Privacy policy
This Privacy Policy explains how we collect, use, store, share and protect personal data when you use campervan.win, including when you browse the website, enter our prize competitions, contact us, or manage your cookie and marketing preferences.
We have written this for a UK prize competition website. Our competitions are intended to be run as prize competitions and typically include a question or skill element, and we also provide a free postal entry route. This affects the types of records we need to keep to administer entries fairly and maintain an appropriate audit trail.
Who we are (data controller)
Campervan.win is a trading name of Analogue.media. The data controller responsible for personal data processed in connection with campervan.win is:
Analogue Media Limited (Company number 15991972)
Registered office (Companies House): 86-90 Paul Street, London, England, EC2A 4NE
Trading address: Analogue Media, 3rd Floor, 86-90 Paul Street, London, UK, EC2A 4NE
Email: Policies@campervan.win
Postal enquiries: Analogue Media, Trinity Church, 14A Queen Square, Bath, BA1 2HN
When this policy says “we”, “us” or “our”, it means Analogue Media Limited as the operator of campervan.win.
How to contact us about privacy
If you have questions about this policy or want to exercise your rights, contact Policies@campervan.win. If you write to us, use the Bath address above. To help us locate the correct record, include the email address you used on the website and (if relevant) an order number or entry reference.
The laws we follow
We process personal data in line with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and (for cookies and electronic marketing) the Privacy and Electronic Communications Regulations (PECR).
What this policy covers and what it does not cover
This policy covers personal data we process through campervan.win and our related communications.
This policy does not cover third-party websites, platforms or services you visit via links on our site (including social media). Those third parties have their own privacy policies and cookie practices.
Key terms (plain English)
Personal data means information that identifies you, or that can be linked to you, such as your name, email address, entry reference, IP address, device identifiers, or communication history.
Processing means anything we do with personal data, such as collecting, storing, using, sharing, or deleting it.
Controller means the organisation that decides why and how personal data is processed (that is us for campervan.win).
Processor means a supplier that processes personal data on our behalf under our instructions (for example some hosting or email delivery providers).
Independent controller means a third party that processes personal data for its own purposes (for example banks and payment networks in chargebacks, or some fraud prevention services).
How we collect personal data
We collect personal data in three main ways:
- Data you provide when you enter competitions, contact us, or manage your preferences.
- Data collected automatically when you browse or use the website, including logs and cookies.
- Data received from service providers that help us operate the site (for example payment status information from payment providers, email delivery status from email platforms, and security signals from abuse prevention tools).
What personal data we collect
A. Identity and contact details
We may collect:
- your name
- your email address
- your phone number (if you choose to provide it)
- your postal address (where relevant, including postal entries and prize fulfilment)
B. Account details (if an account feature exists)
We may collect:
- login email and account identifiers
- password information in protected form (we do not store passwords in plain text)
- account preferences and basic account history
C. Competition entry data (paid and free routes)
We may collect and generate:
- competition entered and entry bundle selected
- number of entries allocated
- entry reference(s) and order reference(s)
- timestamps for entry creation and confirmation
- entry route used (for example paid entry or free postal entry route) where required for administration and audit trail
- the answer provided to any question or skill element, where linked to the entry record
- entry status information (for example confirmed, cancelled, refunded where applicable)
D. Postal entry data (free entry route)
If you enter by post, we may collect:
- your name and return address as written on your entry
- the competition details included on your entry
- date received and date processed
- an internal log reference and notes needed to process the entry fairly (for example if required information is missing or unreadable)
E. Payment and transaction data (paid entries)
Payments are processed by third-party payment providers. We do not store full card details. We may receive:
- payment status (successful, failed, refunded)
- transaction identifiers and order references
- amount, date and time of purchase
- limited payment method information sometimes provided for administration (for example card type and last four digits)
- billing postcode and billing address information where part of checkout
- chargeback and dispute information if raised through a bank or card scheme
- fraud and authentication signals generated during checkout (for example the outcome of security checks)
F. Communications and support data
If you contact us, we may collect:
- your message and the channel used (email, forms, or other channels we operate)
- attachments or screenshots you send us
- our responses and internal notes needed to resolve your issue
- dates and times of communications
- complaint details and outcomes where relevant
G. Winner contact, verification and fulfilment data
If you win (or are being verified as a potential winner), we may collect and process:
- confirmation of contact details and preferred handover method
- practical fulfilment details such as delivery address or arrangements for collection/handover
- verification information where reasonably necessary to confirm eligibility and prevent fraud, such as proof of identity and proof of address
- records of winner contact attempts and fulfilment steps
- winner publicity information only where applicable (for example a photo, video, quote, or first name and location) and only where this is consistent with your choices and the competition terms
H. Technical, usage and security data
When you browse or use the site, we may collect:
- IP address
- device type, browser type/version, operating system, language settings
- referral source (how you arrived at the site)
- pages viewed, clicks, navigation paths, time spent on pages
- error logs and performance data
- security logs used to protect the site, detect suspicious activity and prevent abuse (for example bot traffic)
I. Cookies and similar technologies
We use cookies and similar technologies. Some are strictly necessary. Others are optional (such as analytics or marketing cookies) and depend on your choices in Cookies Settings. Cookies can include unique identifiers that may be personal data.
J. Special category data and criminal offence data
We do not normally collect special category data (such as health information) or criminal offence data. Please do not send it to us. If you include sensitive information in a message, we will handle it carefully and only use it to respond.
Why we use personal data and our lawful bases
UK GDPR requires a lawful basis for each type of processing. We use personal data for the purposes below.
1. To operate the website
Purpose: providing the website, maintaining performance, troubleshooting, and ensuring basic functionality.
Data used: technical data, usage data, some cookies, and basic logs.
Lawful basis: legitimate interests (running a secure, reliable website).
2. To administer prize competitions and entries
Purpose: recording entries, applying entries to the correct competition, maintaining an audit trail, responding to entry queries, and ensuring free entries and paid entries are handled fairly.
Data used: identity/contact details, entry records, question or skill element responses where applicable, postal entry logs.
Lawful basis: contract (where you purchase entries or request services) and legitimate interests (fair administration and audit trail).
3. To process payments, refunds and handle disputes
Purpose: processing transactions, confirming payment status, issuing refunds where due, and handling chargebacks or disputes.
Data used: transaction records, payment status, order references, limited billing information, dispute records.
Lawful basis: contract, legal obligation (accounting and regulatory requirements), and legitimate interests (fraud prevention and dispute handling).
4. To contact winners and fulfil prizes
Purpose: contacting winners, confirming eligibility, arranging delivery or handover, preventing fraud, and completing prize fulfilment.
Data used: contact details, fulfilment details, verification information where reasonably necessary, communication history.
Lawful basis: legitimate interests (ensuring the prize goes to the rightful winner and completing fulfilment) and contract (where applicable).
5. To provide customer support and manage complaints
Purpose: responding to enquiries, resolving issues, keeping appropriate records of communications and outcomes.
Data used: contact details, communication history, entry and order references.
Lawful basis: contract (where linked to a purchase or service) and legitimate interests (service quality and dispute management).
6. To prevent fraud, misuse and security risks
Purpose: protecting the website and competitions, preventing bot activity, detecting suspicious entry behaviour, preventing account compromise, and investigating incidents.
Data used: technical data, security logs, entry patterns, payment status signals.
Lawful basis: legitimate interests (security, fraud prevention, protecting entrants and the integrity of competitions).
7. To send service communications
Purpose: sending entry confirmations, essential account messages (if applicable), replies to support, winner contact and fulfilment communications.
Data used: contact details, entry and order references.
Lawful basis: contract and legitimate interests (delivering the service).
8. To send marketing communications (where permitted)
Purpose: sending updates about competitions, news and offers, where allowed.
Data used: contact details and marketing preferences.
Lawful basis: consent where required, or legitimate interests where permitted by law, always with a clear opt-out.
You can opt out of marketing at any time. If you opt out, we keep a minimal suppression record so we do not contact you again for marketing.
9. To manage cookie choices and consent
Purpose: storing and applying your cookie preferences and operating Cookies Settings.
Data used: cookie preference records and identifiers.
Lawful basis: legitimate interests for strictly necessary cookies and preference storage, and consent for optional cookies where required.
Marketing and service messages
Service messages relate to administering your entry, responding to you, contacting winners, and fulfilling prizes. These are not marketing. Marketing messages promote competitions and offers and are optional. You can unsubscribe from marketing at any time without affecting your entries.
Cookies and your choices
Strictly necessary cookies support core functions and security and are required for the site to work properly. Optional cookies include analytics and marketing cookies and are controlled through Cookies Settings. You can change your choices at any time.
If you block all cookies in your browser, some parts of the site may not function correctly.
Automated decision-making and profiling
We may use automated tools to protect the site, prevent fraud, and reduce abuse (for example blocking obvious bot activity). We do not use profiling to select winners. If you believe an automated security measure has affected you unfairly, contact Policies@campervan.win and we will review the situation.
Who we share personal data with
We share personal data with trusted suppliers where necessary to operate campervan.win and administer competitions. Depending on the service, suppliers may act as processors or independent controllers.
Typical categories include:
- website hosting and infrastructure providers
- payment providers and related fraud prevention services
- email delivery and communications providers
- customer support systems (if used)
- analytics and performance providers (where optional cookies are accepted)
- advertising measurement partners (where optional cookies are accepted)
- prize fulfilment or delivery partners (winners only, where relevant)
- professional advisers (for example legal, accounting, insurance) where necessary
- authorities and regulators where required by law or lawful request
We share only what is necessary for the purpose. We do not sell personal data.
Payment providers and banks (important note)
Payment providers, banks and card networks may process personal data under their own legal obligations, including fraud prevention and dispute handling. In those contexts they may be independent controllers. If you raise a chargeback through your bank, your bank and the card network will process data as part of that process.
International transfers
Some suppliers may store or access personal data outside the UK. Where this happens, we use appropriate safeguards such as UK adequacy regulations or approved contractual protections (for example the UK IDTA or the UK Addendum to EU SCCs), and additional measures where appropriate (such as access controls and encryption).
How long we keep personal data (retention)
We keep personal data only for as long as necessary for the purposes set out in this policy. Retention varies by record type. We delete or anonymise data when we no longer need it, unless we must retain it for legal reasons.
Typical retention approach:
- Competition and entry records (including free postal entries): kept for a reasonable period after the competition ends and prize fulfilment is completed, to handle queries, disputes and fairness audit trail needs.
- Transaction and accounting records: kept as required for accounting and tax purposes, and to manage refunds, disputes and chargebacks.
- Support and complaint records: kept for as long as needed to resolve the issue and for a reasonable period afterwards in case of follow-up.
- Winner verification documents: kept only as long as necessary for verification and fulfilment, then deleted, unless there is an active dispute requiring evidence.
- Marketing preferences: kept while you remain subscribed. If you opt out, we keep a minimal suppression record to respect your choice.
- Security logs: kept for security monitoring and investigations, usually shorter periods, unless needed for an active investigation.
If you request deletion, we will delete personal data where we can. We may need to retain limited information where required for legal obligations, fraud prevention, competition audit trails, dispute defence, or to respect opt-outs.
Your rights
You have rights under UK GDPR, including:
- the right to be informed
- the right of access
- the right to rectification
- the right to erasure (in certain circumstances)
- the right to restrict processing (in certain circumstances)
- the right to object (including an absolute right to object to direct marketing)
- the right to data portability (in certain circumstances)
- the right to withdraw consent (where we rely on consent)
To exercise your rights, contact Policies@campervan.win. We may ask for reasonable information to verify your identity, especially for access or deletion requests.
We generally respond to rights requests within one month. If a request is complex, the law allows an extension (we will tell you if that applies).
Children
Our competitions are intended for people who meet eligibility requirements (typically adults). We do not knowingly collect personal data from children. If you believe a child has provided personal data to us, contact Policies@campervan.win and we will take appropriate steps.
Security
We use appropriate technical and organisational measures to protect personal data. Payment card details are handled by payment providers and are not stored by us. No system is completely risk-free, but we work to reduce risk and respond appropriately to security issues.
Data breaches
If we identify a personal data breach, we will assess the risk to individuals. Where required, we will report to the ICO and notify affected individuals. If you think your data may have been affected or you receive suspicious messages claiming to be from us, contact Policies@campervan.win.
Complaints
If you have concerns about how we use your data, contact Policies@campervan.win and we will try to resolve them. You also have the right to complain to the Information Commissioner’s Office (ICO), the UK data protection regulator.
Changes to this policy
We may update this Privacy Policy from time to time. The “Last updated” date at the top shows when it was last changed. Continued use of the website after updates means you have had the opportunity to review the revised policy.