Privacy Policy
Your privacy is important to us. This policy explains how we collect, use, and protect your personal information.
Contents
1. Introduction
Mansion Raffle Limited ("we", "us", "our") is committed to protecting your privacy and personal data. This Privacy Policy explains how we collect, use, store, and protect your personal information when you use our website and services.
We are the data controller for the personal information we process about you. This means we decide how and why your personal data is processed.
Data Controller Details:
Company: Mansion Raffle Limited
Registration: England and Wales
Email: privacy@mansion-raffle.com
Address: [Registered Office Address]
2. Information We Collect
2.1 Personal Information You Provide
When you participate in our raffles or use our services, you may provide:
- Name and contact details (email, phone, address)
- Date of birth for age verification
- Payment information (processed securely by our payment providers)
- Identity verification documents (when required)
- Communication preferences
2.2 Information We Collect Automatically
When you visit our website, we automatically collect:
- IP address and location data
- Browser type and device information
- Pages visited and time spent on site
- Referral sources and search terms
- Cookie and tracking data (see our Cookie Policy)
2.3 Information from Third Parties
We may receive information from:
- Payment processors for transaction verification
- Age verification services
- Fraud prevention services
- Social media platforms (if you choose to connect)
3. How We Use Your Information
3.1 Legal Basis for Processing
We process your personal data based on:
- Contract performance: To provide raffle services and fulfill prizes
- Legal obligations: For age verification and regulatory compliance
- Legitimate interests: For fraud prevention and service improvement
- Consent: For marketing communications (where applicable)
3.2 Specific Uses
We use your information to:
- Process raffle entries and manage draws
- Verify your identity and age
- Contact winners and arrange prize delivery
- Process payments and prevent fraud
- Provide customer support
- Improve our website and services
- Send service-related communications
- Send marketing communications (with consent)
- Comply with legal and regulatory requirements
5. Data Security
5.1 Security Measures
We implement appropriate technical and organizational measures to protect your personal data:
- SSL encryption for all data transmissions
- Secure cloud hosting with encryption at rest
- Regular security audits and vulnerability assessments
- Access controls and staff training
- Regular backup and disaster recovery procedures
5.2 Payment Security
We do not store payment card details. All payments are processed by PCI DSS compliant payment providers using industry-standard security measures.
5.3 Data Breach Response
In the unlikely event of a data breach, we will:
- Assess the breach and take immediate containment action
- Notify relevant authorities within 72 hours (if required)
- Inform affected individuals without undue delay
- Investigate the cause and implement preventive measures
6. Data Retention
6.1 Retention Periods
We retain your personal data for different periods depending on the purpose:
| Data Type | Retention Period | Reason |
|---|---|---|
| Account information | 7 years after last activity | Legal requirements |
| Transaction records | 7 years | Financial regulations |
| Marketing consents | Until withdrawn | Ongoing marketing |
| Website analytics | 26 months | Service improvement |
| Support communications | 3 years | Service quality |
6.2 Deletion Process
When retention periods expire, we securely delete or anonymize your personal data unless we have a legal obligation to retain it longer.
7. Your Rights
Under data protection law, you have the following rights:
Right of Access
Request a copy of the personal data we hold about you.
Right to Rectification
Request correction of inaccurate or incomplete data.
Right to Erasure
Request deletion of your personal data in certain circumstances.
Right to Restrict
Request limitation of processing in specific situations.
Right to Portability
Receive your data in a structured, machine-readable format.
Right to Object
Object to processing based on legitimate interests or direct marketing.
7.1 How to Exercise Your Rights
To exercise any of these rights, contact us at privacy@mansion-raffle.com. We will respond within one month of receiving your request.
7.2 Right to Complain
You have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have not handled your personal data properly.
9. Third-Party Services
Our website may contain links to third-party websites and services. This privacy policy does not apply to these external sites.
9.1 Key Third-Party Services
- Payment Processors: Stripe, PayPal (for secure payment processing)
- Analytics: Google Analytics (for website usage analysis)
- Email Services: Mailchimp (for email communications)
- Customer Support: Zendesk (for support ticket management)
9.2 Social Media
Our website may include social media buttons and widgets. These features may collect information about your visit and are governed by the privacy policies of the respective social media companies.
10. Policy Updates
We may update this Privacy Policy from time to time to reflect changes in our practices or legal requirements.
10.1 Notification of Changes
When we make significant changes, we will:
- Update the "Last Updated" date at the top of this policy
- Notify you via email if you have an account with us
- Display a prominent notice on our website
- Request your consent for material changes (where required)
10.2 Previous Versions
Previous versions of this policy are available upon request.
11. Contact Us
If you have any questions about this Privacy Policy or our data practices, please contact us:
Response Times
We aim to respond to all privacy-related inquiries within 5 business days. For urgent matters, please call our support line.