you
• Information about how you use our Website and Services
• Technical data about your equipment, browser, browsing actions and patterns
• Your preferences in receiving marketing from us and our third parties and your communication preferences
• Your bank payment details when you enter one of our competitions

Where we need to collect personal data by law, or under the terms of a contract we have with you and you fail to provide that data when requested, we may not be able to provide our Services to you.

How Is Your Personal Data Collected?

We use different methods to collect data from and about you including through:

• Our day-to-day business dealings in providing our competition services to you
• Filling in forms or by corresponding with us by post, phone, email or otherwise
• If you complete a survey or provide us with feedback
• As you interact with our Website, we may automatically collect data about your equipment, browsing actions and patterns using cookies, server logs and other similar technologies
• By using publicly accessible sources
• When you contact us
• Via third parties such as analytics providers and/or your bank or building society

Data Types Collected

• Contact Data — collected directly when you register or use the Website
• Technical Data — collected automatically via cookies and similar technologies
• Transaction Data — details about payments we receive
• Profile Data — username, password, competition entries, complaints, preferences, feedback
• Usage Data — information about how you use the Website
• Device Data — information about the device used to access the Website
• Cookies Data — see Cookies section below
• Analytics — third-party analytics (such as Google Analytics) to evaluate Website use

How We Use Your Personal Data

We will only use your personal data when the law allows us to:

• Where you have given consent
• Where we need to provide the competition Services we have agreed to
• It is necessary to protect your vital interests
• Where it is necessary for our legitimate interests (or those of a third party)
• Where we need to comply with a legal or regulatory obligation

Generally, we do not rely on consent as a legal basis for processing your personal data other than in relation to sending direct marketing communications to you via email or text message. You have the right to withdraw consent to marketing at any time by contacting us.

Purposes For Which We Will Use Your Personal Data

What we use your personal data for	Our reasons
Create and manage your account with us	Legitimate interests / performance of contract
Providing our competition services to you	To perform our contract with you
Conducting checks to identify you and verify your identity	Legal/regulatory obligations, minimise fraud
To enforce legal rights or defend legal proceedings	Legal obligations / legitimate interests
Customise our Website content to your preferences	Consent (cookies) / legitimate interests
Retaining and evaluating information for analytics	Consent (cookies) / legitimate interests
Communications not related to marketing	Legal obligations / legitimate interests
Protecting security of systems and data	Legal obligations / legitimate interests
Statistical analysis	Legitimate interests
Updating and enhancing customer records	Contract performance / legal obligations
Disclosures to comply with legal obligations	Legal obligations
Marketing our services	Legitimate interests
Audit of systems and processes	Legitimate interests
Share data in connection with corporate transactions	Legal obligations / legitimate interests
Administer and protect our business and Website	Legitimate interests

Marketing Emails

We may use your data to form a view on the products and services which we believe could be of interest to you. You will receive marketing communications from us if you have used our Services or purchased a product from us and you have not opted out of receiving that marketing.

You can ask us to stop sending you marketing messages at any time by contacting us.

Disclosures of Your Personal Data

We may share your personal data with:

• Third party prize providers
• Self-employed contractors, payment processors, delivery companies, agents, IT providers
• Third parties assisting with marketing and social media
• Social media pages (Facebook, Instagram)
• Police or law enforcement agencies (if required by law)
• Professional advisers (lawyers, bankers, auditors, accountants, insurers)
• HM Revenue & Customs, regulators and other authorities
• Third parties in connection with business sales, transfers, or mergers

International Transfers

Your information will be held at our offices, by our service providers and in our IT provider's data centres. We may transfer your personal data outside the UK and EEA where:

• The UK government or European Commission has made an adequacy decision
• There are appropriate safeguards in place
• A specific exception applies under Data Protection Legislation

Data Security

We have put in place appropriate security measures to prevent your personal data from being accidentally lost