Last updated: April 2025
What does this notice cover?
This notice describes how Winnrz Ltd ("Winnrz", "we", "us" or "our") will make use of your data when you use our website, applications and services ("Platform").
It also describes your data protection rights, including the right to object to some of the processing which Winnrz carries out. More information about your rights, and how to exercise them, is set out in the "Your choices and rights" section.
Summary of how we use your data
Personal data we may collect about you
We collect and process personal data about you when you interact with us, our website and our prize competitions. This includes:
Category | Details |
---|---|
Identification Information | Your first name, last name, gender, password, nationality and date of birth when you register on the Platform |
Contact Information | Your home address, email address and phone number when you register on the Platform |
Payment Details | Your payment details, including billing addresses and credit card details, when you make purchases from us or top up your wallet |
Marketing Information | Your marketing preferences, including any consents you have given us |
Verification Information | Valid ID for identity verification if you win a prize from a promotion |
Promotional Information | Personal description, photograph and/or video of you if you win a prize from a promotion |
Device and Technical Information | Information related to the browser or device you use to access our website and details about your visit to our website |
How do we use this information, and what is the legal basis for this use?
We will only use your personal data for the purposes and legal bases set out below:
Purpose | Legal Basis |
---|---|
We will collect, use and store your Identification Information and Contact Information to register and create an account on our website. | It is necessary for us to process your personal data in order to perform our contract with you. |
We will collect, use and store your Identification Information and Contact Information to respond to any queries you may address to us through our ‘contact us’ function. | It is necessary for us to process your personal data in order to perform our contract with you. We have a legitimate interest in managing our business and providing services to those who access our website and contact us for assistance or with queries and concerns. |
We will use and store your Identification Information for the purposes of choosing a winner for our prize promotions. | It is necessary for us to process your personal data in order to perform our contract with you. In particular, in relation to using this information for identifying a winner of a prize promotion. |
We will use and store your Contact Information to manage our relationship with you. | We have a legitimate interest in managing our business and providing services to those who access our Platform and take part in our promotions. |
We will collect, use and store your Payment Details when you make purchases or top up your wallet on the Platform. | It is necessary for us to process your personal data in order to perform our contract with you. We have a legal obligation to process certain financial information associated with purchases you make. |
We will collect, use and store Identification Information and Device and Technical Information to monitor customer accounts to prevent, investigate and/or report fraud, terrorism, misrepresentation, security incidents or crime, in accordance with applicable law. | We have a legal obligation to ensure we are protecting you from such issues. We have a legitimate interest in preventing and detecting fraud or other wrongdoing. |
We will collect, use and store Identification Information and Device and Technical Information to maintain and protect our website and the services we offer to you, including for troubleshooting and bug reporting purposes. | We have a legitimate interest in ensuring the safety and security of our website and the services we offer to you, and we use this information to help provide support to you in relation to the issue you’ve contact us about. |
We will collect, use and store your Verification Information to ensure we are providing prizes to the correct winners. | We have a legitimate interest in ensuring the safety and integrity of our prize draws and we therefore use this information to ensure we are awarding prizes to the correct winners. |
We will collect, use and store your Contact Information and Marketing Information to send you direct marketing in relation to us, our affiliates and carefully selected partners. | Your consent (as Winnrz is a promotions-only service, your consent is obtained through your registration). |
We will collect and analyse your Device and Technical Information in order to manage and operate our website, including to keep it updated and relevant, to develop our business and to inform our marketing strategy. | Your consent if we are undertaking such activities using non-strictly necessary cookies (see Cookie section below). We have a legitimate interest in operating our site and improving its operation. |
We will collect, use and store your Promotional Information where you are a winner of a prize promotion and we want to use the information for promotional purposes. | We have a legitimate interest in promoting our prize promotions, the legitimacy of our business and other services. |
We will collect, use and store your Identification Information and Contact Information to invite you to take part in surveys, reviews and other market research activities that will help us improve our services. | Your consent in connection with surveys, where you choose to participate in those surveys and choose to provide us any information in connection with these. |
There are instances where we have a legitimate interest to use your data. Our legitimate interest will vary depending on what we are using your data for, and we explain above what the interest is and how it relates to the processing operations that we are carrying out. Where we process personal data on the basis of a legitimate interest, then – as required by data protection law – we have carried out a balancing test to document our interests, to consider what the impact of the processing will be on individuals and to determine whether individuals’ interests outweigh our interests in the processing taking place. You can obtain more information about this balancing test by using the contact details at the end of the notice.
How we share your personal data
We may share your data with the following categories of recipients:
Personal Data Category | Category of Recipient | Why? |
---|---|---|
Identification Information Contact Information Payment Details Marketing Information Promotional Information Device and Technical Information Verification Information |
Third party service providers | We employ other companies and individuals to perform functions on our behalf. Examples include website hosting and maintenance, prize draw winner selection, customer service operations, sending emails and processing payments. |
All personal data categories | Group companies | We share personal data with other companies in our group to enable us to operate, improve, and develop our services. |
All personal data categories | Prospective buyer/seller | In the event that the business is sold or integrated with another business, your details will be disclosed to our advisers and any prospective purchaser’s adviser and will be passed to the new owners of the business. |
All personal data categories | Regulators, official authorities, and other third parties in relation to legal compliance | The police or the government might legally require use to give them personal data to help them with an investigation, or we might be required to give these companies personal data to enforce our terms, address security and fraud, and to protect you. |
Where we transfer your personal data
Personal data that we collect from you may be transferred to and stored at a destination outside the UK and the EEA. Where the country outside the UK or EEA is a country which is subject to an adequacy decision by the European Commission and/or the UK government as applicable, we rely on that adequacy decision for the transfer.
If we send your personal data to a company which is in a jurisdiction not subject to an adequacy decision, this is done in order to enter you into the prize promotion you have requested. In some cases, data may alternatively (or in addition) be adequately protected by EU Commission approved standard contractual clauses (or equivalents under UK law) or a vendor’s Processor Binding Corporate Rules.
Your choices and rights
Individuals in the EU and the UK have the following rights:
Right | Summary |
---|---|
The right of access | Enables you to receive a copy of your personal data |
The right to rectification | Enables you to correct any inaccurate or incomplete personal data we hold about you |
The right to erasure | Enables you to ask us to delete your personal data in certain circumstances |
The right to restrict processing | Enables you to ask us to halt the processing of your personal data in certain circumstances |
The right to object | Enables you to object to us processing your personal data on the basis of our legitimate interests (or those of a third party), including processing for direct marketing purposes or profiling for purposes of direct marketing, or where we are performing a task in the public interest - your objection will be upheld, and we will cease processing your personal data, unless the processing is based on compelling legitimate grounds or is needed for the exercise or defence of legal claims that may be brought by or against us. |
The right to data portability | Enables you to request us to transmit personal data that you have provided to us, to a third party without hindrance, or to give you a copy of it so that you can transmit it to a third party, where technically feasible |
These rights may be limited, for example if fulfilling your request would reveal personal data about another person, or if you ask us to delete information which we are required by law or have compelling legitimate interests to keep.
If you wish to exercise any of these rights, please contact us at the contact details set out below.
Wherever we rely on your consent, you have the right to withdraw that consent at any time, without affecting the lawfulness of processing based on consent before its withdrawal. We may however have other legal grounds for processing your data for other purposes, such as those set out above.
In some cases, we are able to send you direct marketing without your consent, where we rely on our legitimate interests. You have an absolute right to opt-out of direct marketing, or profiling we carry out for direct marketing, at any time. You can do this by following the instructions in the communication where this is an electronic message, or by contacting us.
We use automated decision making in our winner-selection process to ensure we randomise the selection of winners. We use a third-party automated tool to do this to ensure the outcome is fair and we do not allow interference in the process.
If you have unresolved concerns, you have the right to complain to your relevant data protection authority, in the UK that is the Information Commissioner’s Office for the EU, the list of relevant authorities can be found here.
How long we retain your personal data
Where we process account related data, including payments associated with your account, we do this for as long as you have an account with us.
Where we process personal data for marketing purposes or with your consent, we process the data until you ask us to stop and for a short period after this (to allow us to implement your requests). We also keep a record of the fact that you have asked us not to send you direct marketing or to process your data so that we can respect your request in future.
Where we process personal data for site security purposes or in connection with performing a contract or for the administration of one of our prize draws, we retain it for as long as we need to meet legal or regulatory requirements, resolve disputes, prevent fraud and abuse, or enforce our terms and conditions.
We may retain personal data for longer periods to the extent required by law to do so.
Cookies
What are cookies?
Winnrz uses cookies on its website. A cookie is a very small text document, which often includes an anonymous unique identifier. Cookies are created when your browser loads a particular website. The website sends information to the browser which then creates a text file. Every time the user goes back to the same website, the browser retrieves and sends this file to the website's server. Find out more about the use of cookies on www.allaboutcookies.org.
We may also use other forms of technology (such as web beacons and, in apps, software development kits (usually referred to as SDKs)) which serve a similar purpose to cookies, and which allow us to monitor and improve our website. When we talk about cookies, this term includes these similar technologies.
What cookies do we use and what information do they collect?
You can find more information about the individual cookies we use and the purposes for which we use them in the table below:
Type of cookie | Purpose |
---|---|
Strictly necessary cookies | These cookies are required to enable core functionality. Without these cookies, services you have asked for, like adding items to your shopping basket, cannot be provided. If you disable these cookies certain parts of the Winnrz website will not function for you, for example, adding items to your basket, proceeding to checkout. |
Analytics cookies |
These cookies help us improve or optimise the experience we provide. They allow us to measure how visitors interact with the Winnrz website and we use this information to improve the user experience and performance of the website. These cookies are used to collect technical information such as the last visited date, the number of pages visited, whether or not email communications are opened, which parts of our website or email communication are clicked on and the length of time between clicks. |
Functional cookies |
We may use cookies that are not essential but enable various helpful features on our websites. For example, these cookies collect information about your interaction with services provided on the website and may be used to remember your preferences (such as your language preference), your interests and the presentation of the website (such as the font size). We will ask for your consent to use these cookies when you request the relevant service. |
Social Media and Advertising cookies | These cookies are placed by third party advertising companies and collect information about your browsing habits in order to display advertising more relevant to your interests based on your online navigation. They are also used to limit the number of times you see an advert as well as help measure the effectiveness of an advertising campaign. We may share this information with other parties who help manage online advertising – please see the "Third Parties" section below for more details. |
Third parties
Your use of our website may result in some cookies being stored that are not controlled by us. This may occur when the part of our website makes use of a third-party analytics or marketing automation/management tool or includes content displayed from a third-party website, for example, YouTube or Facebook. You should review the privacy and cookie policies of these services to find out how these third parties use cookies and whether your cookie data will be transferred to a third country. A list of the third parties who place cookies on our website can be found here.
Third party information
Purpose | Third party |
---|---|
Analytics | Google Analytics |
How do you manage these technologies?
Most internet browsers allow you to manage cookie settings or to delete them. Methods vary for doing so, but you can see information about managing cookies at the following links:
Google Chrome
Mozilla Firefox
Apple Safari
Microsoft Edge
Updates to this privacy notice
We reserve the right to update this privacy notice at any time, and we will provide you with a new privacy notice when we make any substantial updates. We may also notify you in other ways from time to time about the processing of your personal information.
Contact us
The data controller for your personal data is Winnrz Ltd. If you have questions about this privacy notice or wish to contact us for any reason in relation to our personal data processing, please contact us at info@winnrz.com.