Privacy Policy

This privacy policy explains how we use information we collect about you when you purchase tickets from us, become an organisational contact or use this website.

On what legal basis do we collect information about you?

We collect information about you in order to sell you tickets in our draws, to confirm purchases by email, and to notify of and dispatch any prize won. We collect and check the details of participating organisations to make sure they are a part of the Liberal Democrats and that any commission payments go to them correctly. We also collect information about you in order to fulfil legal obligations, such as financial reporting. We further collect information by obtaining informed consent for marketing purposes.

Where we are fulfilling contractual obligations you have the right to object to processing. Where we are fulfilling legal obligations you have the right to request that we erase information, to object to processing of your personal information and also to receive a copy of your information when you leave us. Where we have obtained consent for marketing, you can withdraw consent at any time. You can exercise all of these rights by contacting us directly.

Your rights under the Data Protection Act and GDPR are:

• The right to be informed
  When your personal data is processed, we will tell you by whom, what data, how it is processed, where it is stored, why it is processed and when it will be deleted
• The right of access
  You can access your data at any time by contacting us
• The right to rectification
  You can request that we correct your information at any time by contacting us
• The right to erasure
  You can request that we delete your information at any time by contacting us
• The right to restrict processing
  Where you are challenging the accuracy of data we hold, our right to process that data, or the way in which we process your data, we will stop processing that data at your request whilst we determine the correct actions going forward
• The right to data portability
  We will supply you with copies of your information in a machine readable format where requested
• The right to object
  You can object to us processing your information at any time by contacting us
• Rights in relation to automated decision making and profiling
  The only automated decision-making we use is to ensure purchasers have provided an address in England, Scotland or Wales and have confirmed they are at least 18 years of age. If people are outside this area or do not confirm they are above 18, we will decline to sell them tickets. Draws are made at random from all tickets bought for a specified draw, excluding only tickets that have already won a prize in that draw, and with no reference to the purchaser's details. Should we use any additional automated decision making or profiling in the future we will give you information about these processes, we will allow you to request that we change a decision or have such decisions made by an individual and we will ensure that any systems continue to fulfil their intended purpose and make correct decisions

Should you feel that we have failed in our legal obligations to protect or process your data, you can lodge a complaint with the ICO at https://ico.org.uk/concerns/.

What information do we collect about you?

We collect information about you when you either:

• register to purchase tickets or;
• as a contact for an organisation selling tickets.

Although we store billing and invoice details, including the payment details of transactions, where a service from us is paid for with a credit or debit card, we do not store those credit and debit card details or even process them on our systems: they are passed to our payment processor PayPal solely for the purposes of processing the payment.

Additionally, we collect some website usage information, and that can be enhanced through the use of cookies.

The categories of personal data that we may collect are:

• Name
• Email address
• Address and post code
• Telephone or mobile number
• Billing details
• Payment details (these are processed by sub-processors)
• IP address (for debugging purposes in server logs)

How will we use the information about you?

We collect information about you to:

• sell you tickets in the draw, send marketing information on draws if you permit us to do so, maintain a list of winners of past draws (but we will only publish winners where we have permission to do so), send emails relating to your ticket purchase, including confirmation of transaction, confirmation of payment, any tranaction cancellation information and prize winning notifcations.
• keep in touch with organisations who register to sell tickets in the draw via a named contact. That named contact will have their membership of the Liberal Democrats checked against the Liberal Democrat Party membership system, with only current Party members acceptable as contacts. We will send information about current and future draws to named contacts. An organisation may change their named contact at any time, or de-register from the draw to stop receiving draw updates.

Any customer can opt out of additional service contacts at any time through the use of unsubscribe links or by contacting us directly.

The Lib Dem Draw use Prater Raines Ltd as our Data Processors. They have developed our website, host and secure our site and the data therein. Prater Raines Ltd are a UK website design, development and hosting company, Limited Company Number 6110329 and registered with the Information Commissioner with Registry Number Z9876931.

The only sub-processors that we use are our payment service provider, currently PayPal, and Mailchimp for email to permissioned contacts.

Where your information is stored and processed

Data is stored and processed on our behalf by Prater Raies Ltd. They store information electronically about our contacts on both physically and electronically secure servers with no access to non-Prater Raines staff. Personal data processed by Prater Raines Ltd is stored on their UK based servers in data centres in Maidstone and York. In some instances data is processed outside of the European Economic Area in countries or territories with an adequacy decision. Such adequacy decisions state that the relevant country or territory offers appropriate levels of protection to ensure the rights of data subjects.

Where data is processed in a country or territory without an adequacy decision, we have confirmed that the sub-processor is covered by the Privacy Shield agreement. The sub-processors we use that store data outside of the European Economic Area in countries without an adequacy decision are Paypal and Mailchimp.

How long will we process your information for?

We retain personal ticket sale data for 3 years from the point of the draw for which tickets have been purchased.

We retain organisation contact information for 3 years from the point of the draw for which the organisation registered to sell tickets. An organisation may replace / update their contact details at any time.

We retain permissioned marketing contact information, including name, email address and date / time of consent in Mailchimp until any such contacts opt out of receiving further contacts. We will keep that consent under review and refresh it where necessary.

We retain prize winner data, including where permission has been granted the right to publish to names of winners, in perpetuity.

In addition to the retention periods above, Prater Raines Ltd may retain server data backups for up to 5 months beyond the deletion date of data in the live database.

Marketing

You have a right at any time to stop us from contacting you for marketing purposes. If you no longer wish to be contacted for marketing purposes, please contact us and tell us so.

Access to your information and correction

You have a right to request a copy of the information we hold about you. If you would like a copy of some or all of your personal information, please email or write to us.

We want to make sure that your personal information is accurate and up to date. You may ask us to correct or remove information from our files that you think is inaccurate.

Website tracking

We use cookies to allow logging into the site, to retain user sessions and allow users to complete transactions via the site.

We do not use third party services on our website that set cookies.

Other websites

This privacy policy only applies on this website. If you follow any external link, those sites will / should have their own privacy policies.

Changes to our privacy policy

We keep our privacy policy under review and will update this page as required. This policy was last updated on 12 September 2018.

How to contact us

Please contact us if you have any questions about our privacy policy:

• by email to info@libdemdraw.org.uk
• by post to L Tapper, 36 Wensleydale Drive, Camberley GU15 1SP

To make a subject access request or find out more about the information we hold about you, please contact us.