Borders Competitions – Privacy & Cookie Notice

This privacy notice explains how Borders Competitions collects, uses, and protects your personal information, in accordance with UK GDPR and the Data Protection Act 2018. It applies to all website pages, services, competition entries (including postal entries), and any associated social media platforms. Any changes to this notice will be posted on this webpage.

What information do we collect?

You can browse our website without providing personal data. However, when you create an account, enter a competition, or interact with our services, we may collect the following:

Identity and contact details
Name, email address, telephone number, delivery address, and billing address.

Financial and transaction information
For competition payments, we process details securely via Cashflows, Stripe, Apple Pay, Google Pay or PayPal. When paying a prize, we may request sort code and account number.

Date of birth
Required to confirm age eligibility for competitions.

Competition and purchase history
Records of your entries, order values, ticket numbers, and account activity.

Document verification (for winners)
If you win a prize, we may request photo identification such as a driving licence or passport to confirm age and identity.

Publicity consent and media
If you consent, we may process your image, voice, and any content featuring you for promotional purposes (videos, livestreams, photographs, interviews).

Technical data
IP address, browser type, operating system, device identifiers, cookies, time zone, and usage data from website interactions.

Analytics and tracking data
This includes events such as page views, purchases, account registrations, login events, competition entries, checkouts, and marketing attribution via Google Tag Manager, Google Analytics 4 (including eCommerce tracking), Meta Pixel, TikTok Pixel, and other advertising tools.

Essential transaction tracking (regardless of cookie choice)
We track competition entries, purchases, new user registrations, and server-side security (fraud, payment validation) using first-party essential cookies and server-side logs. This data is processed regardless of consent because it is necessary for contractual performance, fraud prevention, and legal compliance.

Marketing data
Only if you have given consent, we may process cookies and data related to advertising interests and personalised campaigns.

Cookies and tracking technologies

We use first-party and third-party cookies for the following purposes:

| Type of cookie | Description | Consent required |
| Essential / Strictly Necessary | Supports login, checkout, ticket entries, fraud prevention, purchase records, and account security. Also includes essential analytics required to attribute purchases. | Not optional (legitimate interest / performance of contract) |
| Analytics (Google Analytics 4, GTM) | Helps us analyse website performance and understand how users engage with competitions and content. Includes first-party event tracking such as purchase value, sign-up, and traffic source. | Consent required |
| Marketing (Meta Pixel, TikTok, Google Ads) | Used to measure advertising effectiveness and create personalised or remarketing campaigns. | Consent required |
| Functional | May help remember preferences such as account settings or live draw preferences. | May require consent depending on use |

You can change or withdraw your cookie preferences at any time by using the cookie settings button available on our site.

Blocking optional cookies will not affect your ability to enter competitions or make purchases. However, it may reduce tracking accuracy and personalised offers.

About Google Tag Manager and Essential Analytics

We use Google Tag Manager to manage website tracking technologies including Google Analytics, Meta Pixel, TikTok Pixel and Google Ads. Google Tag Manager itself does not collect personal data. It simply activates scripts.

Certain purchase and signup data (including revenue tracking) are transmitted using first-party essential mechanisms, even without analytics consent. This is because purchase reporting, VAT accounting, fraud prevention and transaction validation are required under contractual and legal obligations.

Full marketing and analytics tracking (including behaviour, attribution, and remarketing) only activates when you give consent through the cookie banner.

Embedded content from other websites

Articles or videos on this site may include embedded content (e.g. YouTube, Facebook, Instagram). These third-party websites may collect data and use tracking technologies. Please refer to their own privacy policies.

Live Draws

When draws are streamed live, usernames or public social media names may be displayed. You can choose a username that does not identify you personally. Borders Competitions does not store chat comments or viewer data from live streams.

How and why we process your personal data

| Purpose | Legal Basis |
| Account creation, competition entry, processing payments, fulfilling prize obligations | Contractual necessity |
| Checking age and identity, fraud prevention, accounting, VAT compliance | Legal obligation and legitimate interest |
| Basic purchase and event tracking (server-side) | Contractual necessity / legitimate interest |
| Analytics to improve user experience and service performance | Consent (if browser-based) / Legitimate interest (if essential security) |
| Marketing, advertising, and remarketing using Meta, Google Ads, TikTok | Consent |
| Sharing winner media, testimonials, imagery, or videos | Consent |
| Responding to queries or disputes | Contractual necessity / Legitimate interest |
| Regulatory or legal reporting requests | Legal obligation |

You may withdraw consent for marketing or publicity at any time.

How long do we keep your data?

We only keep your personal data as long as it is required by law, your active account status, or our business needs. Identification documents held for winners are securely stored and may be erased at your request.

Financial transaction records must be retained for up to 7 years for tax compliance.

Your rights under GDPR

If we hold personal information about you, you are entitled to:

• Access your personal data
• Request correction of inaccurate data
• Request deletion (unless legally required to retain)
• Withdraw consent at any time
• Object to processing where based on legitimate interest
• Restrict processing in certain circumstances
• Request a copy of your data in portable format
• Object to direct marketing at any time

To exercise your rights, please email: [email protected]

Contact details

Data Protection Contact
Borders Competitions
Email: [email protected]