In plain English: We collect the information we need to run competitions and deliver prizes. We don't sell your data to anyone. We don't spam you. You can ask us to delete your data at any time. This policy explains everything in full.
Who We Are
RaidComps Ltd ("Clutch", "we", "us") is the data controller responsible for the personal data you provide when using our website and entering our competitions.
We are registered with the Information Commissioner's Office (ICO) under registration number [ICO Registration Number].
This Privacy Policy applies to all personal data collected via raidcomps.com and any associated communications. It complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
What Data We Collect
We collect the following categories of personal data:
| Data Type | Examples | When Collected |
|---|---|---|
| Identity data | Full name, date of birth, username | At registration or entry |
| Contact data | Email address, phone number, postal address | At registration or entry |
| Transaction data | Tickets purchased, competition entered, payment amount | At checkout |
| Financial data | Last 4 digits of card, card type (full card details are never stored by us) | At checkout via payment provider |
| Technical data | IP address, browser type, device type, operating system | Automatically when you visit our site |
| Usage data | Pages viewed, time on site, referral source | Automatically when you visit our site |
| Marketing data | Marketing preferences, communication history | When you opt in |
We do not knowingly collect data from persons under the age of 18. If we discover we have collected data from a minor, we will delete it immediately.
How We Use Your Data
We use your personal data for the following purposes:
- To process your competition entries — including verifying eligibility, recording your entries and conducting draws
- To process payments — via our secure payment provider
- To notify and verify winners — contacting you if you win and verifying your identity before releasing a prize
- To deliver prizes — passing your delivery address to our courier
- To comply with legal obligations — including age verification, fraud prevention and record-keeping requirements
- To send service communications — confirmations, receipts, draw results and updates relating to competitions you have entered
- To send marketing communications — only where you have explicitly opted in to receive them
- To improve our website and services — using anonymised analytics data
Legal Basis for Processing
Under UK GDPR, we process your data on the following legal bases:
| Purpose | Legal Basis |
|---|---|
| Processing entries and payments | Performance of a contract (Article 6(1)(b)) |
| Winner notification and prize delivery | Performance of a contract (Article 6(1)(b)) |
| Age verification and fraud prevention | Legal obligation (Article 6(1)(c)) |
| Improving our services | Legitimate interests (Article 6(1)(f)) |
| Marketing communications | Consent (Article 6(1)(a)) |
Where we rely on legitimate interests, we have assessed that our interests do not override your fundamental rights and freedoms.
Who We Share Your Data With
We do not sell, rent or trade your personal data to any third party for their own marketing purposes. We share data only as necessary to operate our competitions:
- Payment processors — to handle transactions securely (e.g. Stripe)
- Courier and logistics providers — to deliver prizes to winners (name and address only)
- IT and hosting providers — who process data on our behalf under strict data processing agreements
- Legal and regulatory authorities — where required by law
All third-party processors are required to handle your data in accordance with UK GDPR and to implement appropriate security measures.
We do not transfer your data outside the UK or European Economic Area without appropriate safeguards in place.
Cookies
We use cookies to make our website function properly and to understand how visitors use it. The cookies we use fall into the following categories:
- Strictly necessary cookies — essential for the website to operate (e.g. session cookies, cart cookies). These cannot be disabled.
- Analytics cookies — used to collect anonymised information about how you use the site (e.g. Google Analytics). These are only set with your consent.
- Functional cookies — remember your preferences (e.g. saved ticket counts). These are only set with your consent.
You can manage your cookie preferences via our cookie banner when you first visit the site, or by adjusting your browser settings at any time.
Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including legal, accounting and reporting requirements:
- Competition entry records: 6 years from the date of the draw (for tax and legal compliance)
- Winner records: 6 years from prize delivery date
- Payment records: 6 years (required by HMRC)
- Marketing preferences: Until you withdraw consent or request deletion
- Account data: Until you close your account, then 30 days
After the applicable retention period, data is securely deleted or anonymised.
Your Rights
Under UK GDPR, you have the following rights regarding your personal data:
- Right of access — request a copy of the data we hold about you
- Right to rectification — ask us to correct inaccurate or incomplete data
- Right to erasure — ask us to delete your data ("right to be forgotten"), subject to legal obligations
- Right to restrict processing — ask us to limit how we use your data
- Right to data portability — request your data in a portable format
- Right to object — object to processing based on legitimate interests or for direct marketing
- Right to withdraw consent — withdraw consent for marketing at any time
To exercise any of these rights, please contact us. We will respond within one month of receiving your request. There is no charge for exercising your rights.
We may need to verify your identity before actioning a request. If we are unable to action a request in full, we will explain why.
Data Security
We take the security of your personal data seriously. Measures we have in place include:
- SSL/TLS encryption on all data in transit
- Encryption of sensitive data at rest
- Access controls limiting who within our organisation can access personal data
- Regular security reviews
- We never store full payment card details — these are handled entirely by our PCI-DSS compliant payment processor
In the event of a personal data breach that is likely to result in a high risk to your rights and freedoms, we will notify you and the ICO without undue delay in accordance with our legal obligations.
Changes to This Policy
We may update this Privacy Policy from time to time. We will notify you of any material changes by posting the updated policy on our website and, where appropriate, by email. The date at the top of this page indicates when the policy was last updated.
Contact & Complaints
If you have any questions about this Privacy Policy or how we handle your data, please contact our Data Protection contact via the details on our Contact page.
If you are not satisfied with how we handle your personal data or respond to your request, you have the right to lodge a complaint with the Information Commissioner's Office (ICO):
- Website: ico.org.uk
- Phone: 0303 123 1113
- Post: Information Commissioner's Office, Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF