Last updated: 1 August 2026. This policy explains what personal data Superluxe Vault collects, why we collect it, how long we keep it, and the rights you have over it. We comply with the UK GDPR and the Data Protection Act 2018.
We collect data you give us directly (name, email, phone, postal address, date of birth, payment confirmation), data created when you use the site (entries, ticket numbers, orders, IP address, browser type), and data from our payment and analytics providers. We do not store full card numbers — payments are handled by PCI-compliant third parties.
We use your data to: run competitions and issue ticket numbers; verify winners and arrange prize delivery; process payments and refunds; provide account features; send you transactional emails (orders, draws, wins); send marketing if you have opted in; comply with legal and tax obligations; detect and prevent fraud; and improve our service.
We process your data under the following UK GDPR lawful bases: contract (to run the competitions you enter and deliver prizes you win); legal obligation (record-keeping, anti-fraud, tax); legitimate interests (site security, analytics, service improvement); and consent (marketing emails and SMS). You can withdraw marketing consent at any time.
We share data only with: an approved payment processor when online payments are enabled; our email and SMS providers; delivery and logistics partners for prize handover; analytics and cookie providers (see our Cookie Policy); and authorities where legally required. We never sell your personal data.
We keep account data for as long as your account is active. Competition and order records are kept for 7 years to meet tax and legal obligations. Winner verification records are kept for 7 years. Marketing data is kept until you unsubscribe or 2 years after your last interaction, whichever is sooner. You can request deletion of your account and personal data at any time, subject to legal retention requirements.
Under UK GDPR you have the right to: access your data; correct it; delete it (where lawful); restrict processing; port it to another provider; object to processing; and withdraw consent. You also have the right to complain to the Information Commissioner's Office (ICO) at ico.org.uk. To exercise any right, email admin@superluxevault.co.uk — we respond within one month.
We use cookies and similar technologies for essential site function, analytics and — with your consent — marketing. Full details, including the cookies we set and how to manage them, are in our Cookie Policy.
We use industry-standard measures to protect your data: encryption in transit (TLS), encrypted storage, access controls, regular security reviews and staff training. No system is perfectly secure, but we treat protection of your data as a core responsibility and notify the ICO and affected individuals of any reportable breach within the required timescales.
Some of our processors operate outside the UK. We only transfer data to countries with adequate data protection, or under safeguards such as UK International Data Transfer Agreements. We do not transfer data to any jurisdiction without appropriate protection in place.
Our competitions are for people aged 18 and over. We do not knowingly collect data from under-18s. We verify age before awarding prizes. If you believe a child has provided us with data, contact us and we will delete it.
We may update this policy from time to time. The "last updated" date at the top reflects the most recent version. Material changes will be highlighted on our site and, where appropriate, emailed to active account holders.
Superluxe Vault Ltd is the data controller. For any data protection question, request or complaint, contact us at admin@superluxevault.co.uk or by post at 37 Bethlehem Street, Grimsby, DN31 1JQ.