Privacy policy

This policy explains what personal information Bullpen Competitions collects about you, how we use and protect it, and the rights you have over it. We take your privacy seriously and only ever collect what we need to run our competitions and give you a good experience.

Last updated: 10 July 2026

Competition Terms Terms of Use Cookie Policy Responsible Play

1. Who we are

For the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018, the data controller is Matthew Wilkin (Sole Trader) trading as Bullpen Competitions ("we", "us", "our"), of Tower Court, Oakdale, Clifton Moor, York, YO30 4XL. We are registered with the Information Commissioner's Office (ICO) as a data controller.

If you have any questions about this policy or about how we handle your personal data, please contact us at bull@bullpencompetitions.com.

2. The information we collect

We may collect and process the following categories of personal data:

Account & identity data — your name, email address, mobile telephone number, postal address, and confirmation that you are aged 18 or over.
Entry & transaction data — the competitions you enter, tickets purchased, answers submitted, order history, wallet balance and credits, discount/coupon use, and free postal entries.
Payment data — payments are processed by our payment provider. We do not store your full card number. We hold a record of the amount, date, a payment reference and whether a debit or credit card was used.
Prize & winner data — where you win a cash prize, the bank account details you provide so we can pay you, and proof of identity/eligibility where required.
Communications & support data — messages you send us, support tickets, live-chat messages and your marketing preferences.
Responsible-play data — spending limits you set, cooling-off/self-exclusion requests, and information relevant to keeping play safe.
Technical & usage data — IP address, device and browser type, and how you use our site, collected via cookies and similar technologies (see our Cookie Policy).

3. How we collect your data

We collect data when you register an account, enter a competition (online or by free post), buy tickets, claim a prize, contact us, set responsible-play controls, or simply browse our site. Some technical data is collected automatically through cookies.

4. How and why we use your data (our lawful bases)

What we do	Lawful basis
Create and manage your account; process entries, payments and prizes; run the draw and contact winners	Performance of a contract with you
Confirm you are 18+ and eligible; keep records for the Advertising Standards Authority; prevent fraud and money laundering; meet our legal duties	Compliance with a legal obligation / our legitimate interests
Protect players through responsible-play tools and welfare checks	Legitimate interests / legal obligation
Improve and secure our site, prevent abuse, and understand how it is used	Legitimate interests
Send you marketing about competitions and offers by email or SMS	Your consent (which you can withdraw at any time)

5. Marketing

We will only send you marketing messages if you have opted in. Marketing is unticked by default when you register, and every marketing message contains a one-tap unsubscribe. You can also change your preferences in your account or by emailing us. Withdrawing marketing consent does not affect the service messages we must send to administer your entries (for example order confirmations or winner notifications).

6. Who we share your data with

We do not sell your personal data. We share it only with trusted providers who help us run our service, and only so far as they need it:

Payment processing — our card payment provider (Cashflows), to take payment securely.
Email & SMS — our transactional email and marketing providers (such as Brevo and Klaviyo), to send service messages and, where you have consented, marketing.
Hosting & database — our website hosting and database providers, who store your data securely on our behalf.
Prize fulfilment — couriers and suppliers, where needed to deliver a prize to you.
Regulators & authorities — the Advertising Standards Authority, and law enforcement or other authorities where we are legally required to do so.
Professional advisers — such as accountants or legal advisers, where necessary.

All of our processors are bound by contract to keep your data secure and to use it only for the purposes we specify.

7. International transfers

Wherever possible your data is stored within the UK or European Economic Area (EEA). Where a provider processes data outside the UK/EEA, we make sure appropriate safeguards are in place (such as UK adequacy regulations or the International Data Transfer Agreement/Standard Contractual Clauses) so your data receives an equivalent level of protection.

8. How long we keep your data

We keep your personal data only for as long as we need it for the purposes set out above. In practice, we keep competition and financial records for at least 6 years to meet our legal, tax and regulatory obligations, and we retain winner records so we can demonstrate that draws were properly administered. When we no longer need your data, we securely delete or anonymise it. If you self-exclude, we retain the minimum information needed to enforce your exclusion.

9. Your rights

Under UK data protection law you have the right to:

be informed about how we use your data (this policy);
access a copy of the personal data we hold about you;
have inaccurate data corrected;
ask us to erase your data ("right to be forgotten"), where we are not required to keep it;
restrict or object to our processing of your data;
data portability — receive your data in a portable format;
withdraw consent at any time, where we rely on consent (for example marketing).

To exercise any of these rights, email bull@bullpencompetitions.com. We will respond within one month. Please note that asking us to delete your data or stop contacting you may mean we can no longer enter you into competitions or contact you if you win.

10. How we protect your data

We use appropriate technical and organisational measures to keep your data secure, including encryption in transit (HTTPS), hashed passwords, access controls, and secure, reputable hosting and payment providers. No method of transmission over the internet is completely secure, but we work hard to protect your information and have procedures to deal with any suspected data breach.

11. Cookies

Our site uses cookies and similar technologies. For full details of the cookies we use and how to manage them, please see our Cookie Policy.

12. Children

Our site and competitions are strictly for adults aged 18 or over. We do not knowingly collect personal data from anyone under 18. If we learn that we hold data about someone under 18, we will delete it.

13. Changes to this policy

We may update this policy from time to time. The latest version will always be available on this page, with the "last updated" date at the top.

14. How to complain

If you have a concern about how we handle your data, please contact us first at bull@bullpencompetitions.com and we will do our best to put it right. You also have the right to complain to the Information Commissioner's Office (ICO), the UK regulator for data protection, at ico.org.uk or on 0303 123 1113.