PRIVACY POLICY

Dream Car Competitions respects your privacy and is committed to protecting your personal data.

This Privacy Policy explains how we collect, use, store, share and protect your personal data when you:

• Visit or use our website;
• Create or manage an account;
• Enter a competition or prize draw;
• Purchase competition entries, gift cards or other products;
• Subscribe to marketing communications;
• Contact our customer support team;
• Participate in promotions or offers; or
• Interact with Dream Car Competitions.

This Privacy Policy applies to customers and website users in both Ireland and the United Kingdom.

We process personal data in accordance with applicable data protection legislation, including the EU General Data Protection Regulation (“EU GDPR”), the Irish Data Protection Act 2018, the UK GDPR and the UK Data Protection Act 2018, as applicable.

Dream Car Competitions is responsible for deciding how and why your personal data is processed and is the data controller for the personal data described in this Privacy Policy.

Company/Trading Name: Dream Car Competitions
Registered/Business Address: 33 Great George Street, Leeds, LS1 3AJ, United Kingdom
Email: support@dreamcarcompetitions.com
Telephone: +44 7592 478886
Website: dreamcarcompetitions.com

If you have any questions about this Privacy Policy, your personal data or your data protection rights, please contact us using the details above.

Where required by applicable data protection law because we offer services to individuals in both the EU/EEA and UK, details of any appointed EU or UK representative will be made available here.

Our website, competitions and services are intended only for individuals aged 18 years or over.

We do not knowingly collect personal data from anyone under the age of 18.

If we become aware that we have collected personal data from a person under 18, we will take appropriate steps to delete that information, subject to any legal obligations requiring us to retain it.

Personal data means information relating to an identified or identifiable individual.

Depending on how you interact with Dream Car Competitions, we may collect the following categories of personal data.

Identity Data

This may include:

• First name;
• Last name;
• Username;
• Date of birth; and
• Other information used to verify your identity or eligibility where necessary.

Contact Data

This may include:

• Email address;
• Telephone number;
• Billing address;
• Postal or delivery address; and
• Other contact information you provide to us.

Account and Profile Data

This may include:

• Account username;
• Encrypted or otherwise securely stored authentication information;
• Account preferences;
• Competition history;
• Entries and ticket numbers;
• Marketing preferences; and
• Other information associated with your Dream Car Competitions account.

Transaction Data

This may include:

• Competition entries;
• Purchases;
• Order information;
• Payment status and confirmations;
• Refund information;
• Gift-card transactions; and
• Details relating to prizes or winnings.

We do not normally receive or store complete payment-card details where payments are processed directly by our payment service provider.

Competition Data

This may include:

• Competitions entered;
• Number of entries purchased;
• Ticket or entry numbers;
• Answers to competition questions;
• Entry dates and times;
• Instant-win results;
• Draw results; and
• Information required to administer or verify a prize.

Technical Data

This may include:

• IP address;
• Browser type and version;
• Device type;
• Operating system;
• Time zone;
• Approximate location;
• Cookie identifiers;
• Login information; and
• Other technical information generated when you use our website.

Usage Data

This may include information about how you use our website, such as:

• Pages visited;
• Competitions viewed;
• Links or buttons selected;
• Website interactions;
• Referral source; and
• Website performance and diagnostic information.

Communications Data

We may retain information contained in communications with us, including:

• Customer-support enquiries;
• Emails;
• Complaints;
• Social-media communications; and
• Other correspondence.

Marketing Data

This may include:

• Whether you have opted into marketing;
• Email and SMS subscription status;
• Marketing preferences;
• Interactions with marketing emails or messages; and
• Information used to understand the effectiveness of our marketing campaigns.

We may create aggregated or anonymised information for statistical, analytical and business purposes.

Where information has been properly anonymised so that it can no longer identify an individual, it is not considered personal data.

If aggregated information is combined with other information in a way that allows an individual to be identified, we will treat the resulting information as personal data.

We collect personal data in several ways.

Information You Give Us Directly

You may provide information when you:

• Create an account;
• Enter a competition;
• Purchase entries, products or gift cards;
• Subscribe to emails, SMS or other marketing;
• Claim a prize;
• Contact customer support;
• Complete a form; or
• Otherwise communicate with us.

Information Collected Automatically

When you use our website, certain technical and usage information may be collected through technologies such as:

• Cookies;
• Pixels and similar technologies;
• Server logs; and
• Analytics technologies.

Non-essential cookies and tracking technologies will be used in accordance with applicable consent requirements.

Please see our Cookie Policy for further information.

Information From Third Parties

We may receive personal data from third parties where lawful, including:

• Payment providers;
• Website and infrastructure providers;
• Analytics providers;
• Marketing and communications providers;
• Advertising platforms;
• Fraud-prevention or security providers; and
• Social-media platforms where you interact with us through those services.

We will only process personal data where we have a lawful basis to do so.

Depending on the particular processing activity, our lawful bases may include:

Performance of a contract — where processing is necessary to provide services you have requested, administer an entry or fulfil our obligations to you.

Legal obligation — where we need to process information to comply with applicable law, tax, accounting, regulatory or other legal requirements.

Legitimate interests — where processing is necessary for our legitimate business interests and those interests are not overridden by your rights and freedoms.

Consent — where you have given us valid consent for a particular processing activity, including where consent is required for certain electronic marketing or tracking technologies.

We may use your information for the following purposes:

Account Administration

To create, authenticate, maintain and manage your Dream Car Competitions account.

Competition Administration

To:

• Process competition entries;
• Allocate entry or ticket numbers;
• Record answers to competition questions;
• Administer instant-win competitions;
• Conduct competition draws;
• Determine and verify winners;
• Contact winners; and
• Arrange delivery or collection of prizes.

This processing will generally be necessary to perform our contract with you and administer the competition you have entered.

Processing Transactions

To process purchases, payments, refunds and associated transactions.

Payment information may be processed by our authorised payment service providers.

Customer Support

To respond to questions, complaints, requests and other communications.

Security and Fraud Prevention

To protect our website, customers and business against fraud, misuse, unauthorised activity, cyber-security threats and other potentially unlawful conduct.

Legal and Regulatory Compliance

To comply with applicable legal, regulatory, accounting and taxation requirements and to establish, exercise or defend legal claims.

Website Operation and Improvement

To operate, maintain, troubleshoot and improve our website, services, competitions and customer experience.

Analytics

Where permitted, to understand how customers interact with our website and marketing and to measure website and campaign performance.

Marketing

Where permitted by law, to send information about competitions, promotions, offers, prizes and Dream Car Competitions services.

We may use your contact details to send marketing communications about Dream Car Competitions, including:

• New competitions;
• Competition closing reminders;
• Prize announcements;
• Special offers;
• Promotions;
• Member offers; and
• Other Dream Car Competitions news.

Where consent is required, we will only send electronic marketing after you have provided the necessary consent.

Creating an account or entering a competition does not, by itself, mean that you have consented to all forms of marketing.

In circumstances where applicable law permits marketing to existing customers without separate consent, we may rely on that permitted exception provided all relevant legal conditions are satisfied.

You can unsubscribe from marketing at any time by:

• Selecting the unsubscribe option in an email;
• Using an available preference-management option;
• Replying STOP where an applicable SMS service provides that functionality; or
• Contacting us at support@dreamcarcompetitions.com.

Unsubscribing from marketing will not prevent us from sending essential service communications relating to your account, purchases, competition entries, security, prizes or other transactions.

We may use Klaviyo or another authorised communications platform to manage customer communications, subscriptions and marketing campaigns.

Our website may use cookies, pixels and similar technologies.

These technologies may be used for:

• Essential website functionality;
• Account and security functionality;
• Remembering preferences;
• Analytics and website performance;
• Measuring advertising effectiveness; and
• Personalising or delivering advertising, where permitted.

Where required by applicable law, non-essential cookies and tracking technologies will not be activated until you have provided the required consent.

We may use services such as Google analytics/advertising technologies, Meta technologies and other advertising or analytics platforms where implemented on our website.

You can manage available cookie choices through our website's cookie consent controls.

Further details should be provided in our Cookie Policy, including the technologies used, their purposes and relevant retention periods.

We process information about competition entries to administer Dream Car Competitions fairly and securely.

This may include recording:

• The competition entered;
• Entry or ticket numbers;
• Date and time of entry;
• Competition-question answers;
• Payment status; and
• Draw or instant-win results.

If you win a competition, we may need additional information to:

• Verify your identity and eligibility;
• Contact you;
• Verify the winning entry;
• Arrange prize collection or delivery; and
• Maintain records of competition results.

Subject to applicable law and our competition terms, we may publish limited winner information, such as a winner's name, general location, photograph or prize won.

Where additional consent is legally required for promotional photographs, videos, testimonials or other marketing content, we will obtain that consent as appropriate.

Where we operate instant-win competitions, entry numbers may be allocated and checked against the relevant prize allocation system in accordance with the applicable Competition Terms and Conditions.

If an entry corresponds with an instant-win prize, the customer will be informed in accordance with the rules of that competition.

Information relating to instant-win entries and prizes may be retained for administration, verification, fraud prevention, accounting and legal purposes.

We may share personal data with carefully selected third parties where necessary to operate Dream Car Competitions.

These may include:

• Payment processors;
• Website hosting and cloud infrastructure providers;
• Database and technology providers;
• Email and communications providers, including Klaviyo where applicable;
• Analytics providers;
• Advertising platforms;
• Customer-support providers;
• Fraud-prevention and cyber-security providers;
• Prize suppliers and delivery/transport providers where necessary to fulfil a prize;
• Accountants, solicitors, insurers and other professional advisers;
• Regulators, courts, law-enforcement authorities or government bodies where legally required; and
• A purchaser, investor or successor in connection with a legitimate corporate transaction.

We require service providers processing personal data on our behalf to protect that information and process it only in accordance with our instructions and applicable law.

We do not sell your personal data.

Some of our technology, payment, marketing, analytics or other service providers may process personal data outside Ireland, the European Economic Area (“EEA”) or the United Kingdom.

Where personal data is transferred internationally, we will take appropriate measures required by applicable data protection law.

Depending on the transfer, these safeguards may include:

• A legally recognised adequacy decision;
• Approved contractual safeguards, including applicable standard contractual clauses;
• The UK International Data Transfer Agreement or UK Addendum where applicable; or
• Another lawful transfer mechanism.

You may contact us if you require further information about the safeguards applicable to your personal data.

We use appropriate technical and organisational measures designed to protect personal data against:

• Unauthorised access;
• Accidental loss;
• Destruction;
• Misuse;
• Unauthorised alteration; and
• Unauthorised disclosure.

Access to personal data is restricted to personnel and service providers who have a legitimate need to access it.

No internet-based system can be guaranteed to be completely secure, but we maintain safeguards appropriate to the nature of the information and risks involved.

We retain personal data only for as long as reasonably necessary for the purpose for which it was collected, including to satisfy legal, accounting, taxation, fraud-prevention, contractual and regulatory requirements.

The exact retention period depends on:

• The type of information;
• Why it was collected;
• Whether you maintain an active account;
• The nature of any transactions or competition entries;
• Legal limitation periods;
• Tax and accounting requirements;
• Fraud-prevention and security requirements; and
• Whether information is required in connection with a complaint or legal dispute.

Where information is no longer required, it will be securely deleted or anonymised in accordance with our retention procedures.

Marketing information may be retained until you withdraw consent, unsubscribe or otherwise object, subject to retaining limited suppression information where necessary to ensure that we respect your preference not to receive further marketing.

Depending on your location and the circumstances of the processing, you may have rights under EU GDPR, UK GDPR and applicable national data protection legislation.

These may include:

Right of Access

You may request information about the personal data we hold about you and request a copy of that data.

Right to Rectification

You may ask us to correct inaccurate or incomplete personal data.

Right to Erasure

In certain circumstances, you may ask us to delete your personal data.

This right is not absolute, and we may need to retain certain information where required by law or where another lawful basis permits retention.

Right to Restrict Processing

In certain circumstances, you may ask us to restrict how your personal data is processed.

Right to Data Portability

Where applicable, you may request certain personal data in a structured, commonly used and machine-readable format and may have the right to have that information transmitted to another controller.

Right to Object

You may have the right to object to processing based on our legitimate interests.

You have the right to object at any time to the use of your personal data for direct marketing.

Right to Withdraw Consent

Where processing is based on consent, you may withdraw that consent at any time.

Withdrawal does not affect the lawfulness of processing carried out before consent was withdrawn.

Rights Relating to Automated Decision-Making

Where applicable, you may have rights relating to decisions based solely on automated processing that produce legal or similarly significant effects.

To exercise a data protection right, contact:

Email: support@dreamcarcompetitions.com

We may need to request information reasonably necessary to confirm your identity before acting on a request.

We will respond in accordance with the timescales required by applicable data protection law.

You will generally not be required to pay a fee to exercise your rights, although applicable law may allow a reasonable fee or refusal in certain circumstances, such as where a request is manifestly unfounded or excessive.

If you are located in Ireland or your complaint relates to processing subject to Irish/EU data protection law, you may have the right to lodge a complaint with the:

Data Protection Commission (DPC)
Ireland

You may find further information about the DPC and its complaints process at the Data Protection Commission's official website.

We would appreciate the opportunity to address your concerns directly first, although this does not affect your right to contact the DPC.

If you are located in the United Kingdom or your complaint relates to processing subject to UK data protection law, you may have the right to lodge a complaint with the:

Information Commissioner's Office (ICO)
United Kingdom

You may find further information about the ICO and its complaints process through the ICO's official website.

We would appreciate the opportunity to address your concerns directly first, although this does not affect your right to contact the ICO.

Our website may contain links to third-party websites, applications or services.

We are not responsible for the privacy practices of independent third parties.

We encourage you to review the relevant privacy information when visiting another website or using another service.

Certain personal data is required for us to provide our services or enter into a contract with you.

For example, we may require information necessary to:

• Create or secure an account;
• Verify that you meet competition eligibility requirements;
• Process a competition entry;
• Process a payment;
• Allocate entries or ticket numbers;
• Contact a winner; or
• Deliver a prize.

If required information is not provided, we may be unable to provide the relevant service, process an entry or fulfil a transaction.

We may update this Privacy Policy from time to time to reflect:

• Changes to our services;
• Changes to our technology or service providers;
• Changes to how we process personal data; or
• Changes in applicable law or regulatory guidance.

The latest version will be published on our website with an updated revision date.

Where appropriate, we will bring material changes to your attention.

For questions about this Privacy Policy, your personal data or your data protection rights, please contact:

Dream Car Competitions
33 Great George Street
Leeds
LS1 3AJ
United Kingdom

Email: support@dreamcarcompetitions.com

Telephone: +44 7592 478886