Privacy Policy

Giraffle Ltd ("Giraffle", "we", "us" or "our") operates the Giraffle prize competition website.

We are responsible for the personal information we collect and use in connection with our website, customer accounts, competitions, payments, prizes and customer services.

Company: Giraffle LtdCompany number: 16906508Registered office: Richmond House, Hill Street, Ashton-under-Lyne, OL7 0PZEmail: support@giraffleuk.comWebsite: www.giraffleuk.com

This Privacy Policy explains how we collect, use, store and share personal information, your rights and how to contact us.

Depending on how you use Giraffle, we may collect:

• •Account details: Your name, email address, telephone number, date of birth, account credentials and verification status.
• •Competition information: Entries purchased or submitted free of charge, ticket numbers, competition answers, allocations, results, prizes and claim history.
• •Transaction information: Purchase amounts, payment and refund references, transaction statuses, Wallet balances, credits and withdrawals.
• •Prize information: Prize selections, cash alternatives, claims, identity checks, delivery addresses, bank details where required and fulfilment records.
• •Communications: Emails, SMS messages, support enquiries, complaints, notification attempts and relevant communication records.
• •Responsible Play information: Account limits, restrictions, exclusions and related requests or decisions.
• •Technical and security information: IP addresses, browser and device information, login records, security events and activity audit records.
• •Cookie and preference information: Essential login information, consent preferences and affiliate referral information where applicable.

We may also receive information from payment providers, identity-verification providers and other service providers where necessary to operate our services.

We use personal information to:

• •Create, secure and administer customer accounts.
• •Verify eligibility and identity where required.
• •Process paid and free competition entries.
• •Allocate entries, conduct competitions and record results.
• •Notify winners, manage prize claims and arrange fulfilment.
• •Administer Wallet credits, withdrawals, refunds and payment enquiries.
• •Provide customer support and handle complaints.
• •Apply Responsible Play controls and account restrictions.
• •Detect fraud, prevent abuse and protect our systems.
• •Maintain transaction, fairness, security and compliance audit records.
• •Meet our legal, tax, accounting and regulatory obligations.
• •Send marketing communications where permitted and in accordance with your preferences.

Under UK data protection law, we rely on the following lawful bases as appropriate:

Contract: Where processing is necessary to provide an account, administer competition entries, process transactions, manage prizes or deliver requested services.

Legal obligation: Where we must retain records, respond to lawful requests or comply with applicable accounting, tax or other legal requirements.

Legitimate interests: Where necessary for proportionate fraud prevention, website security, customer support, dispute resolution, audit integrity and the proper administration of Giraffle.

Consent: Where required for optional cookies, certain marketing communications or other activities for which we specifically request consent.

You may withdraw consent where consent is the lawful basis. Withdrawal does not affect processing already carried out lawfully.

When you make a payment or request a refund or withdrawal, relevant personal information may be processed to authorise transactions, prevent fraud, maintain financial records and resolve disputes.

This may include your name, contact details, billing information, payment references, transaction amounts, IP address, device information and information required for payment authentication or security checks.

Giraffle may retain transaction references, payment statuses and relevant audit information. We do not need to retain your complete payment-card details to maintain these records.

Where bank details are required for a Wallet withdrawal or prize payment, we use them for payment administration, verification and related record-keeping.

DNA Payments

Giraffle uses DNA Payments to process customer payments and related financial transactions.

Information necessary for payment processing, fraud prevention, payment authentication, chargebacks, refunds and regulatory compliance is shared with DNA Payments and relevant acquiring banks, card schemes and payment-service participants.

Giraffle acts as a controller of customer information collected for its competitions and transactions. DNA Payments may act as an independent controller where it processes information for its own fraud prevention, regulatory and legal obligations.

DNA Payments' own privacy information applies to processing for which it is independently responsible.

We may require information to establish a customer's age, identity, eligibility to enter competitions, entitlement to a prize or authority to receive funds.

This may involve reviewing identity documents or using an external identity-verification service.

Giraffle uses OneID to carry out identity and eligibility verification where required. Information necessary for verification is exchanged with OneID in accordance with the applicable privacy arrangements.

We use verification information only for appropriate eligibility, security, fraud-prevention and compliance purposes.

Where you win a prize, we may use your account details to contact you, administer the applicable claim period, send reminders, verify your entitlement and arrange delivery or payment.

For physical prizes, we may share necessary contact and delivery information with suppliers, fulfilment partners or delivery providers.

For cash alternatives and Wallet withdrawals, we may process payment instructions, bank details and relevant verification information.

We maintain records of prize allocations, notifications, claims, extensions, verification, fulfilment and administrative decisions to support accurate prize administration and dispute resolution.

We use email and SMS services to send account communications, verification messages, competition information, winner notifications, claim reminders and customer-service updates.

We currently use Resend for email delivery and Twilio for SMS delivery.

Service messages necessary to operate your account or administer a competition are distinct from optional marketing communications.

Where consent is required for marketing, we will seek it and provide an appropriate way to withdraw it. We will also respect applicable marketing objections and unsubscribe requests.

We may retain delivery statuses, provider message references and communication records where necessary to evidence notifications or resolve disputes.

We share personal information only where there is an appropriate reason and lawful basis.

Relevant providers include:

• •Neon: Database hosting and storage.
• •Vercel: Website hosting, application infrastructure, analytics and security services.
• •Resend: Transactional and other authorised email delivery.
• •Twilio: SMS delivery.
• •DNA Payments: Payment processing, payment authentication, fraud prevention, refunds, chargebacks, transaction disputes and related payment compliance.
• •OneID: Identity and age verification, eligibility checks and related verification processes.
• •Fulfilment and delivery providers: Arranging and delivering prizes where necessary.

We may also disclose information to professional advisers, regulators, courts, law-enforcement authorities or other parties where legally required or justified.

We do not sell customer personal information to advertisers.

Some service providers may process or access personal information outside the United Kingdom.

Where personal information is transferred internationally, we will ensure that an appropriate legal transfer mechanism or other permitted safeguard applies where required under UK data protection law.

We retain personal information for as long as reasonably necessary for the purposes for which it was collected, including providing services, maintaining financial and competition records, handling disputes and meeting legal obligations.

Relevant financial and audit evidence may need to be retained for six years from the end of the applicable financial year where the corresponding record-keeping obligation applies.

Different information may have different retention periods depending on its purpose, applicable legal requirements and whether a dispute or investigation remains open.

When information is no longer required, we will delete, anonymise or otherwise dispose of it appropriately, subject to lawful retention requirements.

We use technical and organisational measures designed to protect personal information against unauthorised access, loss, misuse or alteration.

These include access controls, authentication, role-based permissions, audit records and protection of sensitive financial information.

No online service can guarantee absolute security.

Depending on the circumstances, you may have the right to:

• •Request access to your personal information.
• •Ask us to correct inaccurate information.
• •Request deletion of information where applicable.
• •Request restriction of certain processing.
• •Object to processing based on legitimate interests.
• •Request portability of eligible information.
• •Withdraw consent where processing depends on consent.

Some rights are subject to exceptions, including where information must be retained for legal obligations, fraud prevention, contractual disputes or other lawful reasons.

To exercise your rights, contact support@giraffleuk.com.

We may need to verify your identity before fulfilling a request.

You may also complain to the UK Information Commissioner's Office (ICO) at www.ico.org.uk (opens in a new tab).

Giraffle competitions are restricted to people aged 18 or over.

People under 18 may browse publicly accessible website information but must not participate in competitions.

We do not knowingly permit under-18s to hold eligible competition accounts or enter competitions.

If we discover that personal information has been collected or processed contrary to our age requirements, we will take appropriate action.

We may update this Privacy Policy to reflect changes in our services, providers, legal obligations or data processing.

The latest version will be published on our website with its updated date. Where a change requires additional notification or consent, we will provide it as appropriate.

For privacy enquiries, requests or complaints:

Giraffle LtdRichmond HouseHill StreetAshton-under-LyneOL7 0PZ

Email: support@giraffleuk.com

You may also contact the Information Commissioner's Office if you are dissatisfied with our response.