Privacy Policy
Last Updated: 12 October 2026
1. Who We Are
Coast Competitions Ltd (Company No. 17087259) runs this website. Our registered office is 33 Seaview Drive, Ogmore-By-Sea, Bridgend, Wales, CF32 0PB. We are the data controller for the personal data described here, and we handle it in line with the UK General Data Protection Regulation and the Data Protection Act 2018.
The quickest way to reach us about your data is the contact form, which has options for deleting your data, getting a copy of it, and making a complaint. You can also email coastcompetitionsuk@gmail.com.
2. What We Collect
When you create an account we collect your email address. Before you enter a competition we also ask for your first name, last name and UK mobile number, so that we can reach you if you win. We only use your mobile number to contact winners.
When you enter a competition we record which one you entered, how many tickets you bought, your ticket numbers, what you paid, any promo code you used and how you paid. Payments are handled by DNA Payments. They hold your card details. We receive only a partly hidden card number and a transaction reference. If you send a postal entry we keep the details written on it.
At checkout we also note how you reached us, such as the advert, email or website that sent you. If you win, we ask for a delivery address and may ask for proof of your age and identity before we hand over the prize. We record whether you want marketing emails, anything you send us through the contact form, and any optional questions you choose to answer after an order.
We do not ask for your date of birth when you register. You confirm that you are 18 or over instead.
3. Why We Use It
The law says we need a reason, called a lawful basis, for each use of your data. This table sets out ours.
| What we do | Data we use | Lawful basis |
|---|---|---|
| Running your account and your entries | Email, name, mobile, orders, ticket numbers | Contract. We cannot enter you into a competition without it. |
| Taking payment and issuing refunds | Order amount, payment method, the partly hidden card number our payment provider returns | Contract |
| Contacting winners and delivering prizes | Name, mobile, email, delivery address, proof of age and identity | Contract |
| Publishing draw results | Winning ticket number and a partly hidden version of the winner's email | Legitimate interests, so that anyone can check a draw was run fairly |
| Keeping accounting records and proof that draws were fair | Orders, ticket records, draw records | Legal obligation, and legitimate interests in defending legal claims |
| Emails about competitions | Email, which competitions you have entered | Consent where you opted in. Legitimate interests where you gave us your email at checkout and did not opt out. |
| Understanding what our customers want | Optional survey answers, the type of prize you entered for, how you reached us | Legitimate interests, so we can choose prizes people actually want |
| Preventing fraud and abuse | Sign-in records, rate limiting records, payment notifications | Legitimate interests |
| Advertising and measuring adverts | Cookie identifiers and the pages you view | Consent. These only load if you accept them in the cookie banner. |
| Answering messages and data protection requests | Name, email, your message | Legitimate interests, and legal obligation for data protection requests |
We do not sell your data, and we do not use it to make automated decisions that have a legal or similarly significant effect on you.
4. Marketing Emails
We send emails about competitions only if you opted in, or if you gave us your email at checkout and did not untick the box. Every one of those emails has an unsubscribe link, and you can opt out at any time. Emails about your own orders, draw results for competitions you entered, and prizes you have won are not marketing, and we send those regardless.
5. Optional Questions
After an order we may ask a few quick questions, such as who the entry is for or what you would like us to give away next. Answering is always optional and never affects your entry or your chances. We use the answers, together with the type of prize you entered for, to choose better prizes. We keep them for up to two years, we do not share them, and you can delete them from your dashboard whenever you like.
6. What We Make Public
Our draw results show the winning ticket number and a partly hidden version of the winner's email address, for example the first three characters followed by the email provider. We never publish a full email address. We only use a winner's name, photo or story in our marketing if they agree.
7. Who We Share It With
We use a small number of companies to run the site. They act on our instructions and may only use your data to provide their service to us.
| Company | What they do for us | Where |
|---|---|---|
| Google (Firebase and Google Cloud) | Sign-in, our customer database, and the scheduled jobs that run draws and send emails | Database in London. Scheduled jobs in the United States. |
| DNA Payments | Card and wallet payments. They hold your card details. We never see or store the full card number. | United Kingdom |
| Postmark | Sending our emails | United States |
| Render | Hosting this website | May be outside the UK |
| Cloudflare | Website security and delivery | Worldwide |
| Contentful | Website content. Holds winning ticket numbers and partly hidden winner emails, nothing else about you. | May be outside the UK |
| Crumbless | Cookieless website statistics that do not identify you | May be outside the UK |
| Google Analytics, Meta and TikTok | Advertising and measurement, only if you accept cookies | United States and worldwide |
Some of these companies handle data outside the United Kingdom. Where they do, we rely on safeguards recognised under UK law, such as adequacy regulations or the International Data Transfer Agreement. We may also share data where the law requires it, to prevent or detect fraud, or with a buyer if we ever sell the business.
Advertising and measurement cookies only load if you accept them. Our Cookie Policy explains them and how to change your choice.
8. How Long We Keep It
We keep each kind of data only for as long as we have a reason to.
| Data | How long | What happens then |
|---|---|---|
| Completed orders and ticket records | 6 years from the order | Your email and account link are removed |
| Orders that were started but not paid for | 12 months | Deleted |
| Draw records and winner contact details | 6 years from the draw | Deleted |
| Account profile (name and mobile) | Until you ask us to delete it, or 2 years after your last order | Deleted |
| Marketing preferences | Until you unsubscribe | We keep only a note not to email you |
| Optional survey answers | 2 years from the answer | Deleted |
| Data protection requests and complaints | 2 years after we close them | Deleted |
| Security and technical records | Up to 90 days | Deleted |
We keep order and draw records for six years because the law requires businesses to keep accounting records, and so that we can show a draw was run fairly if it is ever questioned.
9. Keeping It Safe
Your data is encrypted when it travels between you and us and while it is stored. Access is limited to the people who need it to run the business. Card payments are handled entirely by our payment provider. If a breach ever put you at risk, we would tell you and the Information Commissioner's Office.
10. Your Rights
You can ask us for a copy of your data, ask us to correct it, ask us to delete it, ask us to stop or limit how we use it, and ask for it in a form you can take elsewhere. You can object to marketing at any time and we will stop.
To use any of these rights, choose the matching option on our contact form. We will email you a link to confirm the request is yours, then reply within one month. If you ask us to delete your data, we will delete your profile, your sign-in and any survey answers, and stop all marketing. We have to keep order and draw records for the period shown above, and we will tell you exactly what we kept and why.
11. Complaints
If you are unhappy with how we have handled your data, please tell us first using the “Privacy complaint” option on the contact form. We will acknowledge your complaint within 30 days, look into it, and tell you the outcome.
You also have the right to complain to the Information Commissioner's Office, the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.
12. Age
Our competitions are only for people aged 18 or over who live in the United Kingdom. We do not knowingly collect data from anyone under 18. If you believe we hold data about a child, contact us and we will delete it.
13. Changes To This Policy
We will update this page when what we do with your data changes, and change the date at the top. If a change is significant we will tell you by email.