Controller & contact
The Great Change UK (company no. [Company number], registered office [Registered office]) is the data controller. Contact: support@thegreatchangeuk.com.
What data we collect
- Account & billing (via Stripe): name, email, masked payment details (token/last4), billing country, transaction history.
- Winner verification: age and UK residency checks (e.g., ID/address confirmation) where required before prize payment.
- Communications: messages you send us and our replies.
- Technical: essential cookies/consent logs; security and error logs.
Purposes & lawful bases
| Purpose | Lawful basis |
|---|---|
| Process subscriptions, run draws, contact winners, pay prizes | Contract (Art 6(1)(b)) |
| Age/residency verification, record-keeping, AML where applicable | Legal obligation (Art 6(1)(c)) |
| Security, fraud prevention, service improvement, reporting | Legitimate interests (Art 6(1)(f)) |
| Non-essential cookies or direct marketing (if introduced) | Consent (Art 6(1)(a)) |
Sharing
We use processors to deliver the service, including Stripe (payments), hosting/email providers, and (if required) verification vendors. We do not sell personal data.
International transfers
Where data is transferred outside the UK/EEA, we rely on appropriate safeguards (e.g., EU SCCs/UK IDTA) and supplementary measures where necessary.
Retention
- Billing/transactions: retained for statutory tax/financial periods.
- Winner verification: retained for legally required periods.
- Support messages: retained as operationally necessary.
- Consent records: retained to demonstrate compliance.
Your rights
You may request access, rectification, erasure, restriction, objection, or portability where applicable. To exercise rights, email support@thegreatchangeuk.com. You have the right to complain to the ICO (ico.org.uk).
Children
Our service is for individuals aged 18+ only. We do not knowingly collect data from children.
Security
We use appropriate technical/organisational measures including encryption in transit, access controls, and limited retention.
Changes
We will update this policy if we materially change what we collect or how we use it (including any introduction of analytics/marketing cookies).