Privacy policy

About this policy

This privacy policy explains how UK Competitions Directory handles personal data when you browse the site, submit a competition, contact us, or use operator services.

We aim to collect only the information needed to operate the directory, review listings, communicate with operators, maintain security, and understand site performance.

Information we collect

We may collect and process the following information:

• Operator submission details, including company name, contact email, competition title, prize details, entry URL, closing date, entry method, category, and description.
• Uploaded listing images and related file information.
• Operator account and profile details, including website, contact name, contact email, plan type, notes, and outreach status.
• Email communications, including outbound outreach emails, submission notifications, replies, message IDs, opens, and clicks where email tracking is configured.
• Payment and subscription identifiers from Stripe, where an operator chooses a paid plan. We do not store full card details.
• Admin login information handled through Supabase authentication.
• Technical information such as IP address, browser details, pages visited, timestamps, security logs, and basic analytics data.

How we use information

We use information to:

• Review, approve, reject, edit, and publish competition listings.
• Create and maintain operator profiles.
• Contact operators about submissions, listing quality, paid plans, and follow-ups.
• Send submission confirmations and internal notifications.
• Process paid plans and maintain subscription records.
• Protect the site from spam, abuse, suspicious submissions, and unauthorised access.
• Measure site performance and improve content, navigation, and search visibility.
• Comply with legal, accounting, tax, regulatory, and dispute-resolution obligations.

Legal bases

Depending on the situation, we rely on one or more of these legal bases under UK data protection law:

• Contract, where information is needed to provide listing or paid operator services.
• Legitimate interests, where we operate, secure, improve, and promote the directory in a proportionate way.
• Consent, where required for optional marketing, tracking, or similar activity.
• Legal obligation, where we must keep or disclose information to comply with the law.

Cookies and analytics

The site may use essential cookies or similar technologies for security, admin authentication, and service functionality. We may also use privacy-conscious analytics to understand site usage.

If we introduce non-essential cookies or analytics that require consent, we will add an appropriate cookie notice and consent controls before using them.

Sharing information

We may share information with trusted service providers that help us run the site, including hosting, database, authentication, email, storage, payment, security, and analytics providers.

Current or planned providers may include Vercel, Supabase, SendGrid, Stripe, Cloudflare, and similar infrastructure services. These providers process data only as needed to provide their services to us.

We may also share information if required by law, to protect rights and safety, to investigate abuse, or as part of a business transfer such as a sale, merger, or restructuring.

Third-party competition websites

Competition listings link to third-party operator websites. If you visit or enter through those websites, their own privacy notices and terms apply. We are not responsible for how third-party operators collect or use your data.

How long we keep information

We keep information only as long as reasonably needed for the purposes described in this policy. Submission and operator records may be kept while a listing or operator relationship is active, and for a reasonable period afterwards for audit, legal, security, and dispute-resolution purposes.

Email logs, payment identifiers, and security records may be kept for longer where needed for accounting, abuse prevention, or legal compliance.

Security

We use reasonable technical and organisational measures to protect personal data. No website or online service can be guaranteed completely secure, so please avoid submitting sensitive personal information unless it is necessary.

Your rights

Depending on your circumstances, you may have rights to access, correct, delete, restrict, or object to the use of your personal data. You may also have the right to data portability and the right to complain to the UK Information Commissioner's Office.

To make a privacy request, contact us through the contact page with enough information to identify the relevant record. We may need to verify your identity before acting on a request.

Changes to this policy

We may update this policy as the site develops. The latest version will be published on this page with an updated date.