Privacy Policy
Lucky Turbo Competitions
Last updated: 5 February 2026
This Privacy Policy explains how Lucky Turbo LTD collects, uses, stores and protects Your personal data when You use Our website and services. We are committed to protecting Your privacy and handling Your data transparently.
By using Our website and entering Our competitions, You acknowledge that You have read and understood this Privacy Policy.
1. Who We Are
Lucky Turbo Competitions is operated by Lucky Turbo LTD (company number 14791512), whose registered office is at 7 St Petersgate, Stockport, Cheshire, SK1 1EB.
Lucky Turbo LTD is the data controller responsible for Your personal data. For any data protection queries, You can contact Us at [email protected].
2. Personal Data We Collect
When You create an account, We collect:
- Your first name and last name
- Your email address
- Your mobile phone number
- A password (stored securely in hashed form)
When You enter competitions, We additionally collect:
- Competition entry details (which competitions, ticket numbers, quantities)
- Payment transaction references (We do not store full card details)
- Site Credit balance and transaction history
- Instant win results and draw outcomes
When You visit Our website, We may automatically collect:
- IP address and approximate location
- Browser type, device type and operating system
- Pages visited, time spent and referral source
If You enter by free postal entry, We collect the information You provide on Your postal entry (name, address, phone number, email address).
3. How We Use Your Data
We use Your personal data to:
- Create and manage Your account
- Process competition entries and payments
- Verify Your identity and phone number
- Conduct draws and notify winners
- Deliver prizes and manage Site Credit
- Send transactional communications (order confirmations, password resets, winner notifications)
- Prevent fraud, enforce Our Terms & Conditions and maintain the security of Our platform
- Comply with legal and regulatory obligations
We will not send You marketing communications unless You have given explicit consent. You can withdraw consent at any time by contacting Us.
4. Legal Basis for Processing
Under the UK General Data Protection Regulation (UK GDPR), We rely on the following lawful bases:
- Contract: Processing necessary to perform Our contract with You (managing Your account, processing entries, delivering prizes).
- Legitimate interests: Processing necessary for Our legitimate interests (fraud prevention, platform security, improving Our services), provided these interests do not override Your rights.
- Legal obligation: Processing necessary to comply with the law (tax records, regulatory requirements).
- Consent: Where You have given explicit consent (marketing communications). You may withdraw consent at any time.
5. Who We Share Your Data With
We do not sell, rent or trade Your personal data to any third party.
We share Your data only with the following categories of service providers, strictly as necessary to operate Our services:
- Payment processing: Our payment gateway provider processes card payments on Our behalf. We do not store Your full card details.
- Database & authentication: Our database provider stores Your account data and manages authentication securely.
- Email delivery: Our email provider sends transactional emails (password resets, winner notifications) on Our behalf.
- Phone verification: Our SMS provider sends one-time verification codes to confirm Your mobile number.
- Hosting & delivery: Our website hosting provider serves Our website and may process technical data such as IP addresses.
All service providers are contractually bound to process Your data only on Our instructions and in compliance with applicable data protection laws.
We may disclose Your data where required by law, regulation, court order, or to protect Our legal rights.
7. Data Retention
We retain Your personal data for as long as Your account is active or as needed to provide Our services to You.
Competition entry records, transaction history and winner records are retained for a minimum of six years to comply with legal and regulatory requirements.
Accounts that have not verified a phone number and have been inactive for more than 90 days may be automatically deleted.
If Your account is banned, We retain a record of the associated email address and phone number to prevent re-registration, in accordance with Our legitimate interest in maintaining platform integrity.
You may request deletion of Your account and personal data at any time (see Section 8). We will comply unless We are legally required to retain certain information.
8. Your Rights
Under the UK GDPR, You have the following rights regarding Your personal data:
- Right of access: You can request a copy of the personal data We hold about You.
- Right to rectification: You can ask Us to correct any inaccurate or incomplete data. You can also update Your details directly in Your account.
- Right to erasure: You can request that We delete Your personal data, subject to Our legal obligations.
- Right to restrict processing: You can ask Us to limit how We use Your data in certain circumstances.
- Right to data portability: You can request Your data in a structured, commonly used format.
- Right to object: You can object to processing based on legitimate interests.
- Right to withdraw consent: Where processing is based on consent, You can withdraw it at any time.
To exercise any of these rights, please contact Us at [email protected]. We will respond within 30 days.
You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk if You believe Your data protection rights have been violated.
9. Security
We take the security of Your personal data seriously and implement appropriate technical and organisational measures to protect it, including:
- Encryption of data in transit (HTTPS/TLS)
- Secure password hashing
- Row-level security policies on Our database
- Access controls limiting who can view personal data
While We strive to protect Your personal data, no method of transmission over the internet is 100% secure. We cannot guarantee absolute security but will notify You and the relevant authorities of any data breach as required by law.
10. Children
Our services are not directed at anyone under the age of 18. We do not knowingly collect personal data from children. If We become aware that We have collected data from a child under 18, We will take steps to delete that information promptly.
11. Changes to This Policy
We may update this Privacy Policy from time to time. Any changes will be published on this page with an updated revision date. We encourage You to review this page periodically.
Where changes are significant, We may notify You by email or via a notice on the Website.
12. Contact Us
If You have any questions about this Privacy Policy or how We handle Your personal data, please contact Us:
For any privacy-related queries, please contact us at
[email protected]Your privacy matters to us. Thank you for trusting Lucky Turbo Competitions.