Privacy Policy

Last updated: 27 October 2026.

Who we are. David Page trading as WinAClassic ("we", "us") is the controller of the personal information collected through this website. For any privacy question or request, email admin@winaclassic.co.uk.

What the website does. We run UK prize competitions. You can browse competitions, create an account, buy tickets by card, enter free by post, play instant-win games, and see winners and entry lists.

Information we collect

Account details: your email address and password when you register. Passwords are stored by the sign-in system in a protected (hashed) form; we cannot see them.
Optional profile details, if you add them on your account page: name, phone number, postal address, your email and SMS marketing choices, and whether your name may appear on public entry lists.
Order and entry details: the competitions you enter, how many tickets, the amount paid, your skill-competition answers, your confirmation that you are 18 or over, and which terms you accepted. For postal entries we also record your date of birth (to confirm you are 18 or over) and the address you write to us from.
Payment information: card payments are processed by our payment provider, Cashflows. We do not see or store your full card details; we receive a payment confirmation and reference.
Messages you send us: your email address and the content of your message.
Technical and security information: when you use the website, our hosting and sign-in systems automatically record technical information such as your IP address, browser and device type, the pages or services requested, the time of the request, and sign-in events. Administrator changes on the website are also recorded.
Advertising measurement, only if you accept: the Meta Pixel records your visits and purchases so we can measure our Facebook and Instagram adverts. See the advertising measurement section below.

How we use it and our lawful basis (UK GDPR)

Create, run and secure your account, and send account emails (sign-up confirmation, password reset) (Account details, optional profile details): Contract — necessary to provide the account you ask for (Art. 6(1)(b)).
Take your entries, process payment, allocate tickets, run draws and instant-win games, contact winners and deliver prizes (Order and entry details, payment confirmation, contact details): Contract (Art. 6(1)(b)).
Send your purchase confirmation email with your ticket numbers and draw details (Order details, email address): Contract (Art. 6(1)(b)).
Record your marketing choices and send marketing you have asked for (Marketing choices): Consent (Art. 6(1)(a)); you can change it at any time on your account page.
Show your name on public entry lists, only where you have opted in (Name, display choice): Consent; you can withdraw it at any time. Without your opt-in, entry lists show ticket numbers only.
Reply to your messages and keep a record (Messages): Legitimate interests in answering enquiries (Art. 6(1)(f)).
Keep the website working and secure, prevent misuse and fraud, and keep a record of administrator actions (Technical and security information): Legitimate interests in operating a secure website (Art. 6(1)(f)).
Comply with the law — including age verification, gambling and prize-promotion record-keeping and tax — and establish or defend legal claims (Any of the above, as needed): Legal obligation (Art. 6(1)(c)) or legitimate interests.

We only send marketing emails or texts to people who have chosen to receive them, and every message explains how to opt out.

Who processes information for us. The website, sign-in system, database and storage are provided by Lovable Labs Incorporated ("Lovable Cloud"), acting on our behalf. Our database is located in London, United Kingdom. Lovable uses sub-processors, some of which are outside the UK — for example, to deliver website traffic through a global network. Where personal information is transferred outside the UK, Lovable states that it uses the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Lovable's sub-processor list is published at trust.lovable.dev. Account and purchase emails are sent through Lovable's email service from comps@winaclassic.co.uk. Card payments are processed by Cashflows. We do not sell your information. If you accept advertising cookies, limited information is shared with Meta as described below.

How long we keep it

We keep information only for as long as it is needed for the purpose it was collected for:

Account and profile details: while your account is maintained. After an account is closed, we keep information only where, and for as long as, it is necessary for a specific legal or security reason, such as resolving a dispute, investigating misuse or meeting a legal obligation.
Order, entry and draw records: kept after a competition closes where necessary for legal, tax and dispute purposes, and to evidence that draws were run fairly.
Messages you send us: until your enquiry is resolved. After that, only where necessary for a dispute or a legal obligation.
Marketing and public-name choices: only as long as necessary to record and respect your choices and to show that our use of your information was lawful.
Security records: only as long as necessary to prevent and investigate security incidents. Technical logs kept by our hosting provider are deleted under the provider's own settings.
Deleted information may remain in secure backups for a limited time before being overwritten.

Deletion is not automatic. Account closure, deletion and other requests are handled manually by us, the operator.

Your rights. Under UK data protection law you have the right to ask for a copy of your personal information, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Some rights apply only in certain circumstances, and we will explain if one does not apply. Where we rely on consent, you can withdraw it at any time; this does not affect earlier use. To make a request, email admin@winaclassic.co.uk. We may need to confirm your identity. We will normally respond within one month; where the law allows, for example for complex or numerous requests, we may extend this and will tell you why. You do not normally have to pay.

Complaints. If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or 0303 123 1113.

Age. The website is not intended for anyone under 18, and you must confirm you are 18 or over to enter a competition.

Changes. If we change how we use personal information, we will update this policy and show the date it was last updated.

Advertising measurement (Meta Pixel)

If you accept on the cookie banner, we use the Meta Pixel, provided by Meta Platforms Ireland Limited, to measure whether our Facebook and Instagram adverts lead to visits and ticket purchases on this website. The pixel sets cookies and sends Meta information about the pages you visit, your purchases (including the amount paid), and technical details such as your IP address and browser. Meta may link this information to your Facebook or Instagram account under its own privacy policy.

Lawful basis: Consent (Art. 6(1)(a)). The pixel is not loaded unless you accept, and visitors in the UK and Europe are always asked first.
Your choice: you can accept, reject, or change your mind at any time via Cookie settings in the website footer. Rejecting or withdrawing stops the pixel straight away and does not affect your ability to use the website or buy tickets.
International transfers: Meta processes information in the United States and other countries under its own transfer safeguards.

Optional WhatsApp welcome messages

If you choose WhatsApp at signup or in your account, we record your WhatsApp number, your consent, its time and source. After account confirmation we may send one account welcome message using WhatsApp Business. Providing a phone number alone does not give consent, and email or SMS preferences do not give WhatsApp consent. Withdraw at any time in your account or by replying STOP. Consent is our lawful basis for these optional messages.

WhatsApp messages and delivery information are processed by Meta through Lovable Labs as the WhatsApp technology provider. Meta may process this information internationally under its applicable privacy and transfer terms. We store message records and delivery or failure updates to operate the service, honour opt-outs and investigate problems; we retain consent evidence only for as long as needed to demonstrate your choice and meet legal obligations. New confirmed registrations also generate a minimal owner notification without customer contact details. No bulk WhatsApp marketing is enabled by this signup notification service.