People's Postcode Lottery Games Privacy Notice
Last modified - 26/04/2024
About this notice
At People's Postcode Lottery, we take the protection of personal data seriously. We are committed to handling personal data in accordance with UK GDPR (General Data Protection Regulations) and Data Protection Act 2018 at all times.
This Privacy Notice relates to the redemption of prizes for our Exclusive Player Games and sets out what personal data we collect from you, how we use and share that data, how we keep your data safe, and how long we keep it for. We will also explain how we process your data (and the legal basis for doing so) and help you to understand your personal data rights.
Contacting us
If you have any questions about this notice or would like to exercise one of your personal data rights, please contact our Customer Experience Team at info@postcodelottery.co.uk or call on 0808 109 8765.
The personal data we collect and process when you play People's Postcode Lottery
We collect your personal data when you register to play Peoples Postcode Lottery, you can find out more about the data we collect and how we process it, in our Retail Privacy Notice.
The personal data we process when you play Exclusive Player Games
We process your personal data when you register to play Exclusive Player Games. To play Exclusive Player Games we will use your name and email address. If you win, we may also use your postal address to send your prize.
The personal data we collect when you win an Exclusive Player Games Draw and redeem a voucher.
We use a third-party Data Processor (Prizeshark) to host the website used to redeem your Silver Street and Golden Gardens voucher. We use the information you provided us when you signed up to play Exclusive Player Games to populate the third-party websites. You may provide an alternative mailing address or alternative email address for the purposes of redeeming your prize. Your alternative postal or email address will not be updated on your People’s Postcode Lottery account.
We use a third-party Data Processor (Prizeshark) to send out Silver Street and Golden Gardens prizes redeemed on this website.
The personal data we hold on the redemption website
On the website we will hold:
Your name and address
Account ID
Your email address
Any alternative addresses and/or email addresses you provide us
Details of any prizes you have won
How long we hold your data for on the Exclusive Player Games Redemption Website Data will be held by our third-party data processor for a maximum of 7 years.
What do we use your personal data for?
To allow you to redeem prizes won playing Exclusive Player Games and to deliver such prizes to your chosen address.
Data sharing
We will never sell your personal data to a third party. However, our third-party Data Processor (Prizeshark) sometimes shares the personal data we collect from you with the following third parties to distribute redeemed prizes:
DPD
Parcelforce
FedEx
International transfer of your personal data
We may transfer some of your personal data outside of the EEA (European Economic Area). We will only do that if we have an appropriate safeguard in place for example, where:
A country is deemed adequate by the European Commission.
We use standard European Commission approved contracts with the ICO’s approved Addendum or the ICO’s International Data Transfer Agreement.
Where a US organisation is certified under the UK extension to the EU-US Data Privacy Framework (the "UK Extension")
Your personal data rights
Under UK GDPR, you have a number of personal data rights you can exercise over your personal data. You can exercise these rights at any time by calling our Customer Experience Team on 0808 109 8765 or by emailing info@postcodelottery.co.uk.
You have the right:
to ask us not to use your personal data for direct marketing.
to ask us not to process your personal data where it is processed based on legitimate interests if there are no compelling reasons for that processing.
to request from us access to personal information held about you
to ask for the information we hold about you to be rectified if it is inaccurate or incomplete.
to ask that we stop any consent-based processing of your personal data after you withdraw that consent.
to ask, in certain circumstances, to delete the personal data we hold about you.
to ask, in certain circumstances, for the processing of that information to be restricted; and
to ask, in certain circumstances, for data portability.
Your right to complain
We pride ourselves on our high standards of customer service and are fully committed to protecting the personal information you trust us with. If you wish to contact us to query or complain about the way we use your personal data, we will treat the matter with the utmost seriousness. Please direct your query or complaint to our Data Protection Officer at 28 Charlotte Square, Edinburgh, EH2 4ET or by email at data.protection@postcodelottery.co.uk.
If you remain unsatisfied with our handling of your complaint, you can complain to the Information Commissioner's Office (ICO). You can find out more about that right and the complaint process on the ICO website or by calling 0303 123 1113 (local rate) Monday to Friday, 9am and 5pm (excluding bank holidays).
Your right to be informed if your personal data is compromised
In the unlikely event that the personal data we hold is breached or compromised in a significant way that would be a high risk to your rights and personal freedoms, we'll contact you without delay to let you know:
What happened and how it happened
What data was affected and what that means to you
What we are doing about it and how you can stay informed
How you can contact our Data Protection Officer
How we keep your personal data safe
At People's Postcode Lottery, information security is very important to our business. We are fully committed to ensuring information security, confidentiality and integrity.