Legal
Privacy Policy
Last updated: July 2026
1. Who we are
Ivory Vault Competitions Ltd ("Ivory Vault", "we", "us", "our"), a company registered in England and Wales under company number 17244721 with its registered office at 68 Laburnum Crescent, Northampton, NN3 2LF, operates this prize-competition website and is the "data controller" responsible for your personal data. If you have any questions about this policy or how we handle your data, contact us at support@ivoryvaultcompetitions.co.uk.
2. The data we collect
• Account details: your name, email address, mobile number and a securely hashed password. • Entries & orders: the competitions you enter, ticket/spin quantities, and purchase records. • Payment data: card payments are processed securely by Stripe. We do not see or store your full card details — only a payment reference. • Site credit & rewards: your balance, tier and any prizes won. • Support messages: anything you send us via the contact form. • Usage data: with your consent, analytics cookies (Google Analytics) collect anonymised information about how you use the site.
3. How and why we use it (lawful bases)
• To run your account and administer competitions, draws and prizes — necessary for our contract with you. • To take payment and prevent fraud — our legitimate interests and legal obligations. • To contact winners and provide customer support — contract and legitimate interests. • To send analytics/marketing — only where you have given consent, which you can withdraw at any time. We will never sell your personal data.
4. Cookies
We use strictly-necessary cookies to keep you logged in and to run your basket — these do not require consent. We only set analytics cookies (Google Analytics) if you accept them via our cookie banner. You can change your choice at any time by clearing the site data in your browser.
5. Who we share it with
We use trusted third-party processors to run the service: Stripe (payment processing), Resend (transactional email), Cloudinary (image hosting), Google Analytics (site analytics, with consent), and Vercel/Neon (website hosting and database). These providers only process your data on our instructions. Some may process data outside the UK/EEA under appropriate safeguards. We may also disclose data where required by law.
6. How long we keep it
We keep your account and entry records for as long as your account is active and for a reasonable period afterwards to meet legal, accounting and fraud-prevention requirements. You can ask us to delete your account at any time (subject to any records we must retain by law).
7. Your rights
Under UK GDPR you have the right to access, correct, delete or restrict processing of your personal data, to object to processing, to data portability, and to withdraw consent at any time. To exercise any of these, email support@ivoryvaultcompetitions.co.uk. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk.
8. Security
We protect your data with encryption in transit, hashed passwords, and access controls. No system is completely secure, but we take reasonable steps to safeguard your information and will notify you and the relevant authorities of any breach where legally required.
9. Children
Our competitions and services are strictly for adults aged 18 or over. We do not knowingly collect data from anyone under 18. If you believe a minor has provided us with personal data, contact us and we will delete it.
10. Changes to this policy
We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated date. Please review it periodically.