Privacy & Cookie Policy

1. Who is responsible for your data?

Lottox.co.uk is the controller of your personal data.

Company number:
Registered address:

Privacy enquiries can be sent to support@lottox.co.uk.

2. Personal data we collect

• Identity and contact data: name, date-of-birth or age-verification information where requested, billing and delivery address, email address and telephone number.
• Account and competition data: account credentials, entry history, ticket numbers, answers, wallet activity, spending limits, account locks, winner verification and prize-delivery records.
• Transaction data: purchases, refunds and payment status. Payment providers process card or banking details; we do not normally receive or store full payment-card numbers.
• Technical and usage data: IP address, device and browser information, security logs, cookie identifiers, pages viewed and interactions with the website.
• Communications: support messages, complaints, survey responses and marketing preferences.
• Winner content: winner name, general location and photographs or video where supplied or separately agreed.

We normally collect data directly from you, from your use of the website, and from payment, delivery, identity-verification or fraud-prevention providers involved in your transaction.

3. How and why we use personal data

Winner selection may be carried out using a random automated process, as described in the Competition Terms. Selection is based on eligible entries rather than behavioural profiling.

4. Who we share data with

We share only what is reasonably necessary with:

• hosting, website, email, customer-support and IT-security providers;
• payment gateways, banks and fraud-prevention providers;
• delivery companies, prize suppliers and identity-verification providers;
• professional advisers, insurers, auditors and accountants;
• regulators, law-enforcement bodies, courts, tax authorities or the Advertising Standards Authority where disclosure is legally required or reasonably necessary; and
• a buyer or successor if our business or assets are reorganised or sold, subject to appropriate confidentiality and data-protection safeguards.

Service providers may use personal data only for the agreed service and must protect it appropriately. We do not sell your personal data.

5. International transfers

Some technology providers may process information outside the UK. Where this happens, we use an applicable UK adequacy regulation or appropriate safeguards such as the UK International Data Transfer Agreement or UK Addendum. Contact us if you would like information about the safeguard used for a particular provider.

6. How long we keep information

We keep personal data only for as long as needed for the purpose collected, including legal, tax, accounting, fraud-prevention and complaint requirements. Our usual starting points are:

• account information: while the account is active and for up to six years after the last relevant transaction or closure;
• orders, entries, refunds, wallet and prize records: normally six years after the relevant transaction or competition;
• support and complaint correspondence: normally up to six years where it relates to a contract or dispute, and a shorter period for routine enquiries;
• security logs: normally up to 12 months unless needed to investigate an incident;
• marketing preferences: until you opt out, followed by a minimal suppression record so we can respect that choice.

We may keep information longer where a dispute, legal hold, safeguarding concern or regulatory requirement applies, or anonymise it so it can no longer identify anyone.

7. Marketing, cookies and similar technologies

Marketing is optional. We may send electronic marketing where you have consented or where the law permits the customer “soft opt-in”. Every electronic marketing message will identify us and provide a simple way to unsubscribe. You can also opt out by contacting support@lottox.co.uk. Opting out does not stop essential account, order, entry or winner communications.

We use essential cookies and similar technologies to provide sign-in, basket, checkout, security, preferences and other requested functions. Analytics, advertising or other non-essential technologies are used only where an applicable consent or exemption permits them. You can use the cookie controls displayed on the website to change non-essential choices.

8. Your data-protection rights

Depending on the circumstances, you may have the right to:

• ask for a copy of your personal data;
• correct inaccurate or incomplete data;
• ask us to erase data or restrict how it is used;
• object to processing based on legitimate interests and object at any time to direct marketing;
• receive certain data in a portable format;
• withdraw consent without affecting earlier lawful processing; and
• ask for human review where a solely automated decision has a legal or similarly significant effect.

These rights are not absolute. We may need to verify your identity and may retain information where law requires or permits us to do so. We normally respond within one month.

9. Contact, complaints and changes

Questions and rights requests should be sent to support@lottox.co.uk or posted to:

You also have the right to complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/. We would appreciate the opportunity to address your concern first.

We may update this notice when our services, suppliers or legal obligations change. The current version and review date will remain available on this page.