Privacy Policy

2.1 When you create a free account with The Padel Draw (required for all entries — paid and free postal — from Stage 2 onwards), we collect: your full name, home address, email address, contact telephone number, date of birth (to confirm you are 18 or over), and a hashed password. You may also opt in to marketing communications at signup.

2.2 When you enter a competition with a paid ticket (via your account), we additionally collect: your answer to the skill question, and payment information (processed directly by our payment provider, Cashflows — we do not store full card details ourselves; see clause 6).

2.3 When you enter a competition via the free postal route (via your account), you additionally send us a physical letter or postcard containing your name and address (matching your account), phone number, competition name, and your answer to the skill question. Postal letters are securely destroyed after the relevant draw has taken place (see clause 8).

2.4 When you browse the Website we collect: your IP address, browser type and device information, pages visited and time spent on the Website, and cookie data (see clause 9).

2.5 When you contact us directly we collect: any information you choose to include in emails, social media messages, or other correspondence.

2.6 If you win a competition we may additionally collect: bank account details (only if you choose a cash alternative prize), further proof of identity and/or age where we need to verify your eligibility to claim a prize, and photographs or video of you (only if you agree to participate in winner publicity — see clause 7).

2.7 Fraud- and harm-prevention data: to enforce one-account-per-person, respect any spend limits or pauses you have set, apply our £250 monthly platform spend cap (clause 20 of our Terms), and monitor for signs of gambling-related harm, we store lightweight signals such as a normalised (digits-only) copy of your phone number, a normalised (alphanumeric) copy of your address, your chosen monthly spend limit and any pending changes to it, your current pause or self-suspension status, month-to-date spend counters, and a record of the payments you have made — but not your full card number. These are used solely for player protection and fraud checks, never sold or used for unrelated marketing profiling. See clauses 18–20 of our Terms & Conditions for the operational detail.

2.8 Age verification: when you sign up we collect and store your date of birth to confirm you are 18 or over. This is currently a self-declaration check. If we introduce a third-party age-verification provider (see clause 1.4 of our Terms), we will update this policy to describe exactly what additional information is collected, who it is shared with, and how long it is retained. Any evidence you send us manually for age verification (e.g. a passport scan) is kept only for as long as needed to confirm your eligibility, and then securely deleted.

3.1 We only collect and use personal data where we have a valid legal basis to do so.

3.2 Processing your competition entry and payment, verifying your eligibility (age, location), and contacting you if you win — legal basis: performance of a contract with you.

3.3 Preventing fraud and enforcing entry limits — legal basis: our legitimate interest in running fair, legal competitions.

3.4 Complying with Advertising Standards Authority or Gambling Commission requirements, and publishing winner surname and county as proof of a valid draw — legal basis: legal obligation.

3.5 Sending you marketing emails about future competitions — legal basis: your consent, which you can withdraw at any time (every marketing email will include an unsubscribe link).

3.6 Improving the Website through analytics — legal basis: our legitimate interest in understanding how our Website is used.

4.1 We use your personal data to process your entry into a Competition and allocate an entry number; verify you meet the eligibility requirements set out in our Terms & Conditions; contact you regarding your entry, including if you have won; process payments and refunds; investigate and prevent fraud, abuse, or breaches of our Terms & Conditions; comply with our legal obligations, including providing information to the Advertising Standards Authority on request; send you marketing communications about future Competitions (only where you have opted in); and understand how visitors use our Website, so we can improve it.

4.2 We will never sell your personal data to any third party.

5.1 Cashflows (payment processor) — to process ticket payments and any cash prize transfers.

5.2 Our accounting software — to maintain financial records, in a form that does not typically include your full personal contact details.

5.3 Email and SMS service providers — to send entry confirmations, draw reminders, and winner notifications.

5.4 An independent draw witness — to procedurally verify the draw was conducted fairly at the moment it is run. This individual sees the entry list but is bound to confidentiality and does not retain your data. Note: our published mathematical audit trail (see clause 8 of the Terms & Conditions) is the primary verification mechanism; the witness is an additional live check performed alongside it.

5.5 The Advertising Standards Authority — where legally required, to prove a Competition was validly conducted.

5.6 Delivery and courier companies — only for prize winners, to deliver a physical prize to the address you provide.

5.7 Our professional advisers (accountants, solicitors) — where necessary for them to advise us, under confidentiality obligations.

5.8 Law enforcement or regulators — where we are legally required to disclose information, or to prevent or detect fraud or crime.

5.9 We do not transfer your personal data outside the UK. If this changes in future, we will update this policy and ensure appropriate safeguards are in place.

6.1 We do not store your full card details. All payments are processed securely by Cashflows, a UK-authorised, PCI-DSS compliant payment processor. Cashflows’s own privacy policy governs how they handle your card data and is available at cashflows.com/privacy-policy.

6.2 Where a Competition offers a cash alternative prize and you win, we will ask for your bank account details solely to transfer that prize to you, and solely from the winner of that specific Competition.

7.1 If you win a Competition, our Terms & Conditions require that we publish or make available your surname and county of residence, to demonstrate that a valid prize draw took place. This is a requirement of the Advertising Standards Authority’s CAP Code, not an optional marketing choice.

7.2 If you object, you can ask us not to publish this information on our Website by contacting us before the relevant Competition’s Closing Date. We may still need to provide it to the Advertising Standards Authority directly on request.

7.3 Any further publicity (photographs or video of you receiving your prize) will only be used with your separate agreement at the time, as set out in our Terms & Conditions.

8.1 Postal (free) entry letters — securely destroyed immediately after the relevant draw has taken place.

8.2 Entry and account data for non-winning entrants — retained for 12 months after the relevant Competition ends, then deleted, unless you have opted in to marketing (in which case we retain your contact details until you unsubscribe).

8.3 Winner records (name, county, prize won, evidence of eligibility) — retained for 6 years to meet our accounting, tax, and Advertising Standards Authority evidentiary obligations.

8.4 Payment records — retained for 6 years to meet HMRC and general UK accounting record-keeping requirements.

8.5 Marketing consent records — retained until you withdraw consent, plus a reasonable period afterwards to evidence that the withdrawal was actioned.

8.6 Website analytics data — retained for up to 26 months, in line with default retention on standard analytics platforms.

9.1 Our Website uses cookies to remember your ticket basket, keep you logged in if you have an account, understand how visitors use the Website, and — where you consent — support advertising and retargeting (for example, via Meta Pixel or Google Analytics).

9.2 You can control or disable cookies through your browser settings, though this may affect the functionality of the Website, including the ability to complete a ticket purchase. Where a cookie banner is presented on your first visit, your choice is stored and respected on subsequent visits.

10.1 Under UK GDPR you have the right to: (a) access the personal data we hold about you; (b) correct inaccurate or incomplete data; (c) request erasure of your data; (d) restrict processing of your data in certain circumstances; (e) receive your data in a portable format; (f) object to processing based on legitimate interest, including direct marketing, at any time; and (g) withdraw consent for anything we process based on your consent (e.g. marketing emails), at any time.

10.2 Please note that withdrawing your data before a draw takes place means we cannot contact you if you win, and you will not be entitled to a refund of any entry fee as a result (see clause 9 of our Terms & Conditions).

10.3 To exercise any of these rights, contact us at hello@thepadeldraw.co.uk. We will respond within one month, as required by law.

10.4 If you are unhappy with how we have handled your data, you also have the right to complain to the Information Commissioner’s Office (ICO) at ico.org.uk — though we would appreciate the chance to resolve any concern directly first.

11.1 Our Competitions and Website are not intended for anyone under 18. We do not knowingly collect personal data from children. If we become aware that we have inadvertently collected data from someone under 18, we will delete it promptly.

12.1 We take appropriate technical and organisational measures to protect your personal data against unauthorised access, loss, or misuse. This includes secure payment processing via Cashflows, restricted access to entry data, encrypted storage, and secure destruction of postal entries after each draw.

12.2 No method of transmission or storage is completely secure, but we take reasonable steps appropriate to the sensitivity of the data involved.

13.1 We may update this Privacy Policy from time to time, for example if we start using a new supplier or change how we run Competitions. The version published on our Website at the time you enter a Competition applies to that entry. We will update the “Last updated” date at the bottom of this page whenever changes are made.

The Padel Draw Ltd

Company No. 17363280

Phone: +44 (0)115 647 0600 (weekdays, 9–5)

Contact: hello@thepadeldraw.co.uk

Postal entries: 5 Brayford Square, London E1 0SG (postal competition entries only)

Website: thepadeldraw.co.uk