1. Who controls your information
Fry Competitions Limited, trading as FryComps, is the controller of personal information used through frycomps.com. It is registered in England and Wales under company number 17518539, with its registered office at 61 Bridge Street, Kington, HR5 3DJ, United Kingdom. Privacy questions and rights requests can be sent to privacy@frycomps.com.
2. Information we collect
- Account details: name, date of birth, email, phone number, address and authentication records.
- Competition activity: entries, ticket numbers, answers, orders, credit balance, prize history and preference categories.
- Payment information: transaction status and limited payment references. Full card details are handled by the payment provider, not stored by Fry Comps.
- Verification information: photo ID, proof of address, likeness checks and the result of age, identity, fraud or compliance checks.
- Technical information: IP address, device/browser details, security logs, cookie choices and activity needed to protect the Site.
- Communications: support requests, complaints, consent records and marketing preferences.
3. Why we use it and our lawful bases
- Contract: to create and secure your account, process entries, administer draws, contact winners and deliver prizes.
- Legal obligation: to keep required financial records, respond to lawful requests and meet consumer, tax and data-protection duties.
- Legitimate interests: to prevent fraud and underage participation, secure the Site, improve services, resolve complaints and keep auditable draw records.
- Consent: for optional direct marketing or publicity where consent is appropriate. You can withdraw consent at any time.
Providing your real name, date of birth and contact details is necessary to open an account. Valid identification is necessary to claim a prize. If you do not provide required information, we cannot provide the relevant service or release a prize.
4. Age and identity verification
We use date of birth and, for provisional winners, valid photo ID and proof of address to confirm eligibility and prevent fraud. We may use a specialist verification provider, which will be named when appointed. We record the verification result and only retain copies of documents for as long as reasonably necessary.
5. Who receives information
Information may be processed by service providers that host the Site and database, deliver authentication and email, process payments, detect fraud, verify identity, supply prizes, provide professional advice or support customer service. Current and planned providers include Vercel, Supabase, Resend and DNA Payments. DNA Payments processes the billing details, payment authorisation, card-type information and transaction references needed to provide its secure hosted checkout. Fry Comps does not store your full card number or card security code.
Providers may use information only under our instructions and appropriate contracts, unless they are an independent controller for their own legal duties. We may disclose information to courts, regulators, law enforcement, tax authorities or a buyer of the business where lawfully required.
6. International transfers
Some providers may process information outside the UK. Where UK adequacy regulations do not apply, we use an approved safeguard such as the UK International Data Transfer Agreement or the UK Addendum to standard contractual clauses, together with appropriate security checks.
7. How long we keep information
- Account information: while the account is active and normally up to six years after closure where needed for claims, accounting or legal obligations.
- Entry, order, draw and prize records: normally six years after the relevant transaction or draw.
- Unsuccessful verification documents: deleted as soon as the review and any dispute period end.
- Winner ID copies: normally deleted within 90 days after verification unless a legal obligation, fraud review or dispute requires longer retention; the verification result may be retained with the prize record.
- Security logs: normally up to 12 months, unless needed to investigate an incident.
- Marketing records: until you opt out, plus a minimal suppression record so we respect that choice.
8. Your rights and account deletion
Depending on the circumstances, you can ask for access, correction, deletion, restriction or transfer of your information, or object to certain uses. You can withdraw consent at any time. The right to object to direct marketing is absolute: use any unsubscribe link or email privacy@frycomps.com.
You can initiate permanent account deletion from My account → Edit account details on the Site or in the iOS app. We will remove your login and personal profile, and anonymise transaction, entry, draw and prize records that we must retain for legal, accounting, fraud-prevention or dispute purposes. We may need to verify your identity before completing a request. You can also complain to the Information Commissioner’s Office at ico.org.uk, although we would appreciate the chance to resolve the concern first.
9. Automated decisions and personalisation
Your chosen prize categories reorder competitions on your homepage. This is simple personalisation and does not produce a legal or similarly significant effect. We do not currently make solely automated decisions with legal or similarly significant effects. If that changes, this policy and the relevant notice will explain the logic and your rights.
10. Security and changes
We use access controls, encryption in transit, restricted administrative access and service-provider safeguards appropriate to the information involved. No online system is risk-free, so you should use a unique password and tell us promptly if you suspect misuse.
We may update this policy as the service or law changes. Material changes will be highlighted on the Site or sent to account holders where appropriate. See our Cookie Policy for device storage used by the Site.