Privacy policy
Last updated: 21 July 2026
Sortis Competitions ("we", "us", "our") is operated by Benjamin Jones as a sole trader. We are committed to protecting your personal data and handling it responsibly. This policy explains what data we collect, why we collect it, how we use it, and your rights under UK law.
We are registered with the Information Commissioner's Office (ICO) under registration number ZC203561. Our contact address is: Sortis Competitions, Unit 170071, PO Box 7169, Poole, BH15 9EL. Email: info@sortiscompetitions.co.uk.
1. What personal data we collect
Data you provide to us:
- Identity data: your full name and date of birth (to verify you are 18 or over)
- Contact data: your email address, postal address, and telephone number
- Competition data: the competitions you enter, the number of tickets purchased, your skill question answers, and your allocated ticket numbers
- Payment data: payment is processed securely through our payment provider. We do not store your full card details. We retain transaction records as required for accounting purposes.
- Communications: any correspondence you send us, including complaint or enquiry records
Data collected automatically:
- Technical data: your IP address, browser type and version, device type, operating system, and pages visited on our website
- Cookie data: please see our Cookie Policy for full details
2. How we use your data and our lawful basis
| Purpose | Lawful basis |
|---|---|
| To process your entry, allocate ticket numbers, and run the draw | Contract (performance of the competition you have entered) |
| To verify your eligibility (age and UK residency) | Contract / Legal obligation |
| To contact you if you win and arrange prize delivery | Contract |
| To process payment and issue refunds where applicable | Contract |
| To publish winner details (first name and county) as required | Legal obligation / Legitimate interests |
| To send you service emails about competitions you have entered | Contract |
| To send you marketing about future draws (only with your consent) | Consent — you may opt out at any time |
| To meet our tax and accounting obligations | Legal obligation |
| To respond to complaints and enquiries | Legitimate interests / Legal obligation |
| To prevent fraud and ensure the security of our competitions | Legitimate interests / Legal obligation |
| To improve our website and understand how visitors use it | Legitimate interests (with cookie consent where required) |
3. Who we share your data with
We only share your personal data where necessary:
- Shopify Inc. — our website and e-commerce platform. Shopify processes your data on our behalf to operate the store, cart, and checkout. See Shopify's privacy policy at shopify.com/legal/privacy.
- Our payment gateway provider — to process card payments securely. They are independently subject to Payment Card Industry (PCI) compliance standards.
- Delivery/courier services — your name and delivery address, solely to send you your prize.
- HMRC and other regulatory bodies — where required by law.
- ICO or other authorities — if required by law or in connection with a legal claim.
We do not sell your personal data to third parties. We do not share your data with advertisers.
4. International transfers
Some of our service providers (including Shopify) may process data outside the UK. Where this happens, we ensure that appropriate safeguards are in place in accordance with UK GDPR requirements.
5. How long we keep your data
- Competition and entry records: retained for 2 years after the draw date, then securely deleted.
- Winner records: retained for 6 years for legal and accounting purposes.
- Payment transaction records: retained for 6 years as required by HMRC.
- Marketing preferences: until you withdraw your consent.
- Complaints and correspondence: retained for 3 years.
6. Your rights
Under UK GDPR, you have the following rights:
- Right of access — to request a copy of the personal data we hold about you
- Right to rectification — to ask us to correct inaccurate or incomplete data
- Right to erasure — to ask us to delete your data in certain circumstances
- Right to restrict processing — to ask us to pause processing your data in certain circumstances
- Right to data portability — to receive your data in a structured, machine-readable format
- Right to object — to object to processing based on legitimate interests or for direct marketing
- Rights related to automated decision-making — we do not use automated decision-making or profiling in a way that produces legal or significant effects
To exercise any of these rights, email info@sortiscompetitions.co.uk. We will respond within one month. We may need to verify your identity before actioning a request.
If you are unhappy with how we handle your data, you have the right to complain to the ICO at ico.org.uk or by calling 0303 123 1113.
7. Security
We take reasonable technical and organisational measures to protect your personal data from unauthorised access, loss, or misuse. Our website uses SSL/TLS encryption (HTTPS). Payment data is handled exclusively by our PCI-compliant payment provider.
8. Children
Our services are strictly for adults aged 18 and over. We do not knowingly collect personal data from anyone under 18. If you believe we have inadvertently collected data from a minor, please contact us immediately and we will delete it.
9. Links to other websites
Our website may contain links to third-party sites. We are not responsible for the privacy practices of those sites and encourage you to read their own privacy policies.
10. Changes to this policy
We may update this Privacy Policy from time to time. The updated version will be posted on this page with a revised date. We encourage you to review this policy periodically.
11. Contact us
For any privacy-related questions, to exercise your rights, or to make a complaint, contact us at info@sortiscompetitions.co.uk or write to us at Sortis Competitions, Unit 170071, PO Box 7169, Poole, BH15 9EL.