Privacy Policy

How we collect, use and protect your personal data

VannyCampers Ltd  •  Effective: 6 May 2026

Your privacy matters to us. This Privacy Policy explains, in plain English, what personal data we collect about you when you use https://vannycampers.co.uk, enter our Competitions, subscribe, contact us, or interact with our social channels — and what we do with it.

We are the data controller. We comply with the UK General Data Protection Regulation ("UK GDPR") and the Data Protection Act 2018.

1. Who we are

1.1       VannyCampers Ltd ("VannyCampers", "we", "us", "our"), a company registered in England & Wales (Company No. 13264401), registered office Alveston, Bristol, United Kingdom, is the controller of your personal data for the purposes of UK GDPR.

1.2       Our Data Protection contact is the Privacy Lead, reachable at privacy@vannycampers.co.uk. We have not appointed a statutory Data Protection Officer because we are not required to under UK GDPR.

2. The data we collect

2.1       Identity data: first name, last name, date of birth, gender (where you choose to provide it), photograph or video at handover.

2.2       Contact data: postal address, email address, telephone number.

2.3       Account data: username, password (stored encrypted), account preferences, marketing preferences, spend-limit settings, suspension status.

2.4       Transaction data: tickets purchased, Competitions entered, payment method (we do not store full card numbers — these are held by our payment processors), receipts, refunds.

2.5       Subscription data: tier, billing date, payment status, history of cycles and entries allocated.

2.6       Verification data (KYC): a copy of a government-issued ID, a recent proof of address, and confirmation of date of birth, where you have won a Prize.

2.7       Technical data: IP address, browser type and version, device type, time-zone, operating system, the URL that referred you, the pages you viewed, cookies (see section 11).

2.8       Marketing data: your consent for email and SMS, your interactions with our messages (opens, clicks), social-media profile information you make public when interacting with us.

2.9       Player-protection data: information generated by our monitoring (clause 15.5 of the Competition T&Cs), self-declared limits, suspension records, support signposting events.

2.10     We do not collect or process special-category data unless you choose to share it with us in connection with a vulnerability or accommodation request, in which case we will rely on your explicit consent.

3. How we collect it

3.1       Directly from you when you register, enter a Competition, subscribe, contact us, post on our social channels, or post us a free entry.

3.2       Automatically through cookies and similar technologies when you use our Platform (see section 11).

3.3       From third parties — for example, payment processors confirming your payment, social-media platforms when you log in via Facebook or Google, Royal Mail when a postal entry reaches us, and from publicly accessible registers when we need to verify identity.

4. Lawful bases for processing

4.1       Contract — to provide the Platform, run Competitions you enter, take Subscription payments, deliver Prizes, and provide customer support.

4.2       Legitimate interests — to keep our Platform safe and fair (fraud prevention, abuse detection, account security), to verify winners under KYC, to monitor for harm and intervene under our player-protection commitments, to improve our products, to publicise the integrity of our draws, and to send service messages.

4.3       Consent — for marketing email and SMS, for non-essential cookies, and for any optional publicity beyond minimum draw-integrity disclosures (see Competition T&Cs cl. 12).

4.4       Legal obligation — for tax, accounting, anti-money-laundering, and to comply with regulatory or court orders.

5. How we use your data

5.1       To set up and run your account, accept entries, take payment, run draws, contact winners, deliver Prizes, and provide receipts.

5.2       To keep our Platform safe — detect and prevent fraud, multi-accounting, money-laundering, and breaches of our Acceptable Use Policy.

5.3       To meet our commitments under the DCMS Voluntary Code — including spend-limit support, account-suspension support, activity monitoring for harm, and signposting to support services.

5.4       To send transactional and service messages — order confirmations, draw notifications, account-status notices, security alerts.

5.5       With your consent, to send marketing email and SMS about new Competitions, draw schedules, winner stories, and special offers.

5.6       To improve our Platform, services, advertising and customer experience, including analytics in aggregated or pseudonymous form.

5.7       To meet our regulatory and legal obligations, and to defend our legal rights.

6. Marketing — and how to stop it

6.1       We will only send you marketing email or SMS where you have opted in (or, where lawfully permitted, where you previously bought from us and have not opted out).

6.2       You can opt out at any time by clicking "unsubscribe" on any marketing email, by replying STOP to any SMS, by updating your preferences in your account, or by emailing privacy@vannycampers.co.uk. We will action opt-outs within 48 hours.

6.3       We will not send marketing during a self-imposed account suspension or after a permanent closure.

6.4       Our SMS service is provided by TextGlobal Ltd. Standard SMS confidentiality and delivery rules apply.

7. Who we share your data with

7.1       Our Platform is hosted on Shopify (Shopify International Limited, Ireland). Shopify processes order, account, and analytics data on our behalf as a processor. See https://www.shopify.com/legal/privacy.

7.2       Payment processing is handled by Stripe (Stripe Payments UK / Ireland) and PayPal (PayPal (Europe) S.à r.l. & Cie, S.C.A.). Card numbers are not visible to us. See stripe.com/privacy and paypal.com/privacy.

7.3       SMS is sent through TextGlobal Ltd (textglobal.co.uk). They process the phone number, message content and delivery metadata on our behalf.

7.4       Subscriptions are currently processed by Seal Subscriptions (a Shopify app). Seal stores subscription data on encrypted servers in Toronto, Canada. They hold customer name, email, billing and shipping addresses, and (where automatic charging is active) the last four digits, expiry, and type of payment card — never the full card number. Their full privacy policy is at sealsubscriptions.com/legal/privacy-policy and their DPO is dpo@sealsubscriptions.com. We are migrating Subscription billing to Shopify (see Competition T&Cs cl. 6.6 and our Subscription Terms). On migration, the data flow will be Shopify-only, and Seal will delete the subscription data store seven (7) days after we end our use of the app in line with their published retention policy.

7.5       Social-media posting and scheduling tools — Hootsuite (Hootsuite Inc., Canada) — handle scheduled post metadata, not customer accounts.

7.6       Advertising — Meta Platforms (Facebook, Instagram), Google (YouTube, Search, Display), TikTok. With your consent, we share hashed identifiers (such as a hashed email) so we can deliver and measure ads. You can opt out of advertising cookies in our cookie banner and through each provider's privacy controls.

7.7       Customer support tools, accounting / finance providers, our auditor, our solicitors, our converters, and our delivery partners — only where they need the data to do work for us, under written contracts that meet UK GDPR Article 28.

7.8       We may share data with regulators, law enforcement, or our legal advisers where we are required by law, where a court orders us to, where it is necessary to defend our legal rights, or where we reasonably believe it is necessary to prevent crime.

7.9       We never sell your personal data.

8. International transfers

8.1       Some of our processors are based outside the UK. Where they are, we use UK-approved transfer mechanisms — UK adequacy regulations, the UK International Data Transfer Agreement (IDTA), or the EU Standard Contractual Clauses with the UK Addendum — to make sure your data has equivalent protection.

8.2       A list of our material processors and the transfer mechanism used for each is available on request from privacy@vannycampers.co.uk.

9. Your rights

9.1       You have the following rights under UK GDPR. To exercise any of them, email privacy@vannycampers.co.uk. We will respond within one (1) month and will only ask for ID where reasonably necessary to verify your identity.

9.2       Access — to ask us for a copy of your personal data.

9.3       Rectification — to ask us to correct inaccurate or incomplete data.

9.4       Erasure — to ask us to delete your data, where there is no overriding legal reason for us to keep it.

9.5       Restriction — to ask us to pause processing while we deal with a query.

9.6       Portability — to ask us to send your data, in a structured machine-readable format, to you or another controller.

9.7       Object — to object to processing based on our legitimate interests, including direct marketing.

9.8       Withdraw consent — where we rely on consent (e.g. marketing, non-essential cookies) you may withdraw it at any time.

9.9       Complain — if you are unhappy with how we have handled your data you may complain to the Information Commissioner's Office (ICO) at ico.org.uk or 0303 123 1113. We would prefer to put things right ourselves first, so please do contact us before raising it with the ICO.

10. Retention

10.1     Account and entry data — for as long as your account is active, plus six (6) years afterwards to meet tax and limitation-of-action requirements.

10.2     KYC verification data — for the duration of any active dispute and otherwise no longer than five (5) years from completion of verification, in line with anti-money-laundering guidance.

10.3     Marketing data — until you opt out, plus thirty-six (36) months for suppression-list purposes.

10.4     Customer-support correspondence — typically two (2) years, longer if relevant to an open dispute.

10.5     Player-protection records (suspension, harm-monitoring decisions) — for as long as your account is active and seven (7) years afterwards as a record of how we discharged our duty under the Voluntary Code.

10.6     Postal-entry postcards — destroyed (shredded) within ninety (90) days of the relevant draw, after the entry record has been logged on our systems.

11. Cookies

11.1     We use a small number of essential cookies for the Platform to work — for example, to keep you logged in and to remember items in your basket. We use analytics and advertising cookies only where you have consented through our cookie banner.

11.2     You can withdraw cookie consent at any time using the "cookie preferences" link in the footer of our website. See our Cookie Policy for the full list and lifetimes.

12. Security

12.1     We protect your data with appropriate technical and organisational measures including TLS encryption in transit, encryption at rest for sensitive fields, role-based access control for staff, multi-factor authentication on administrative accounts, and regular review of our security posture.

12.2     No system is perfect. If we ever suffer a personal-data breach that is likely to result in a risk to your rights and freedoms, we will notify the ICO within 72 hours and notify you without undue delay where we are required to.

13. Children

13.1     Our Platform is for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If you believe a child under 18 has registered an account or entered a Competition, please email privacy@vannycampers.co.uk and we will investigate.

14. Changes to this Policy

14.1     We may update this Privacy Policy from time to time. The current version is always available at https://vannycampers.co.uk/policies/privacy-policy with the version date. Where we make material changes we will notify you by email or in-account notice before the change takes effect.

15. Contact

15.1     Questions about this Policy or your data? Email privacy@vannycampers.co.uk or write to: VannyCampers Ltd, VannyCampers, 14-15 Triangle South, Clifton, Bristol BS8 1EY.