Privacy policy

This is a plain-English summary of how we handle your data. Please have your own legal adviser review it before you go live.

Who we are

Graft Pot Ltd (registered in England & Wales, company no. 00000000) is the data controller for this site. Contact us at hello@graftpot.co.uk.

What we collect

Your name and email address, your account and entry history, ticket numbers, prize and payout records, and basic technical data such as your device type and pages viewed.

How we use it

To create your account, process entries and payments, run draws, contact winners, publish masked winner names (first name and last initial only), prevent fraud and meet our legal record-keeping duties.

Payments

Card, Apple Pay and Google Pay details are handled by Stripe as our payment processor. We never see or store your full card details.

Sharing

We share data only with the service providers that run this site (hosting, database, email and payments) and with authorities where the law requires it. We never sell your data.

Retention

Account and entry records are kept for as long as your account is open and then for the period we are legally required to retain financial records.

Your rights

You can request access to, correction of, or deletion of your personal data, object to marketing at any time, and complain to the ICO. Email hello@graftpot.co.uk and we'll respond within one month.

See also our terms and conditions and free postal entry route. 18+ only, UK residents.