We collect information about you in order to sell you tickets in our draws, to confirm purchases by email, and to notify of and dispatch any prize won. We collect and check the details of participating organisations to make sure they are a part of the Liberal Democrats and that any commission payments go to them correctly. We also collect information about you in order to fulfil legal obligations, such as financial reporting. We further collect information by obtaining informed consent for marketing purposes.
Where we are fulfilling contractual obligations you have the right to object to processing. Where we are fulfilling legal obligations you have the right to request that we erase information, to object to processing of your personal information and also to receive a copy of your information when you leave us. Where we have obtained consent for marketing, you can withdraw consent at any time. You can exercise all of these rights by contacting us directly.
Your rights under the Data Protection Act and GDPR are:
Should you feel that we have failed in our legal obligations to protect or process your data, you can lodge a complaint with the ICO at https://ico.org.uk/concerns/.
We collect information about you when you either:
Although we store billing and invoice details, including the payment details of transactions, where a service from us is paid for with a credit or debit card, we do not store those credit and debit card details or even process them on our systems: they are passed to our payment processor PayPal solely for the purposes of processing the payment.
The categories of personal data that we may collect are:
We collect information about you to:
Any customer can opt out of additional service contacts at any time through the use of unsubscribe links or by contacting us directly.
The Lib Dem Draw use Prater Raines Ltd as our Data Processors. They have developed our website, host and secure our site and the data therein. Prater Raines Ltd are a UK website design, development and hosting company, Limited Company Number 6110329 and registered with the Information Commissioner with Registry Number Z9876931.
The only sub-processors that we use are our payment service provider, currently PayPal, and Mailchimp for email to permissioned contacts.
Data is stored and processed on our behalf by Prater Raies Ltd. They store information electronically about our contacts on both physically and electronically secure servers with no access to non-Prater Raines staff. Personal data processed by Prater Raines Ltd is stored on their UK based servers in data centres in Maidstone and York. In some instances data is processed outside of the European Economic Area in countries or territories with an adequacy decision. Such adequacy decisions state that the relevant country or territory offers appropriate levels of protection to ensure the rights of data subjects.
Where data is processed in a country or territory without an adequacy decision, we have confirmed that the sub-processor is covered by the Privacy Shield agreement. The sub-processors we use that store data outside of the European Economic Area in countries without an adequacy decision are Paypal and Mailchimp.
We retain personal ticket sale data for 3 years from the point of the draw for which tickets have been purchased.
We retain organisation contact information for 3 years from the point of the draw for which the organisation registered to sell tickets. An organisation may replace / update their contact details at any time.
We retain permissioned marketing contact information, including name, email address and date / time of consent in Mailchimp until any such contacts opt out of receiving further contacts. We will keep that consent under review and refresh it where necessary.
We retain prize winner data, including where permission has been granted the right to publish to names of winners, in perpetuity.
In addition to the retention periods above, Prater Raines Ltd may retain server data backups for up to 5 months beyond the deletion date of data in the live database.
You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact us and tell us so.
You have a right to request a copy of the information we hold about you. If you would like a copy of some or all of your personal information, please email or write to us.
We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information from our files that you think is inaccurate.
We do not use third party services on our website that set cookies.
To make a subject access request or find out more about the information we hold about you, please contact us.