Yada YadaPrizes

Privacy Policy


**Last updated:** August 2026


1. Who We Are


**Yada Yada Prizes Ltd**, trading as **Yada Yada Prizes**, is the data controller for personal data collected through this website.


Contact: yada@yadayadaprizes.co.uk


Address: 44a West Henderson's Wynd, Dundee DD1 5BT, United Kingdom


2. What Data We Collect


  • **Account data:** Name, email, phone, address, date of birth
  • **Entry data:** Ticket numbers, skill challenge answers, payment status
  • **Payment data:** Processed by our payment providers; we do not store full card details
  • **Technical data:** IP address, browser type, device information (via cookies and server logs)
  • **Analytics data (optional):** Aggregated usage data via Google Analytics if you accept analytics cookies

  • 3. How We Use Your Data


  • To create and manage your account
  • To verify you are 18 or over
  • To process competition entries and payments
  • To conduct draws and notify winners
  • To comply with legal obligations
  • To send entry confirmations and service emails
  • With your consent, to understand how the website is used and improve it

  • 4. Legal Basis (UK GDPR)


  • **Contract:** Processing necessary to provide competition entry services
  • **Legal obligation:** Age verification, record keeping, competition law compliance
  • **Legitimate interests:** Fraud prevention, security, service improvement
  • **Consent:** Non-essential cookies and marketing communications (where applicable)

  • 5. Data Retention


  • Account data: retained while your account is active plus 6 years
  • Entry and draw records: retained for 6 years for regulatory compliance
  • Payment records: retained as required by financial regulations

  • 6. Data Security


  • Passwords are hashed using bcrypt
  • Sensitive fields (address, date of birth) are encrypted at rest
  • All data transmitted over HTTPS
  • Access restricted to authorised personnel

  • 7. Your Rights


    Under UK GDPR you have the right to:

  • Access your personal data
  • Rectify inaccurate data
  • Request erasure (subject to legal retention requirements)
  • Restrict or object to processing
  • Data portability
  • Lodge a complaint with the ICO (ico.org.uk)

  • Contact yada@yadayadaprizes.co.uk to exercise your rights.


    8. Third Parties


    We share data with:

  • **Payment providers:** Card and wallet payments
  • **Email providers:** Entry confirmations and verification
  • **Hosting providers:** Infrastructure
  • **Google Analytics:** Website usage analytics, only if you accept analytics cookies (Google Ireland Limited / Google LLC as processor)

  • We do not sell your personal data.


    9. Cookies Policy


    This section explains how we use cookies and similar technologies on yadayadaprizes.co.uk.


    9.1 What Are Cookies?


    Cookies are small text files stored on your device when you visit a website. They help the site work, remember preferences, and (with consent) understand how the site is used.


    9.2 Cookies We Use


    | Cookie / storage | Type | Purpose | Duration |

    |------------------|------|---------|----------|

    | Authentication token (local storage) | Strictly necessary | Keeps you signed in after login | Until you log out or it expires |

    | Basket contents (local storage) | Strictly necessary | Stores items in your basket before checkout | Until cleared or checkout completes |

    | Cookie consent choice (local storage) | Strictly necessary | Remembers whether you accepted or rejected analytics cookies | Until you clear site data or change settings |

    | Session / security cookies | Strictly necessary | Security, load balancing, and fraud prevention | Session |

    | Google Analytics (_ga, _ga_*, etc.) | Analytics (optional) | Measures visits and how pages are used | Up to 2 years (Google defaults) |


    Analytics cookies are only set after you choose **Accept analytics** on our cookie banner. Choosing **Essential only** keeps analytics storage denied.


    9.3 Strictly Necessary Cookies


    These are required for the website to function (account login, basket, checkout, security, and remembering your cookie choice). They cannot be switched off in our systems. UK law does not require consent for strictly necessary cookies.


    9.4 Managing Cookies


    You can change your analytics preference at any time via **Cookie settings** in the website footer. You can also block or delete cookies through your browser settings. Blocking strictly necessary cookies may prevent you from logging in, using your basket, or completing checkout.


    9.5 Changes


    We may update this Cookies Policy. The "Last updated" date at the top will change when we do.


    10. Changes to This Policy


    We may update this policy. Material changes will be notified on the website.