Privacy Notice

8.1 Who we are

The data controller is Safebreaks Devon CIC (Company No. 12106234), Riviera House, 26 Salisbury Road, Newton Abbot TQ12 2DF, registered with the Information Commissioner's Office under registration ZB600155. You can contact us about your data through our contact page.

8.2 What we collect

When you enter a draw we collect your first name, last name, email address and phone number, together with your ticket numbers, the amount paid, the payment status and our payment provider's reference, the version of these terms you accepted, the time you accepted them, the time you confirmed you are 18 or over, and whether you chose to receive marketing. If you join the notify list we collect your email address and your marketing preference.

8.3 What we never collect

We never see or store your bank or card credentials. Payment is handled by GoCardless on their own secure pages; we receive only confirmation that payment succeeded or failed and a payment reference.

8.4 Why we use your data, and our lawful bases

We use your details to run the lottery: to allocate and email your tickets and to contact you if you win (performance of a contract); to keep the records and submit the returns required of a registered small society lottery, including to Teignbridge District Council, and to verify age where needed (legal obligation); to enforce the per-person ticket limit and prevent fraud (legitimate interests); and to send you news about future draws only where you have actively opted in (consent, which you can withdraw at any time).

8.5 Who we share it with

Your data is processed by the providers who run our systems: GoCardless (payments), Resend (email delivery), and Supabase and Vercel (secure hosting of the lottery database and website). We share figures and, where required, records with Teignbridge District Council as our licensing authority. We never sell your data and never share it for anyone else's marketing.

8.6 How long we keep it

Entry records are kept for the draw and the statutory return that follows it. Ninety days after that return is filed, we delete the email address, phone number and last name from every entry in that draw. Ticket numbers, amounts paid, first names and aggregate figures are kept as the statutory record of the draw. If you opted in to marketing, your email address and first name are kept on a separate marketing list until you unsubscribe. Notify-list emails are kept until you unsubscribe.

8.7 Winner publicity

If you win, we publish your first name in the public winner archive only with your consent, which you can refuse or withdraw at any time. Without it, the archive shows only the winning ticket number.

8.8 Your rights

You have the right to access, correct, delete or restrict your data, to object to processing, to data portability, and to withdraw consent to marketing at any time using the unsubscribe link in any marketing email or by contacting us. If you are unhappy with how we handle your data you can complain to the Information Commissioner's Office at ico.org.uk or on 0303 123 1113.