Review-only website — no competition entries, ticket sales, payments, postal entries or prize claims are being accepted.
Win A Classic

Privacy Policy

Last updated: 13 October 2026. This policy covers the website as it currently operates: accounts and enquiries only. It will be replaced before any competition opens for entry.

Who we are. David Page trading as WinAClassic ("we", "us") is the controller of the personal information collected through this website. For any privacy question or request, email admin@winaclassic.co.uk.

What the website currently does. You can browse planned competitions and create an account. No tickets are sold, no payments are taken, and no paid or postal entries or prize claims are accepted. We do not collect payment card, ticket, entry or date-of-birth information.

Information we collect

  • Account details: your email address and password when you register. Passwords are stored by the sign-in system in a protected (hashed) form; we cannot see them.
  • Optional profile details, if you add them on your account page: name, phone number, postal address, your email and SMS marketing choices, and whether your name may appear on public entry lists.
  • Messages you send us: your email address and the content of your message.
  • Technical and security information: when you use the website, our hosting and sign-in systems automatically record technical information such as your IP address, browser and device type, the pages or services requested, the time of the request, and sign-in events. Administrator changes on the website are also recorded.

How we use it and our lawful basis (UK GDPR)

  • Create, run and secure your account, and send account emails (sign-up confirmation, password reset) (Account details, optional profile details): Contract — necessary to provide the account you ask for (Art. 6(1)(b)).
  • Record your marketing choices (Marketing choices): Consent (Art. 6(1)(a)); you can change it at any time on your account page.
  • Show your name on public entry lists (once competitions open) (Name, display choice): Consent; you can withdraw it at any time.
  • Reply to your messages and keep a record (Messages): Legitimate interests in answering enquiries (Art. 6(1)(f)).
  • Keep the website working and secure, prevent misuse, and keep a record of administrator actions (Technical and security information): Legitimate interests in operating a secure website (Art. 6(1)(f)).
  • Comply with the law, and establish or defend legal claims (Any of the above, as needed): Legal obligation (Art. 6(1)(c)) or legitimate interests.

We do not send marketing emails or texts while the website is in its current review-only state. If we start in future, we will only contact people who have chosen to receive them, and every message will explain how to opt out.

Who processes information for us. The website, sign-in system, database and storage are provided by Lovable Labs Incorporated ("Lovable Cloud"), acting on our behalf. Our database is located in London, United Kingdom. Lovable uses sub-processors, some of which are outside the UK — for example, to deliver website traffic through a global network. Where personal information is transferred outside the UK, Lovable states that it uses the UK International Data Transfer Addendum to the EU Standard Contractual Clauses. Lovable's sub-processor list is published at trust.lovable.dev. Account emails are currently sent through Lovable's email service. Card payments are not connected to this website. We do not sell your information or share it with advertisers.

How long we keep it

We keep information only for as long as it is needed for the purpose it was collected for:

  • Account and profile details: while your account is maintained. After an account is closed, we keep information only where, and for as long as, it is necessary for a specific legal or security reason, such as resolving a dispute, investigating misuse or meeting a legal obligation.
  • Messages you send us: until your enquiry is resolved. After that, only where necessary for a dispute or a legal obligation.
  • Marketing and public-name choices: only as long as necessary to record and respect your choices and to show that our use of your information was lawful.
  • Security records: only as long as necessary to prevent and investigate security incidents. Technical logs kept by our hosting provider are deleted under the provider's own settings.
  • Deleted information may remain in secure backups for a limited time before being overwritten.

Deletion is not automatic. Account closure, deletion and other requests are handled manually by us, the operator.

Your rights. Under UK data protection law you have the right to ask for a copy of your personal information, to have it corrected, to have it deleted, to restrict or object to how we use it, and to receive it in a portable format. Some rights apply only in certain circumstances, and we will explain if one does not apply. Where we rely on consent, you can withdraw it at any time; this does not affect earlier use. To make a request, email admin@winaclassic.co.uk. We may need to confirm your identity. We will normally respond within one month; where the law allows, for example for complex or numerous requests, we may extend this and will tell you why. You do not normally have to pay.

Complaints. If you are unhappy with how we have handled your information, please contact us first. You also have the right to complain to the Information Commissioner's Office (ICO), the UK data protection regulator: ico.org.uk/make-a-complaint, or 0303 123 1113.

Age. The website is not intended for anyone under 18.

Changes. We will update this policy before competitions open, to cover entries, payments, postal entries, winners and prizes, and we will show the date it was last updated.