Privacy Policy
Last updated: June 2026
Planet Raffle is committed to protecting your personal data and respecting your privacy. This policy explains what information we collect, why we collect it, and how we use it — in plain English.
This policy complies with the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Who We Are
Planet Raffle operates the website planetraffle.co.uk ("the Site"). We are the data controller for the personal information you provide to us. Contact: support@planetraffle.co.uk
2. What Information We Collect
We collect the following personal data when you use our service: Account information • Full name • Username (your chosen display name) • Email address • Password (stored as a one-way encrypted hash — we cannot read your password) Transaction information • Ticket purchase history • Payment amounts (we do not store your card details — all card processing is handled by Stripe) Technical information • IP address • Browser type and version • Device type • Pages visited and time spent on site • Cookies (see Section 7) Responsible gambling information • Monthly spend limit (if you set one) • Self-exclusion status and dates (if applicable)
3. How We Use Your Information
We use your personal data for the following purposes: • To create and manage your account • To process ticket purchases and allocate your entries into draws • To contact you if you win a prize • To send order confirmation emails and draw reminders • To enforce spend limits and self-exclusion settings you have chosen • To comply with our legal obligations • To prevent fraud and misuse of our platform • To improve the website and user experience through analytics We will never sell your personal data to third parties.
4. Legal Basis for Processing (UK GDPR)
We process your personal data under the following legal bases: • Contract: processing necessary to fulfil the agreement between you and Planet Raffle (account creation, running draws, prize delivery) • Legitimate interests: fraud prevention, platform security, analytics to improve the service • Legal obligation: compliance with applicable UK law • Consent: for optional marketing communications (where you have opted in)
5. Who We Share Your Data With
We share data only with the following trusted third parties, and only to the extent necessary: • Stripe — payment processing (Stripe's privacy policy: stripe.com/gb/privacy) • Vercel — website hosting and infrastructure • Supabase — encrypted database hosting • Resend — transactional email delivery (order confirmations, winner notifications, password resets) All third-party providers are bound by data processing agreements and may not use your data for their own purposes.
6. How Long We Keep Your Data
We retain your personal data for as long as your account is active. If you delete your account: • Your name, email, and username are permanently removed • Order records may be retained for up to 7 years to comply with financial record-keeping obligations (HMRC) • Anonymised analytics data (with no link to you personally) may be retained indefinitely You may request deletion of your data at any time by emailing support@planetraffle.co.uk.
7. Cookies
We use cookies to make the site work and to understand how it is used. Essential cookies (always active) These are required for the site to function — for example, keeping you logged in during a session. Analytics cookies (optional) These help us understand which pages are visited and how users interact with the site. They are only set if you consent via the cookie banner. You can withdraw consent for optional cookies at any time by clearing your browser cookies or using the cookie settings on the banner.
8. Your Rights Under UK GDPR
You have the following rights regarding your personal data: • Right to access — request a copy of the data we hold about you • Right to rectification — ask us to correct inaccurate data • Right to erasure ("right to be forgotten") — ask us to delete your data • Right to restriction — ask us to stop using your data in certain ways • Right to portability — receive your data in a machine-readable format • Right to object — object to processing based on legitimate interests To exercise any of these rights, email us at support@planetraffle.co.uk. We will respond within 30 days. If you are unhappy with how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO): ico.org.uk
9. Data Security
We take the security of your personal data seriously. Measures we have in place include: • Passwords are hashed using bcrypt — we cannot see your password • All data is transmitted over HTTPS (TLS encryption) • Database access is restricted and authenticated • Payment data is handled entirely by Stripe and never stored on our servers While we take all reasonable steps to protect your data, no internet transmission is completely secure. Please use a strong, unique password for your account.
10. Children
Planet Raffle is strictly for users aged 18 and over. We do not knowingly collect data from anyone under 18. If you believe a minor has created an account, please contact us immediately at support@planetraffle.co.uk and we will delete the account.
11. Changes to This Policy
We may update this Privacy Policy from time to time. When we do, we will update the "Last updated" date at the top of this page. If changes are significant, we will notify you by email. Continued use of Planet Raffle after any changes constitutes your acceptance of the updated policy.
12. Contact Us
For any privacy-related questions, requests, or complaints: Planet Raffle Email: support@planetraffle.co.uk For complaints you may also contact the ICO: Information Commissioner's Office Wycliffe House, Water Lane, Wilmslow, Cheshire, SK9 5AF ico.org.uk | 0303 123 1113
This Privacy Policy applies solely to data collected through planetraffle.co.uk. It does not apply to third-party websites linked from our site.