YOUR DATA · YOUR CHOICES
Privacy notice
Updated 18 October 2026
Who to contact
Crown Prize Co operates this website. Contact [email protected] about personal data. Controller postal address: Not yet supplied. The controller's full legal identity and address must be completed before collecting real customer data.
Information we hold
Account data includes username, email, first and last name, phone number and postal address. Passwords are stored as one-way hashes. We also hold ticket numbers, entry and order references, ticket values, voucher use, account status, privacy requests and security activity. Login and signup limits use keyed representations of account identifiers and IP addresses. Web server logs can separately contain IP addresses and request metadata. We record the last signed-in request time per account to show aggregate activity from the previous five minutes on the private Pi dashboard. This is an estimate of recent activity, not continuous connection tracking. Explicit sign-out clears that timestamp; account erasure removes it.
Why data is used
Account and entry information supports sign-in, order records, ticket management, support, testing and draw administration. Security records help prevent misuse. Marketing preferences are optional, default off and can be changed in Account; this service sends no marketing. Before live operation, the controller must document the correct lawful basis for each purpose, including contractual administration, legitimate interests, any legal obligations and separate marketing consent where required.
Who can access it
You can access your own profile, tickets and orders. Reviewed admin messages are stored in a restricted email outbox with recipient details, subject, content, purpose and submission status. The administrator can view customer information for administration and support. This service has no live payment provider and does not collect card numbers, security codes, Apple Pay tokens or bank details. When configured by the owner, Gmail receives recipient addresses, message content and submission metadata for selected account, support and winner messages. Sending stays disabled until private credentials are configured. This feature does not read Gmail inboxes. No analytics service is connected. Hosting and backup operators may access stored data; live suppliers, transfers and processing agreements must be disclosed and assessed before launch.
Cookies
A necessary session cookie keeps you signed in, remembers your basket and supports request protection. It is not a marketing cookie. It expires when the browser session ends; server-side login also has idle and absolute time limits. This service does not add advertising cookies.
Access, correction and portability
In Account you can correct contact details and download your profile, tickets, orders, email history and privacy request history as JSON after confirming your password. Contact support for other personal data held about you, a fuller access request, correction, restriction, objection or portability where applicable. The self-service export does not limit your statutory rights.
Delete my account
The Account page has a password-protected deletion request. Account access and marketing preferences are disabled immediately. If no active tickets or outstanding winner claim require contact, identifying profile fields are removed. Otherwise a request is queued for review and necessary details remain while tickets or prize claims are resolved. The administrator cannot erase the sole admin account through this customer flow.
Erasure is not absolute. Where information needs to be retained for a lawful purpose, the controller must explain what is retained, why and for how long. This service retains pseudonymous ticket, order and audit records linked to an internal account identifier after profile removal. They are not described as fully anonymous. A closed account cannot be logged into, and we do not claim that account deletion erases backups or third-party records automatically.
Retention and security
The email worker cancels queued messages older than 24 hours, clears stored message addresses/content after 30 days and removes terminal email metadata after 90 days. Cleanup requires the worker to run. Account closure cancels queued messages and clears local email contact/content earlier. Gmail Sent, Google-held records, recipient copies and backups require separate retention and erasure handling. Test accounts are kept while the account service is being used unless an erasure request is completed sooner. The owner must review and clear test data, logs, exports and backups when testing ends. Short-lived throttling records are periodically removed. Before real operation, documented retention periods, secure backup disposal and a process to reapply erasures after restoring backups are required. This service does not run a comprehensive automatic retention schedule.
Controls include password hashing, protected sessions, request verification, login throttling, restricted administration and checks preventing access to another customer's orders. No system can promise absolute security. Do not submit real payment credentials or unnecessary sensitive information.
Requests and complaints
Email [email protected] for updates on pending requests or to exercise your rights. We may request proportionate information to verify your identity. Requests should be answered without undue delay and ordinarily within one month, subject to lawful extensions explained to you. You may complain to the Information Commissioner's Office. Do not send passwords or card details.