Privacy Policy – Lucky 13 Competitions

Last updated: 3 February 2026

1. Who We Are

Lucky 13 Competitions operates the website:

https://lucky13competitions.co.uk

Lucky 13 Competitions Limited (Company No. 15956216), registered in England and Wales, with its registered office at 49 The Foxholes, Kidderminster, England, DY10 2QR, is the Data Controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. What Personal Data We Collect

We may collect and process the following personal data:

Information you provide to us

• Full name
• Email address
• Username or nickname (if selected during registration)
• Billing information
• Competition entries and ticket numbers
• Answers to competition questions
• Communications sent to us

Automatically collected data

• IP address
• Browser type and version
• Device and usage data
• Cookies

Payment information

Payments are processed securely by third-party payment providers (including Cashflows).

We do not store full card details on our servers.

3. How and Why We Use Your Data (Legal Basis)

We process personal data under the following lawful bases:

• Contractual necessity – to provide competition entry services
• Legal obligation – for accounting, fraud prevention, and regulatory compliance
• Legitimate interests – to operate transparent and fair competitions
• Consent – where you have actively opted in (e.g. marketing communications)

4. Competitions & Public Entry Lists (Transparency)

To ensure transparency and fairness, Lucky 13 Competitions may display a public entry list for active competitions.

The public entry list may show only:

• First name and surname initial or a nickname (depending on the option chosen by the user during registration), and
• Ticket number(s)

No email addresses, full surnames, phone numbers, postal addresses, or payment details are ever displayed publicly.

This processing is carried out under our legitimate interest in ensuring transparency, fairness, and trust in our competitions.

5. Marketing Communications

We may use your email address to send internal marketing communications, including:

• information about current or upcoming competitions,
• promotional offers or discounts,
• important service-related updates.

Marketing emails are sent only where:

• you have explicitly opted in, or
• you are an existing customer and the communication relates to similar competitions or services (soft opt-in).

You may unsubscribe at any time using the link included in every marketing email or by contacting us directly.

We do not sell or share personal data with third parties for marketing purposes.

6. Comments

When visitors leave comments on the site, we collect the data shown in the comments form, as well as the visitor’s IP address and browser user agent to help detect spam.

An anonymised string (hash) of your email address may be sent to the Gravatar service.

Gravatar Privacy Policy: https://automattic.com/privacy/

7. Media Uploads

If you upload images to the website, you should avoid uploading images with embedded location data (EXIF GPS).

Visitors may be able to download and extract this data from images on the website.

8. Contact Forms

Data submitted through contact forms is:

• used solely to respond to enquiries,
• not added to marketing lists unless consent is provided,
• delivered securely via email.

9. Cookies

We use cookies to:

• enable essential site functionality,
• manage user login sessions,
• remember preferences,
• analyse website performance.

Cookies may include session, login, and preference cookies.

You can control cookie settings through your browser at any time.

On your first visit, you may be asked to accept or manage cookie preferences via a cookie consent banner, which you can update at any time.

10. Embedded Content from Other Websites

Pages on this site may include embedded content (videos, images, social media posts).

Embedded content behaves in the same way as if you visited the third-party website directly, which may collect data and track your interaction.

11. Analytics & Advertising

We may use analytics and advertising tools such as:

• Google Analytics
• Meta (Facebook / Instagram)

These services help us understand website usage and improve our services.

Data is processed in accordance with their respective privacy policies.

12. Who We Share Your Data With

We may share your data with:

• payment processors (including Cashflows),
• website hosting and IT service providers,
• legal, accounting, or regulatory authorities where required by law.

We never sell personal data.

13. How Long We Retain Your Data

• Competition and transaction data is retained as required by UK law.
• Account data is retained while your account remains active.
• Marketing data is retained until you unsubscribe or withdraw consent.

Data is securely deleted when no longer required.

14. Your Data Protection Rights

Under UK GDPR, you have the right to:

• access your personal data,
• correct inaccurate or incomplete data,
• request deletion of your data,
• restrict or object to processing,
• request data portability,
• withdraw consent at any time.

Requests can be made using the contact details on our website.

You also have the right to lodge a complaint with the Information Commissioner’s Office (ICO):

https://ico.org.uk

15. Where Your Data Is Sent

Visitor comments may be checked through automated spam detection services.

Some service providers may process data outside the UK, but only with appropriate safeguards in place (such as contractual protections or equivalent measures).

16. Contact for Privacy Queries

For any data protection queries or to exercise your rights, please contact us using the contact details provided on our website.

17. Changes to This Privacy Policy

We may update this Privacy Policy from time to time.

The most recent version will always be available on our website.