Privacy Policy

Your data is processed by [COMPANY NAME], publisher of the Site. For any question about your data, you can contact us at [CONTACT EMAIL] or, where applicable, our data protection officer: [DPO CONTACT, if applicable].

This policy aims to inform you, transparently, of the processing carried out on your personal data. It does not cover the practices of third-party sites the Site may link to.

We collect:

• Data you provide: first name, last name, email address, postal address, phone number, information about your orders and your exchanges with us.
• Data collected automatically: IP address, browser and device type, time-stamped connection and activity logs.
• Data provided by third parties: billing and payment-status information provided by our payment provider.

We do not keep any complete payment-card data: payments are processed directly by Stripe.

Your data is processed for the following purposes:

• manage your account, your entries and the running of the draws (performance of the contract);
• process payments and prevent fraud (performance of the contract and legitimate interest);
• send you service-related communications and, with your consent, marketing communications (consent);
• comply with our legal, accounting and tax obligations (legal obligation);
• improve and secure the Site (legitimate interest).

Your data is kept for as long as necessary for the purposes for which it was collected, then archived or deleted. Some data may be kept beyond the closure of your account in order to comply with our legal, accounting or tax obligations, or to establish and defend legal claims.

Your data is never sold. It may be shared with the following categories of recipients, on a need-to-know basis:

• our technical providers: Stripe (payment), Resend (email delivery), Supabase (hosting and database), Random.org (the draw);
• administrative or judicial authorities, on legitimate request or to prevent fraud;
• our professional advisers and insurers;
• a potential acquirer, as part of a sale or reorganisation.

Some of our providers may process data outside the European Union. In that case, such transfers are governed by appropriate safeguards (in particular the European Commission's standard contractual clauses) to ensure an adequate level of protection for your data.

The Site uses cookies and similar technologies necessary for its operation (for example keeping your session) as well as, where applicable, audience-measurement cookies. You can configure your browser to refuse some or all cookies; however, some services may then no longer work correctly.

In accordance with the General Data Protection Regulation (GDPR), you have the following rights over your data:

• right of access and rectification;
• right to erasure (“right to be forgotten”);
• right to restriction of processing;
• right to data portability;
• right to object, in particular to direct marketing;
• right to withdraw your consent at any time.

You can exercise these rights by writing to us at [CONTACT EMAIL]. You also have the right to lodge a complaint with the relevant data protection authority.

We implement appropriate technical and organisational measures to protect your data against unauthorised access, alteration, disclosure or destruction. As no system can be guaranteed entirely infallible, we cannot guarantee absolute security.

This policy may be amended at any time to reflect legal or technical changes. The applicable version is the one published on the Site. Continued use of the Site means you have read the version in force.

For any question about this policy or the exercise of your rights, contact us at [CONTACT EMAIL].