Privacy Policy

Proctor Motor Competitions ("PMC", "we", "us", "our") operates this website and is the data controller responsible for your personal data.

Contact Address:
Fairview, Forest Road
Wokingham, Berkshire
RG40 5SA
United Kingdom

2.1 Account Information

When you create an account, we collect:

• Email address
• Password (stored securely using encryption)
• Full name
• Marketing preferences

2.2 Competition Entry Information

When you enter a competition (online or postal), we collect:

• Full name
• Email address
• Phone number
• Postal address (including postcode)
• Ticket numbers allocated to you

2.3 Payment Information

When you purchase tickets, payment is processed by Stripe. We do not store your full card details. We receive and store only:

• Transaction reference IDs
• Payment status
• Order amounts

2.4 Technical Information

We automatically collect certain technical data when you visit our website, including IP address, browser type, and pages visited. This helps us improve our service and ensure security.

We use your personal information for the following purposes:

• Competition Administration: Processing entries, allocating tickets, conducting draws, and notifying winners
• Order Fulfilment: Processing payments and delivering prizes
• Communication: Sending order confirmations, entry confirmations, and winner notifications
• Account Management: Managing your account and providing customer support
• Marketing: Sending promotional communications (only with your explicit consent)
• Legal Compliance: Meeting our legal obligations under the Gambling Act 2005 and other regulations

Under UK GDPR, we process your data on the following legal bases:

• Contract: Processing necessary to fulfil our contract with you (e.g., competition entry, prize delivery)
• Consent: Where you have given explicit consent (e.g., marketing communications)
• Legitimate Interests: For fraud prevention, security, and improving our services
• Legal Obligation: Where required by law

We share your data with the following trusted third-party service providers who help us operate our business:

5.1 Stripe (Payment Processing)

Stripe processes all card payments securely. They receive your payment card details and billing information. View Stripe's privacy policy at stripe.com/privacy

5.2 Supabase (Database & Authentication)

Supabase provides our secure database and authentication services. Your account data and competition entries are stored securely on their servers. View Supabase's privacy policy at supabase.com/privacy

5.3 Resend (Email Delivery)

Resend delivers our transactional emails (order confirmations, winner notifications, etc.). They receive your email address and name for this purpose. View Resend's privacy policy at resend.com/legal/privacy-policy

We do not sell your personal data to any third parties.

We retain your personal data for as long as necessary to fulfil the purposes for which it was collected:

• Account Data: Retained until you delete your account or request deletion
• Competition Entry Data: Retained for 6 years after the competition closes (for legal and audit purposes)
• Transaction Records: Retained for 6 years as required by UK tax law
• Marketing Preferences: Retained until you withdraw consent

Under UK GDPR, you have the following rights regarding your personal data:

• Right of Access: Request a copy of the personal data we hold about you
• Right to Rectification: Request correction of inaccurate or incomplete data
• Right to Erasure: Request deletion of your data (subject to legal retention requirements)
• Right to Restrict Processing: Request that we limit how we use your data
• Right to Data Portability: Request your data in a portable format
• Right to Object: Object to processing based on legitimate interests or for marketing
• Right to Withdraw Consent: Withdraw consent at any time where processing is based on consent

To exercise any of these rights, please contact us using the details provided below.

We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, alteration, disclosure, or destruction. This includes:

• Encryption of data in transit (HTTPS/TLS)
• Secure password hashing
• Access controls and authentication
• Regular security reviews

Some of our third-party service providers may process your data outside the UK. Where this occurs, we ensure appropriate safeguards are in place (such as Standard Contractual Clauses or adequacy decisions) to protect your data in accordance with UK GDPR.

We may update this Privacy Policy from time to time. Any changes will be posted on this page with an updated revision date. We encourage you to review this policy periodically.

If you have any questions about this Privacy Policy or wish to exercise your rights, please contact us:

You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) if you believe your data protection rights have been violated: ico.org.uk