Privacy notice

This notice explains, in plain English, what SK COMPS does with the personal information you give us when you enter a free draw. It is written to meet our obligations under the UK General Data Protection Regulation, the Data Protection Act 2018 and the Privacy and Electronic Communications Regulations.

1. Who we are

SK COMPS is the data controller for the personal information you give us when you enter a free draw. We decide how that information is used and we are responsible for keeping it safe.

  • Contact for general queries: hello@skcomps.co.uk
  • Contact for privacy and data rights requests: privacy@skcomps.co.uk
  • Postal address: SK COMPS, PO Box 2026, Stockport, SK1 1AA
  • We are not currently required to appoint a Data Protection Officer. Privacy requests are handled by the person responsible for running the draw.
  • Before launch, confirm the registered company name and address here, and register with the ICO as a data controller (a legal requirement for most UK organisations processing personal data, currently from £52 a year).

2. The information we collect

When you enter a free draw through this website we collect:

  • Your full name — so we can identify you and contact a winner.
  • Your email address — the only way we contact you about the draw.
  • Your house number or name and your SK postcode — used to confirm you live in SK1–SK23, which is the entry condition for the draw.
  • The fact that you confirmed you are 18 or over and accepted the terms.
  • Your marketing permission, the exact wording you agreed to, and the date and time you agreed — kept as our record of consent.
  • The date of your entry and your entry reference.
  • For winners only: photo identification and proof of address supplied for verification, and a delivery address for sending the prize.

3. What we do not collect

  • We do not take payment details, because entry is free.
  • We do not ask for your date of birth, only your confirmation that you are 18 or over.
  • We do not use advertising or tracking cookies on this site. Only cookies strictly necessary to make the site work are used, so no cookie consent banner is required.
  • We do not collect special category data (such as health or ethnicity) and we do not knowingly collect data about children.

4. Why we use it, and our lawful basis

Under UK GDPR we must have a lawful basis for each use of your data. Ours are:

  • Running the draw, checking SK eligibility, drawing winners and contacting them — necessary to perform the contract that arises when you enter (Article 6(1)(b)).
  • Sending you emails about this and future SK COMPS draws — your consent (Article 6(1)(a)) and Regulation 22 of PECR. Entry is free in exchange for this permission, which is why the box must be ticked; you can withdraw it at any time.
  • Verifying winner identity, age and SK residency and preventing fraud or duplicate entries — our legitimate interests in running a fair draw (Article 6(1)(f)). We have balanced this against your rights and use the minimum checks needed.
  • Keeping financial and prize records — necessary to comply with our legal obligations (Article 6(1)(c)).
  • Winner identity documents are handled under Article 6(1)(f) and retained only as long as needed to evidence a lawful award.

5. Marketing emails and your control over them

Entry is free. By entering I agree that SK COMPS may email me about this draw, its result and future SK COMPS draws and offers. I can unsubscribe at any time, and I understand that unsubscribing does not remove me from a draw I have already entered.

  • Every email we send carries a one-click unsubscribe link and our postal address.
  • You can also unsubscribe at any time by emailing privacy@skcomps.co.uk. We action requests within 5 working days.
  • Withdrawing consent does not affect an entry you have already made, and does not affect processing carried out before you withdrew.
  • We do not sell, rent, share or trade your details with third-party marketers. Ever.
  • We do not send marketing by text message or telephone.

6. Who we share it with

We share your data only with the suppliers that make the draw possible. Each acts as our processor under a written contract that requires them to keep your data secure and use it only on our instructions.

  • Our hosting and database provider, which stores entries securely.
  • Our email delivery provider, which sends entry confirmations, draw results and newsletters.
  • Professional advisers, auditors, or the police and regulators, where we are legally required or permitted to disclose.
  • Nobody else. Your data is never sold or used for third-party advertising.

7. Where your data is stored, and transfers abroad

  • Entrant data is stored on servers within the UK or European Economic Area wherever possible.
  • Some suppliers may process data in the United States. Where that happens we rely on the UK International Data Transfer Agreement, the UK Addendum to the EU Standard Contractual Clauses, or the UK Extension to the EU–US Data Privacy Framework, so your data keeps essentially equivalent protection.
  • You can ask us for details of the safeguards used for any specific transfer.

8. How long we keep it

  • Entries for a draw that has closed: kept for 12 months after the draw, so we can answer queries and evidence a fair result, then deleted.
  • Marketing contacts: kept while you remain subscribed and for 12 months after you unsubscribe, so we can honour your opt-out and prove when it was made.
  • Winner records, verification evidence and prize payment records: kept for six years from the end of the relevant financial year, as required for tax and audit purposes.
  • Identity documents supplied by winners: deleted within 30 days of the prize being awarded, unless we need them for a specific legal dispute.
  • After these periods your data is securely deleted or irreversibly anonymised.

9. How we keep it safe

  • Entrant data is stored in a database that cannot be read from this website: the entry form can only add records, never list or download them.
  • Access is limited to the small number of people who run the draw, protected by strong passwords and two-factor authentication.
  • Data is encrypted in transit (HTTPS) and at rest by our hosting provider.
  • If a breach happens that risks your rights, we report it to the ICO within 72 hours and tell affected entrants without undue delay.

10. Automated decisions and profiling

  • The winner is chosen at random. We do not use profiling or automated decision-making that has a legal or similarly significant effect on you.
  • The only automated check is a postcode format check that confirms whether an address falls inside SK1–SK23. If it wrongly rejects you, email us and we will check it by hand.

11. Your rights

Under UK GDPR you have the right to:

  • Be informed about how we use your data — that is what this notice is for.
  • Access a copy of the personal data we hold about you (a subject access request).
  • Have inaccurate data corrected.
  • Have your data erased, where we no longer need it — note that erasing your entry before the draw removes you from it.
  • Restrict our use of your data while a concern is investigated.
  • Object to processing we carry out under legitimate interests.
  • Withdraw marketing consent at any time.
  • Receive your data in a portable, machine-readable format.
  • To use any of these rights, email privacy@skcomps.co.uk. We respond within one month and there is no charge. We may ask you to confirm your identity first.

12. Complaints

  • If you are unhappy with how we have handled your data, please tell us first at privacy@skcomps.co.uk so we can put it right.
  • You can also complain to the Information Commissioner's Office: ico.org.uk, or 0303 123 1113, or Wycliffe House, Water Lane, Wilmslow, Cheshire SK9 5AF.
  • Complaining to the ICO does not affect any other legal rights you have.

13. Changes to this notice

  • We may update this notice as the draws develop. The current version always appears on this page.
  • If we make a significant change to how we use your data, we will email entrants who are still on our list.
  • This notice was last updated in September 2026.

Contact details, the controller name and the ICO registration in section 1 are placeholders until you confirm the real ones. Requiring marketing permission as a condition of a free entry is a common promotional model, but the ICO's position is that consent should be freely given — have this reviewed by a UK data protection adviser before you launch at scale.