Prize Draw Privacy Notice

BOODIL LTD - PRIZE DRAW PRIVACY NOTICE

We are Boodil Ltd (we, us, our) and we are committed to protecting the privacy and security of your personal data. This Prize Draw Privacy Notice (Privacy Notice) describes how, as the controller of your personal data, we collect, use and look after your personal data when you enter a prize draw via our website https://www.boodil.com (our Website).  

1. Important information 

1.1 This Prize Draw Privacy Notice supplements the other notices and terms published on our Website (including our website privacy notice (our Privacy Policy), website terms of use and our prize draw terms and conditions) and is not intended to override them. For more detailed information as to how we collect, use and look after your personal data and our lawful basis on which we may process data, please read our Privacy Policy https://www.boodil.com/privacy .

1.2 To assist you further in understanding this Privacy Notice, we have set out at the end a glossary of terms used in this Privacy Notice.

2. Contact us

2.1 If you have any questions about this Privacy Notice, including any requests to exercise your legal rights, please contact us in writing, either by sending an email to info@boodil.com or by post to Unit 80, Atlantic Business Centre, Atlantic Street, Broadheath, Altrincham WA14 5NQ. 

2.2 You have the right to make a complaint at any time to the ICO at www.ico.org.uk. We would, however, appreciate the chance to deal with your concerns before you approach the ICO so please contact us in the first instance. 

2.3 It is important that the data we hold about you is accurate and current, therefore please keep us informed of any changes to your personal data.

3. How personal data is collected

3.1 We collect personal data in the following ways:

3.1.1 directly from you when you purchase a product using Boodil, you register for an account, submit an entry to one of our prize draws or otherwise or correspond with us (by an enquiry form on our Website, post, phone or email);

3.1.2 from publicly available sources such as credit reference agencies, based inside the UK;

3.1.3 from automated technology such as cookies, when you browse and interact with our Website; and 

3.1.4 third parties such as analytics providers, advertising networks, search information providers or our suppliers such as website support and maintenance providers.

4 What personal data we collect and how we use it

4.1 When you enter a prize draw, we may collect, store and use the following types of personal information:

4.1.1 personal contact details such as first name, last name, email address, telephone number and home address, and your date of birth, which allow us to run our prize draws, verify your identity and age and provide information to you and our regulators about our prize draws.  If you win a prize, we may publish your name on our Website as a winner of a prize;

4.1.2 your preferences in receiving marketing from us, so we know if you would like to receive further information on other prize draws we may run from time to time and how we should contact you; and

4.1.3 such other personal information which you may have provided to us when you purchased a product via Boodil or registered for an account with us, such as your transaction history and bank account and payment card details to verify your age, identity and eligibility to enter our prize draws.

4.2 We also collect, use and share aggregated data. However, if we combine aggregated data with your personal data so that it can directly or indirectly identify you, we treat this as your personal data.

4.3 Our prize draws are not intended for individuals under the age of 16 and we do not knowingly collect data relating to those individuals.

4.4 In order to enter you (at your request) in a prize draw, we will need to access and use your personal data and we may also need to do so to comply with laws.  If you fail to provide any personal information we need for these purposes, then we may not be able to enter you into our prize draw or contact you if you win our prize draw. We will notify you of this at the relevant time. 

4.5 For more information on the lawful basis upon which we may rely on to process your personal data please see our Privacy Policy https://www.boodil.com/privacy .

5. Marketing 

5.1 You will only receive marketing communications from us if you have entered into a prize draw or provided your consent to receive marketing communications, and you have not opted out of receiving marketing communications, unsubscribed from our mailing list or withdrawn your consent.

5.2 We will not share your personal data with third parties for their marketing purposes.

6. Change of purpose 

6.1 We will only use your personal data for the purpose that we originally collected it for, unless we reasonably consider that we need to use it for another reason and that reason is compatible with the original purpose or we have a lawful basis to change the purpose.

6.2 If we need to use your personal data for an unrelated purpose, we will notify you and we will explain the legal basis which allows us to use your personal data in this manner.

6.3 We may process your personal data (without your knowledge or consent) where this is required or permitted by law.

7. Who we share your personal data with 

7.1 In order to run our prize draws, we may share your personal data with:  

7.1.1 those third parties that have donated prizes to our prize draw so that they can contact you about your prize; 

7.1.2 the Advertising Standards Authority, who independently regulate prize promotions; and 

7.1.3 our service providers, acting as processors, including support service providers who operate and maintain our website.

7.2 Where we engage third parties to process data on our behalf, we ensure wherever possible that appropriate measures are in place to respect the security of your personal data and any processing is done in accordance with the law. For more information as to the measures we put in place, please see our Privacy Policy https://www.boodil.com/privacy .

8. International transfers

8.1 Where a third party is based outside the UK, we may transfer your personal data outside the UK. For more information as to the measures we put in place to protect your personal data on any transfer of your personal data, please see our Privacy Policy https://www.boodil.com/privacy .

9. Data retention

9.1 We will only keep the personal data we collect for the sole purpose of running a prize draw you have entered for as long as necessary to run that prize draw and comply with any legal, accounting, or reporting requirements we are under.  We may keep other personal information collected about you for other purposes for longer, please see our Privacy Policy https://www.boodil.com/privacy for further details on this.   

9.2 We may also anonymise your personal data (so that it can no longer be associated with you) for research or statistical purposes. We can use anonymised information indefinitely without further notice to you. 

10. Your legal rights

10.1 Under data protection law, you have certain legal rights in certain circumstances. Your legal rights in relation to your personal data are set out in full in our Privacy Policy https://www.boodil.com/privacy .  If you wish to exercise any of your rights, please contact us.

11. Updates

11.1 We may change this Privacy Notice from time to time by updating this page.  Please check it regularly to ensure you are aware of any changes.

11.2 This Privacy Notice was created in December 2022.

12. Glossary

- Aggregated data - Information such as statistical or demographic data which may be derived from personal data but which cannot by itself identify a data subject.

- Controller - A body that determines the purposes and means of processing personal data.

- Data subject - An individual living person identified by personal data (which will generally be you).

- ICO - Information Commissioner’s Office, the UK supervisory authority for data protection issues.

- Personal data - Information identifying a data subject from that data alone or with other data we may hold but it does not include anonymised or aggregated data.

- Processor - A body that is responsible for processing personal data on behalf of a controller.