1Owner and Data Controller

The Owner and Data Controller is SJ Competitions NW LTD, company number 16299709, whose registered office is at Payout Competitions, PO Box 175, Walton, L10 1WX.

Contact email: [email protected].

2Personal Data collected

This Application may collect Personal Data directly from users, automatically through use of the site, or through third-party services. The types of Personal Data collected include:

• Usage Data
• Trackers
• payment information
• billing address
• shipping address
• name
• email address
• order ID
• phone number
• data relating to the point of sale
• referral URL
• page views
• date of birth
• number of Users
• session statistics

Unless stated otherwise, requested Data is treated as mandatory where it is needed to provide the service. Where Data is expressly optional, users may choose not to provide it without affecting the availability or operation of the service. Users can contact the Owner if they are unsure which Data is mandatory.

Cookies and other tracking tools may be used to provide the requested service and for the other purposes described in the privacy and cookie information. Users are responsible for third-party Personal Data that they obtain, publish or share through the site.

3Data collected automatically

Examples listed by this policy include Usage Data, Trackers, referral URLs, page views, the number of Users and session statistics. Automatic collection can occur when a person visits or uses the website.

Usage Data may include technical and browsing information such as IP addresses or domain names, URI addresses, request times and methods, response-file sizes and server-status codes, country of origin, browser and operating system characteristics, time spent on pages, navigation paths, and other device or IT-environment parameters.

4Data provided by users

Information supplied by users can include payment information, billing and shipping addresses, name, email address, order ID, phone number, date of birth and other information submitted when registering, purchasing, contacting the business or joining a mailing list or newsletter.

5How and where Data is processed

Methods of processing

The Owner takes appropriate security measures to help prevent unauthorized access, disclosure, alteration or destruction of Data. Processing is carried out with computers and/or IT-enabled tools under organizational procedures connected to the stated purposes.

Data may be accessible to people involved in operating the site, including administration, sales, marketing, legal and system-administration personnel, and to external providers such as technical suppliers, mail carriers, hosting providers, IT companies and communications agencies. Where necessary, external parties may be appointed as Data Processors. An updated list can be requested from the Owner at any time.

Place of processing

Processing takes place at the Owner’s operating offices and at other locations where the parties involved in processing are based. Depending on the user’s location and the services involved, Data may be transferred to countries other than the user’s own.

Retention

Unless a more specific period is stated, Personal Data is kept for as long as necessary for the purpose for which it was collected. It may be retained for longer where required by law or where continued retention is supported by the user’s consent.

6Purposes of processing

Personal Data is collected for the following purposes:

• Providing the service
• Complying with legal obligations
• Responding to enforcement requests
• Protecting the Owner’s, users’ or third parties’ rights and interests
• Detecting malicious or fraudulent activity
• Hosting and backend infrastructure
• Displaying content from external platforms
• Traffic optimization and distribution
• Platform services and hosting
• Analytics
• Building and running the application
• Contacting users
• Tag management

Users can find further detailed information about each purpose, and the specific Personal Data used for it, in section 7 below.

7Processing activities and services

Personal Data is collected for the following purposes and using the following services. Each card sets out what the service does, the Personal Data it processes, who provides it and where processing takes place.

• Analytics

  WooCommerce Order Attribution Tracking

  Used to connect online-order information with marketing activities, channels or campaigns so their effectiveness can be measured.

  • page views
  • referral URL
  • Trackers
  • Usage Data

  ProviderThis Application

• Analytics

  Google Analytics 4

  Google uses collected Data to examine use of the site, prepare reports and share information with other Google services. Google may use collected Data to contextualize and personalize advertising. IP addresses are used at collection time and discarded before the Data is logged in a Google data centre or server.

  • number of Users
  • session statistics
  • Trackers
  • Usage Data

  ProviderGoogle Ireland Limited

  PlaceIreland

• Building and running the Application

  WordPress (self-hosted)

  The website is built and run by the Owner using the WordPress content-management system.

  • date of birth
  • Usage Data

  ProviderThis Application

• Contacting the User

  Contact form

  Information entered into a contact form may be used to respond to enquiries, quote requests and other requests.

  • email address
  • Usage Data

  ProviderThis Application

• Contacting the User

  Mailing list or newsletter

  A user’s email address may be added to a contact list for commercial or promotional email. An address may also be added after signing up to the site or making a purchase.

  • email address
  • Trackers
  • Usage Data

  ProviderAs described by this Application

• External content

  Font Awesome

  Font Awesome is used to display typeface and icon content on site pages. The service may collect traffic information on pages where it is installed.

  • Trackers
  • Usage Data

  ProviderFonticons, Inc.

  PlaceUnited States

• External content

  Google Fonts

  Google Fonts is used to incorporate typeface content into site pages.

  • Trackers
  • Usage Data

  ProviderGoogle LLC

  PlaceUnited States

• External content

  YouTube video widget

  YouTube is used to display video content within the site.

  • Trackers
  • Usage Data

  ProviderGoogle LLC

  PlaceUnited States

• Hosting and backend infrastructure

  Cloudways

  Cloudways is a hosting and backend service provided by DigitalOcean, LLC. Distributed servers may make the precise storage location difficult to determine.

  • various Data as specified in the provider’s privacy policy

  ProviderDigitalOcean, LLC

  PlaceUnited States

• Platform services and hosting

  WooCommerce

  WooCommerce is used as the WordPress e-commerce platform. Such platforms can provide functions including user registration, databases, e-commerce, analytics and payment processing.

  • billing address
  • point of sale data
  • email address
  • name
  • order ID
  • payment information
  • phone number
  • shipping address
  • Trackers
  • Usage Data

  ProviderThis Application

• Tag management

  Google Tag Manager

  Used to manage tags and scripts centrally. Data can flow through tag-management services and may potentially be retained.

  • Trackers
  • Usage Data

  ProviderGoogle Ireland Limited

  PlaceIreland

• Traffic optimization

  jsDelivr CDN

  Used to distribute site content through servers in different countries and optimize performance.

  • Usage Data

  ProviderProspect One Sp. z o.o. sp. k.

  PlacePoland

• Traffic optimization

  Cloudflare

  Cloudflare filters communications between the website and the user’s browser and can also collect analytical information from this Application.

  • Trackers
  • various Data as specified in Cloudflare’s privacy policy

  ProviderCloudflare, Inc.

  PlaceUnited States

8UK data protection complaints

UK users may complain directly to the Owner about how their Personal Data is handled before escalating the matter to the Information Commissioner’s Office. The Owner will acknowledge a complaint within 30 days of receipt and respond without undue delay, keeping the user informed about the steps taken and the outcome.

9Legal bases for processing

The Owner may process Personal Data where one of the following applies:

• The user has given consent for one or more specific purposes.
• Processing is necessary to perform an agreement with the user or to take pre-contractual steps.
• Processing is necessary to comply with a legal obligation.
• Processing relates to a task carried out in the public interest or under official authority.
• Processing is necessary for legitimate interests pursued by the Owner or a third party.

Users may ask for clarification about the particular legal basis that applies, and whether providing Personal Data is a statutory requirement, a contractual requirement, or necessary to enter into a contract.

10Further retention information

• Data collected for performance of a contract is retained until that contract has been fully performed.
• Data processed for legitimate interests is retained for as long as needed to fulfil those interests.
• Data may be kept longer where the user has consented and has not withdrawn consent.
• Longer retention may also be required by law or by an order from an authority.

Once the applicable retention period expires, Personal Data is deleted. Some rights cannot then be exercised over Data that no longer exists.

11Your rights under GDPR

Users may exercise the following rights in respect of Data processed by the Owner:

• Withdraw consent

  Consent can be withdrawn where it was previously given for processing.

• Object to processing

  Users may object where processing is based on a legal basis other than consent, subject to applicable law.

• Access Data

  Users may ask whether Data is being processed, obtain information about the processing and receive a copy.

• Rectification

  Users may check accuracy and ask for Data to be updated or corrected.

• Restriction

  Users may ask for processing to be restricted. In such cases the Data will generally only be stored.

• Erasure

  Users may request deletion or removal of their Personal Data.

• Data portability

  Users may receive Data in a structured, commonly used, machine-readable format and, where technically feasible, have it transferred to another controller.

• Complaint

  Users may lodge a complaint with the competent data-protection authority.

• International transfers

  Users may ask about the legal basis for transfers abroad and the safeguards used to protect transferred Data.

12Right to object

Where processing is carried out in the public interest, under official authority or for legitimate interests, a user may object by giving reasons connected with their particular situation.

Where Personal Data is processed for direct marketing, users may object at any time, free of charge and without having to give a reason. After such an objection, the Data will no longer be processed for direct-marketing purposes.

13Exercising your privacy rights

Requests can be sent to the Owner using the contact details in this policy, by email to [email protected]. Requests are free of charge and will be answered as early as possible and in any event within one month, with the information required by law.

Where Data is corrected, erased or restricted, the Owner will communicate that change to recipients to whom the Data was disclosed unless doing so is impossible or would involve disproportionate effort. Users may ask to be told who those recipients are.

14Additional information

Legal action

Personal Data may be used by the Owner for legal purposes in court or in steps leading to possible legal action arising from improper use of the site or its services. Personal Data may also have to be disclosed when requested by public authorities.

Contextual information

Additional and contextual information about particular services, or about the collection and processing of Personal Data, may be supplied to users on request.

System logs and maintenance

For operation and maintenance, this site and any third-party services may collect system logs recording interactions with the site, and may use other Personal Data such as IP addresses.

Information not included in this policy

Users may request further details about collection or processing from the Owner using the contact information above.

15Changes to this policy

The Owner reserves the right to change this privacy policy. Users may be notified on this page, within the Application and, where technically and legally feasible, through available contact information. Users are encouraged to check this policy regularly. Where a change affects processing based on consent, new consent will be obtained where required.

16Key definitions

• Personal Data / Data

  Information that directly or indirectly, alone or together with other information, allows a natural person to be identified or identifiable.

• Usage Data

  Information collected automatically through this site or third-party services, including technical, request, browser, device and navigation information.

• User

  The individual using the Application who, unless stated otherwise, is the Data Subject.

• Data Subject

  The natural person to whom Personal Data relates.

• Data Processor / Processor

  A person, authority, agency or other body processing Personal Data on behalf of the Controller.

• Data Controller / Owner

  The person or body that determines the purposes and means of processing Personal Data, including relevant security measures.

• This Application

  The means by which the user’s Personal Data is collected and processed.

• Service

  The service provided by this Application as described by the site’s terms and information.

• European Union / EU

  For this policy, references include current EU member states and the European Economic Area unless otherwise stated.

• Cookie

  A Tracker consisting of a small set of data stored in the user’s browser.

• Tracker

  Technology such as cookies, unique identifiers, web beacons, embedded scripts, e-tags or fingerprinting that can track users by accessing or storing information on their device.

17Practical privacy options

In practice, this policy gives you the following options:

• Ask what information the business holds and request access to it.
• Ask for information to be corrected.
• Ask to be forgotten, that is, request deletion.
• Ask for Data to be ported to another service.
• Manage your privacy preferences through the controls provided.

To use any of these, email [email protected]. See section 13 for how long a response takes.

18Source

This policy restates the privacy information published for payoutcompetitions.co.uk. The source policy states that it was last updated on 6 July 2026.