Privacy Policy

Barry Bangers Ltd is the organisation responsible for deciding how and why the personal information described in this policy is processed. For data-protection purposes, Barry Bangers Ltd is the data controller.

Privacy enquiries can be submitted through the Contact page or sent in writing to the registered office above.

This Privacy Policy applies when you:

• visit or browse the Website;
• create or use a customer account;
• enter a paid or postal Competition;
• purchase Competition entries through WooCommerce;
• receive Ticket Numbers;
• contact us using an Elementor form, email or another support channel;
• subscribe to marketing communications;
• are selected or verified as a Winner; or
• otherwise interact with Barry Bangers Ltd.

This policy does not govern websites or services operated independently by third parties, even where they are linked from the Website.

Identity and eligibility information

• full name;
• date of birth or confirmation that you are at least 18;
• proof of identity, age or UK residence where verification is required;
• Winner verification documents; and
• Competition eligibility information.

Contact information

• postal address;
• email address;
• telephone number; and
• communication preferences.

Account and transaction information

• account username and encrypted password credentials;
• orders, Entry quantities and transaction status;
• Competition names and Ticket Numbers;
• answers submitted to skill-based questions;
• refunds, cancellations, failed payments and chargebacks;
• billing details; and
• customer-service records.

Payment information

Payment providers process your card or payment account details. Barry Bangers Ltd does not ordinarily receive or store your complete card number or card security code. We may receive limited transaction information, such as payment status, payment method type, provider reference, amount and fraud-screening result.

Technical and usage information

• IP address;
• browser type and version;
• device type, operating system and screen information;
• time zone and approximate location derived from IP address;
• pages viewed, links selected and session activity;
• login, cart and checkout activity;
• cookie and consent preferences;
• security logs, error reports and access records; and
• referring website or campaign information.

Communications and content

• messages submitted through contact forms;
• email and support correspondence;
• feedback, reviews or complaints;
• telephone-call notes where made; and
• photographs, video or testimonials supplied with permission.

We collect personal information:

• directly from you when you create an account, enter a Competition, purchase Entries, send a postal Entry, contact us or claim a Prize;
• automatically through cookies, server logs, security tools and similar technologies;
• from payment providers when they confirm, decline, refund or flag a transaction;
• from delivery, identity-verification or professional-service providers where necessary to administer a Prize or comply with law; and
• from public sources, such as Companies House or publicly accessible records, where verification, fraud prevention or legal compliance reasonably requires this.

We may use personal information to:

• create and administer customer accounts;
• accept and process Competition Entries;
• check skill-question answers and Entry limits;
• allocate and display Ticket Numbers;
• process payments, refunds and cancelled Competitions;
• select, contact and verify Winners;
• arrange Prize collection or delivery;
• provide order confirmations and service messages;
• respond to questions, complaints and support requests;
• detect and prevent fraud, abuse, multiple-account misuse and security threats;
• enforce our Terms and Conditions;
• maintain accounting, tax, legal and Competition records;
• improve Website performance, accessibility and user experience;
• measure the effectiveness of advertising and marketing where permitted;
• send marketing communications where lawful; and
• establish, exercise or defend legal claims.

We will not use personal information for a materially incompatible purpose without giving you appropriate information and, where required, obtaining consent.

UK data-protection law requires a lawful basis for each use of personal information. The bases most relevant to Barry Bangers Ltd are shown below.

Legitimate interests

Where we rely on legitimate interests, those interests may include operating and improving the business, preventing fraud, protecting customers, maintaining Website and payment security, responding to enquiries, demonstrating that Competitions are administered fairly and defending legal rights.

We consider whether our interests are necessary and whether they are overridden by your rights and freedoms. You may object to processing based on legitimate interests as explained below.

When you enter a Competition, we use your personal information to confirm eligibility, process the Entry, check the skill-based answer, enforce Entry limits, allocate Ticket Numbers and include valid Tickets in the relevant draw.

We retain Competition records so that we can demonstrate how Entries were accepted, how Tickets were allocated, how the Winner was selected and how the Prize was awarded.

Ticket-holder information displayed publicly should be limited to what is reasonably necessary for transparency. We do not intend to publish full postal addresses, complete telephone numbers, complete email addresses, payment details or identity documents.

The Website uses WooCommerce to manage products, Competition Entries, carts, checkout, orders, refunds and customer accounts.

A third-party payment provider processes payment credentials. The provider may independently process personal information under its own privacy policy and may carry out fraud, anti-money-laundering or payment security checks.

Barry Bangers Ltd may receive and retain the transaction reference, payment status, payment method category, amount, billing details, refund status and fraud-screening outcome needed to administer the order.

Account data allows you to view orders, Competition Entries and Ticket Numbers. You are responsible for keeping login credentials confidential and notifying us if you believe your account has been compromised.

Elementor Forms or another contact facility may collect your name, email address, telephone number, subject, message, IP address and technical submission data. We use this information to respond, investigate and maintain a record of the enquiry.

Please do not submit unnecessary sensitive information through a general contact form. Where identity documents are required for Winner verification, we will explain how they should be supplied.

We may request proof of identity, age, UK residence and eligibility before releasing a Prize. Verification information will be used only for administering the Competition, preventing fraud, meeting legal duties and resolving disputes.

To demonstrate that a Competition has been completed fairly, we may publish limited information such as:

• the Winner’s first name and surname initial;
• the Winner’s general town, city or county;
• the winning Ticket Number;
• the Competition and Prize; and
• photographs or video where permission or another lawful basis applies.

A Winner with a genuine safety or privacy concern should contact us promptly. We will consider reasonable requests while retaining sufficient evidence of fair Competition administration.

We may send information about new Competitions, closing dates, Winners, offers or Barry Bangers news where you have consented or where another lawful route is available under UK marketing law.

Marketing preferences can be changed at any time by:

• using an unsubscribe link in a marketing email;
• following the opt-out instructions in a text message;
• changing available account preferences; or
• contacting us.

Opting out of marketing does not prevent us from sending essential service messages about your account, Entries, orders, refunds, Competition changes or Prize claims.

Cookies and similar technologies are small files or identifiers used by the Website. They may be necessary for operation or used, subject to applicable consent rules, for preferences, analytics and marketing.

Strictly necessary cookies

These support essential functions such as security, login sessions, fraud prevention, shopping carts, checkout and remembering cookie choices. They may not require consent where they are strictly necessary to provide a service you requested.

Preference cookies

These remember settings that improve your experience, such as display or account preferences.

Analytics cookies

These help us understand Website use, page performance, errors and user journeys. Where consent is required, analytics cookies should not be set until consent has been given.

Advertising and social-media technologies

These may measure campaigns, build audiences or support content shared through social platforms. They should be used only in accordance with applicable consent and transparency requirements.

You can manage non-essential cookies through the Website’s cookie controls and browser settings. Blocking necessary cookies may prevent account, cart or checkout functions from working correctly.

We do not sell personal information. We may share it with carefully selected organisations where necessary, including:

• website hosting, maintenance and security providers;
• WooCommerce and WordPress service providers;
• payment processors, banks and fraud-prevention providers;
• email-delivery and marketing platforms;
• analytics, consent-management and advertising providers;
• identity or age-verification providers where used;
• couriers, vehicle transporters and Prize-delivery partners;
• accountants, solicitors, insurers and other professional advisers;
• law-enforcement, courts, regulators, tax authorities or public bodies where required; and
• a buyer, investor or adviser involved in a proposed sale, reorganisation or transfer of the business.

Service providers acting on our behalf are expected to process information only for authorised purposes and to apply appropriate confidentiality and security safeguards.

Some service providers may store or access personal information outside the United Kingdom. Where this amounts to a restricted international transfer, we will use a lawful transfer mechanism and appropriate safeguards.

Depending on the destination and provider, safeguards may include:

• UK adequacy regulations;
• the UK International Data Transfer Agreement;
• the UK Addendum to approved standard contractual clauses;
• contractual, technical and organisational safeguards; or
• another transfer mechanism permitted by UK law.

You may contact us for further information about the safeguards relevant to your personal information.

We keep personal information only for as long as reasonably necessary for the purpose for which it was collected, including legal, tax, accounting, fraud prevention and dispute-resolution requirements.

Retention periods may be extended where information is needed for an active complaint, investigation, legal claim, regulatory request or fraud-prevention purpose. Information may be anonymised so that it no longer identifies an individual.

We use reasonable technical and organisational measures intended to protect personal information against accidental or unlawful loss, alteration, disclosure, access, destruction or misuse.

Measures may include:

• encrypted website connections;
• restricted administrative access;
• account authentication and password protection;
• server, firewall, malware and security monitoring;
• software updates and vulnerability management;
• backups and recovery controls;
• payment processing through specialist providers; and
• staff and contractor confidentiality requirements.

No internet service can guarantee absolute security. You should use a strong, unique password and notify us promptly if you suspect unauthorised account activity.

Depending on the circumstances, UK data-protection law may give you the following rights:

Rights are not absolute and may be subject to legal exemptions. We may ask for information needed to confirm identity before responding.

We will normally respond to a valid rights request within one month, although the period may be extended where legally permitted for complex or multiple requests.

There is normally no fee. A reasonable fee may be charged, or a request refused, where permitted by law because it is manifestly unfounded or excessive.

Barry Bangers Competitions are restricted to people aged 18 or over. The Website and Competition services are not intended for children, and we do not knowingly accept Competition Entries from anyone under 18.

If we learn that a child has supplied personal information or created an account, we may take steps to close the account and delete the information, subject to any legal or fraud-prevention requirement to retain a limited record.

The Website may link to social networks, payment providers, mapping services, delivery providers or other third-party websites. Those organisations control their own processing and privacy notices.

We are not responsible for the privacy practices of an independent third party. You should review its privacy information before providing personal data.

Please contact Barry Bangers Ltd first so that we have an opportunity to investigate and resolve your concern.

You also have the right to complain to the Information Commissioner’s Office, the UK supervisory authority for data protection. The ICO provides current complaint and contact information through its official website.

Making a complaint does not affect any other legal rights or remedies available to you.

We may update this Privacy Policy to reflect changes in our services, technology, providers, legal obligations or business practices.

The current version will be published on the Website. Where a change is material, we may provide an additional notice through the Website, by email or through your account.

The date shown at the top of the policy identifies the most recent revision.