Privacy Policy

1. Introduction

Lucky Coast Ltd ("we," "our," "us") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, store, and protect your personal data in accordance with UK GDPR and the Data Protection Act 2018.

2. Data Controller

Lucky Coast Ltd is the data controller responsible for your personal data. Our contact details are:
Email: privacy@luckycoast.com
Address: 123 Example Street, London, SW1A 1AA

3. Information We Collect

3.1 Information You Provide

• Name, email address, phone number
• Date of birth (for age verification)
• Postal address (for prize delivery)
• Payment information (processed by third-party processors)

3.2 Information Collected Automatically

• IP address and browser information
• Cookies and similar tracking technologies
• Usage data and analytics

4. How We Use Your Data

We use your personal data to:

• Process ticket purchases and manage competitions
• Contact winners and verify identities
• Deliver prizes to winners
• Send order confirmations and account updates
• Comply with legal obligations
• Improve our website and services
• Send marketing communications (only with your consent, and you can opt out anytime)

5. Legal Basis for Processing

We process your data based on:

• Contract: To fulfill our obligations when you enter competitions
• Legal obligation: To comply with gambling regulations and tax laws
• Legitimate interests: To operate our business, prevent fraud, and improve services
• Consent: For marketing communications and non-essential cookies

6. Data Sharing

We may share your data with:

• Payment processors: To process transactions securely (Stripe, PayPal, etc.)
• Delivery companies: To ship prizes to winners
• Analytics providers: To understand website usage (Google Analytics, PostHog)
• Email service providers: To send transactional and marketing emails (Klaviyo)
• Legal authorities: When required by law

We never sell your personal data to third parties.

7. Data Security

We protect your data using:

• SSL/TLS encryption for data in transit
• Encryption at rest for stored data
• Access controls and authentication
• Regular security audits and updates
• PCI-DSS compliance for payment data

8. Data Retention

We retain your data for:

• Account data: Until you request deletion or close your account
• Transaction records: 7 years (legal requirement for tax purposes)
• Marketing data: Until you unsubscribe or request deletion
• Winner information: Permanently (for transparency and verification)

9. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate or incomplete data
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Data portability: Receive your data in a structured format
• Object: Object to processing based on legitimate interests
• Withdraw consent: Withdraw consent for marketing or cookies anytime

To exercise these rights, email privacy@luckycoast.com.

10. Cookies

We use cookies for:

• Essential: Required for website functionality
• Analytics: To understand how visitors use our site
• Marketing: To show relevant advertising (with consent)

You can manage cookies via your browser settings or our cookie consent tool. See our Cookie Policy for more details.

11. Third-Party Links

Our website may contain links to third-party websites. We are not responsible for their privacy practices. Please review their privacy policies.

12. Children's Privacy

Our services are only for users aged 18+. We do not knowingly collect data from children under 18.

13. International Transfers

Some of our service providers may be based outside the UK. When we transfer data internationally, we ensure adequate safeguards are in place (e.g., Standard Contractual Clauses).

14. Changes to This Policy

We may update this Privacy Policy from time to time. Changes will be posted on this page with an updated "Last updated" date.

15. Contact Us

For privacy questions or to exercise your rights, contact:
Email: privacy@luckycoast.com
Post: Data Protection Officer, Lucky Coast Ltd, 123 Example Street, London, SW1A 1AA

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.