PRIVACY POLICY

1. Introduction

DreamDraws Group Ltd. (“DreamDraws”, “we”, “us”, “our”) respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store and protect personal data when you visit our website, participate in our prize draws, subscribe to our newsletter or otherwise interact with us.

We process personal data in accordance with:

• the UK General Data Protection Regulation (UK GDPR), and

• the Data Protection Act 2018.

2. Data Controller

DreamDraws Group Ltd.
167–169 Great Portland Street, 5th Floor
London, W1W 5PF
England

3. Personal Data We Collect

Depending on your interaction with us, we may collect:

• identification data (e.g. name, date of birth where required),

• contact data (e.g. email address, postal address),

• account data (e.g. login credentials),

• transaction data (e.g. ticket purchases, subscriptions),

• technical data (e.g. IP address, browser type),

• communication data (e.g. support enquiries),

• newsletter subscription data (email address only).

We only collect data that is necessary, relevant and proportionate.

4. How We Use Your Data

We process personal data for the following purposes:

• operating and administering prize draws,

• creating and managing user accounts,

• verifying eligibility and winners,

• processing payments and subscriptions,

• responding to enquiries and support requests,

• sending newsletters and informational updates (where consent has been given),

• complying with legal and regulatory obligations,

• ensuring website security and preventing fraud.

5. Legal Basis for Processing

We rely on one or more of the following legal bases:

• performance of a contract,

• compliance with a legal obligation,

• legitimate interests,

• consent (where required, e.g. newsletter subscription).

6. Data Sharing

We do not sell personal data.

We may share data with:

• payment service providers,

• IT and hosting providers,

• professional advisers,

• authorities where legally required.

All third parties are required to process data securely and lawfully.

7. Data Retention

Personal data is retained only for as long as necessary to fulfil its purpose or meet legal requirements.

8. Your Rights

You have the right to:

• access your personal data,

• request correction or deletion,

• restrict or object to processing,

• withdraw consent at any time (where applicable),

• lodge a complaint with the UK Information Commissioner’s Office (ICO).

9. Data Security

We implement appropriate technical and organisational measures to protect personal data against unauthorised access, loss or misuse.

10. International Transfers

Where data is transferred outside the UK, appropriate safeguards are applied in accordance with UK GDPR.

11. Updates

This Privacy Policy may be updated from time to time. The latest version will always be published on our website.