Privacy notice

Who is responsible for your data

The controller is SPACE AI TECHNOLOGY UK LTD, trading as WYNIVO, company number 15446027, registered office 142-143 Parrock Street, Gravesend, Kent, DA12 1EY, United Kingdom, business address 27 Ensbury Avenue, Bournemouth, BH10 4HF, United Kingdom.

What we collect

• Identity and contact: name, email address, postal address.
• Age: date of birth and the result of any age check.
• Account: login details, settings, spending limits, self-exclusion status.
• Transactions and orders: order references, amounts and payment status. Once a payment provider is connected, they process your card details; we do not store full card numbers.
• Competition and entries: the draws you enter and your entry numbers.
• Free entry: the details you send by post or through the online form.
• Winners and fulfilment: verification details and delivery information.
• Communications and marketing: messages you send us and your marketing choices.
• Device, security and logs: IP address, browser details and security logs.
• Cookies: see our cookie policy. No analytics or marketing cookies are currently active.
• Complaints: the details of any complaint and how it was handled.

Why we use it, and our lawful basis

• Contract — to run your account, process entries, run draws and deliver prizes.
• Legal obligation — where the law requires us to keep records, verify age, or respond to lawful requests.
• Legitimate interests — to keep WYNIVO secure, prevent fraud, improve the service and establish or defend legal claims. We only rely on this where our interests are not outweighed by yours.
• Consent — for marketing emails and any non-essential cookies. You can withdraw consent at any time. Marketing consent is always separate from accepting our terms.

Area, winner publicity and vouchers

If you choose an area (for example Bournemouth), we use it to show local draws. It is stored on your device and, only if you save it to your account, on your profile. We never use precise location. If you win, we publish your first name, surname initial and area only with your consent (lawful basis: consent, withdrawable at any time). Where a voucher is supplied by a business, we share only what is needed to deliver and redeem it (usually your name and a voucher reference) with that business, under contract.

Who we share it with

• Payment processors, once connected.
• Our hosting and database providers, and email, age-verification and fraud-prevention providers when used.
• Analytics providers only if they are enabled and you have consented.
• Professional advisers such as lawyers, accountants and insurers.
• Regulators, law enforcement or courts where the law requires it.

We do not sell your personal data.

International transfers

If your data is processed outside the UK, we only do so where the UK recognises the destination as adequate, or with appropriate safeguards such as the UK International Data Transfer Agreement or Addendum.

How long we keep it

• Account data: while your account is open, then deleted or anonymised once no longer needed for the purposes below.
• Orders, entries and draw records: for as long as needed to meet tax, accounting and audit obligations and to deal with possible claims, then deleted.
• Winner and fulfilment records: for as long as needed to show a prize was fairly awarded and delivered, and to deal with possible claims.
• Free-entry requests: for the life of the draw and then as long as needed to evidence equal treatment.
• Marketing preferences: until you withdraw consent; we keep a record of your opt-out so we respect it.
• Security logs: for a limited period needed to protect the service, unless required for an investigation.
• Complaints: for as long as needed to resolve the complaint and deal with any follow-up.

You can ask us to delete your account. We will delete what we can, but we may need to keep some records (for example draw and audit records) for legal, audit or claims purposes.

Your rights

Under UK GDPR you can ask to access, correct or delete your data, restrict or object to how we use it, and receive it in a portable format. You can withdraw consent at any time. If you are unhappy with how we handle your data, you can complain to the Information Commissioner’s Office (ico.org.uk), though we would appreciate the chance to put it right first.

Automated decisions

Winning entries are chosen at random by computer. We do not currently make any solely automated decisions that have legal or similarly significant effects on you.

Children

WYNIVO is only for people aged 18 and over. We do not knowingly collect data from children.

Security

We use access controls, encryption in transit and restricted administrator access to protect your data. No system is completely secure, and we will tell you and the ICO about a breach where the law requires.

Changes and contact

We will post any changes here with a new date. To exercise your rights, choose “Data request” on our contact form, or write to: