PRIVACY POLICY

Your Brand Ltd ("Your Brand", "we", "us", "our") is the data controller for personal data collected through yourbrand.example. This Privacy Policy explains what personal data we collect, how we use it, and the rights you have under UK GDPR and the Data Protection Act 2018.

What we collect

When you create an account or enter a Competition we collect: your name, email address, mobile phone number, billing address, date of birth (for age verification), and payment details (processed by our PCI-compliant payment provider — we do not store your full card number). We also collect technical data including IP address, device type, browser, and pages viewed, and any communications you send us.

How we use it

We process your personal data to: operate Competitions and draw winners, take payment and dispatch prizes, verify your age and identity, prevent fraud and account abuse, comply with legal and regulatory obligations, and (with your consent) contact you about future Competitions, offers and news. The legal bases we rely on are contract performance (running the Competition you entered), legal obligation (age verification, anti-fraud, accounting), legitimate interest (site security, service improvement) and consent (marketing communications, optional cookies).

Who we share it with

We share personal data only with service providers who help us operate the Website: our payment processor, hosting and database providers, email and SMS delivery services, analytics tools, and customer support tools. All processors are bound by data-processing agreements and may only use your data on our instructions. We will not sell your personal information to any third party. We may disclose data where required by law or to protect our legal rights.

How long we keep it

Account data is kept while your account is active and for up to 6 years after closure to meet accounting and legal requirements. Marketing preferences are kept until you unsubscribe. Anonymous analytics data may be retained indefinitely.

Your rights

Under UK GDPR you have the right to: access the personal data we hold about you, correct inaccurate data, request erasure, restrict or object to processing, request data portability, and withdraw consent for marketing at any time. To exercise any of these rights, email hello@yourbrand.example. You can also complain to the Information Commissioner's Office (ico.org.uk) if you believe we have mishandled your data, though we would appreciate the chance to put things right first.

International transfers

Some of our service providers are based outside the UK. Where data is transferred internationally, we rely on UK adequacy decisions or Standard Contractual Clauses to ensure your data remains protected.

Cookies

We use cookies and similar technologies as described in our Cookie Policy.

Changes to this policy

We may update this Privacy Policy from time to time. The latest version will always be available on this page. Material changes will be communicated via email or an on-site notice.

Contact

If you have questions about this Privacy Policy or how we handle your data, contact us at hello@yourbrand.example.