Last updated: 17 June 2026
1. Who we are
IDVS LTD, a company registered in England & Wales, trading as Yannis Competitions ("we", "us", "our") operates www.yanniscompetitions.co.uk (the "Site"). We are the data controller for personal data collected through the Site and are (or will shortly be) registered with the UK Information Commissioner's Office.
Contact for privacy matters: admin@yanniscompetitions.co.uk
Registered office: IDVS LTD, 87 Peartree Road, Derby, DE23 6QB.
2. What data we collect
- Account data: name, email address, postal address, password (hashed), date of birth (age check).
- Entry data: tickets purchased, competitions entered, skill question answers, ticket numbers issued.
- Payment data: handled by our regulated payment provider (Trust Payments). We do not store full card numbers; we receive only a transaction reference, the last 4 digits and the card brand.
- Postal entry data: name, address, email and competition details provided on your free-entry postcard.
- Technical data: IP address, device and browser type, timestamps, pages viewed, referring URL.
- Marketing preferences: whether you have opted in to email updates about new competitions and winners.
- Communications: emails, contact-form messages and any correspondence you send us.
3. How we use your data and our lawful basis
| Purpose | Lawful basis (UK GDPR Art. 6) |
|---|---|
| Create and manage your account; process entries; issue ticket numbers; run the draw; deliver prizes. | Performance of a contract. |
| Take payment and prevent payment fraud. | Performance of a contract; legitimate interests. |
| Age and identity verification (winners, suspected fraud). | Legal obligation; legitimate interests. |
| Send service emails (receipts, draw results, prize-claim instructions). | Performance of a contract. |
| Send marketing emails about new competitions. | Consent — you can withdraw at any time. |
| Publish winner first name, town and ticket number. | Legitimate interests / condition of the s.339 Gambling Act 2005 exemption. |
| Comply with tax, accounting and regulatory record-keeping. | Legal obligation. |
| Site analytics, security, abuse prevention. | Legitimate interests. |
4. Who we share your data with
- Trust Payments — our payment processor (card payments, fraud screening).
- Hosting and infrastructure providers — Cloudflare, our database host, and our transactional email provider.
- Couriers / delivery partners — only the winner's delivery details, to deliver prizes.
- Professional advisers — accountants, lawyers, auditors, where strictly necessary.
- Regulators, law enforcement, courts — where required by law.
We do not sell your data and we do not share it with third-party advertisers.
5. International transfers
Some of our processors (e.g. infrastructure providers) may process data outside the UK / EEA. Where they do, we rely on UK adequacy regulations or the UK International Data Transfer Addendum to the EU Standard Contractual Clauses to ensure equivalent protection.
6. How long we keep your data
- Account & entry records: for the life of your account plus 6 years (to meet UK accounting and limitation-period rules).
- Payment transaction records: 6 years from the transaction.
- Winner records: indefinitely, for public verifiability of past draws.
- Marketing preferences: until you withdraw consent or delete your account.
- Technical / analytics logs: typically up to 26 months.
7. Your rights
Under the UK GDPR you have the right to:
- access a copy of the data we hold about you;
- request correction of inaccurate data;
- request deletion (subject to our legal record-keeping duties);
- restrict or object to certain processing;
- withdraw consent for marketing at any time;
- request data portability;
- complain to the UK regulator — the Information Commissioner's Office (ico.org.uk · 0303 123 1113).
To exercise any of these rights email admin@yanniscompetitions.co.uk. We will respond within one calendar month.
8. Security
We use HTTPS across the Site, hashed passwords, principle-of-least-privilege database access, and PCI-DSS-compliant payment processing through Trust Payments. No system is ever 100% secure; please choose a strong password and notify us immediately if you suspect unauthorised access to your account.
9. Cookies
See our Cookie Policy for details of cookies used on the Site and how to manage them.
10. Children
The Site is strictly for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, email us and we will delete it.
11. Changes to this policy
We may update this policy from time to time. The "Last updated" date at the top reflects the latest revision. Material changes will be notified to registered users by email or by an on-site notice.