Privacy Policy
Last updated: April 2026. This policy explains how we collect, use, and protect your personal data.
1. Who We Are
Lush Life Competitions ("we", "us", "our") is the data controller responsible for your personal data. If you have any questions about this Privacy Policy or how we handle your data, please contact us at: privacy@lushlifecomps.co.uk
2. What Data We Collect
We collect and process the following personal data: (a) Identity data: full name, date of birth; (b) Contact data: email address, postal address, phone number; (c) Transaction data: details of tickets purchased, payment records (processed securely via Stripe — we do not store card details); (d) Technical data: IP address, browser type, device information, and cookies; (e) Usage data: how you interact with our website; (f) Marketing preferences: your preferences for receiving communications from us.
3. How We Use Your Data
We use your personal data to: (a) register you as a customer and manage your account; (b) process ticket purchases and administer competitions; (c) notify winners and arrange prize delivery; (d) comply with our legal obligations; (e) send you marketing communications where you have given consent or where we have a legitimate interest to do so; (f) improve our website and services. We will only use your personal data for the purposes for which it was collected, unless we reasonably consider we need to use it for another compatible reason.
4. Legal Basis for Processing
We process your personal data on the following legal bases under UK GDPR: (a) Contract: to fulfil your ticket purchase and competition entry; (b) Legal obligation: to comply with applicable laws and regulations; (c) Legitimate interests: to operate and improve our business, prevent fraud, and ensure security; (d) Consent: for marketing communications (you may withdraw consent at any time).
5. Data Sharing
We do not sell your personal data. We may share your data with: (a) Stripe, our payment processor, to handle transactions securely; (b) Delivery and logistics partners, solely for the purpose of prize delivery; (c) IT and system providers who support our website and operations; (d) Regulatory or law enforcement bodies where required by law. All third parties are required to respect the security of your personal data and treat it in accordance with the law.
6. Cookies
We use essential cookies to operate our website and, where you consent, analytics cookies to understand how visitors use our site. You can manage your cookie preferences through your browser settings. Disabling certain cookies may affect the functionality of the website.
7. Data Retention
We retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including for the purposes of satisfying any legal, accounting, or reporting requirements. Typically, customer account data is retained for 6 years after your last transaction in line with UK tax law requirements. You may request deletion of your data at any time, subject to our legal obligations to retain certain records.
8. Your Rights
Under UK GDPR, you have the following rights: (a) Access: request a copy of the personal data we hold about you; (b) Rectification: request correction of inaccurate or incomplete data; (c) Erasure: request deletion of your personal data in certain circumstances; (d) Restriction: request we restrict processing of your data; (e) Portability: request transfer of your data to another party; (f) Objection: object to processing based on legitimate interests; (g) Withdraw consent: where processing is based on consent, you may withdraw at any time. To exercise any of these rights, contact us at privacy@lushlifecomps.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.
9. Data Security
We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. All payment data is processed by Stripe using industry-standard encryption. Access to personal data within our organisation is restricted to those who need it to perform their role.
10. Children
Our website and competitions are not directed at children under the age of 18. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data about a child, please contact us immediately so we can delete it.
11. Changes to This Policy
We may update this Privacy Policy from time to time. The latest version will always be available on this page, along with the date it was last updated. We encourage you to review this policy periodically.
12. Contact Us
If you have any questions, concerns, or requests regarding this Privacy Policy or our data practices, please contact us at: privacy@lushlifecomps.co.uk