Privacy Policy – xDrive Competitons

Privacy Policy – XDRIVE COMP LTD

1. INTRODUCTION

1.1. Our Commitment

XDRIVE COMP LTD (“we,” “us,” “our”) is committed to safeguarding your personal information.
This Privacy Policy explains how we collect, use, and protect your data when you visit xdrivecompetitions.com (the “Website”) or participate in our competitions.

1.2. Controller Details

Data Controller: XDRIVE COMP LTD (Company No. 16834605)
Registered Office: 128 City Road, London, England, EC1V 2NX
Email: contact@xdrivecompetitions.com
Phone: +44 7379 400072

1.3. Scope

This Policy applies to personal data we process about Website visitors, registered users, and competition entrants.
By using our services, you acknowledge that you have read this Privacy Policy.

2. DATA WE COLLECT

We collect personal data in two main ways:

2.1. Information You Provide Directly

Identity Data: Name, surname, login details
Contact Data: Email address, phone number, mailing address
Financial Data: Payment card details (where applicable) and transaction history
Profile Data: Marketing preferences, feedback, reviews, or competition entries

2.2. Automatically Collected Data

Usage Data: How you navigate and interact with our Website (pages visited, time on site)
Technical Data: IP address, browser type and version, device identifiers, operating system, and system configuration details

2.3. How We Use Your Data

We only process personal data if we have a lawful basis. Common uses include:

2.3.1. User Registration & Account Management
Purpose: Create and manage your account, authenticate login, and maintain preferences.
Legal Basis: Performance of a Contract (UK GDPR Art. 6(1)(b)).
2.3.2. Competitions & Prize Fulfilment
Purpose: Facilitate entry, determine winners, and deliver prizes.
Legal Basis: Performance of a Contract (Art. 6(1)(b)) and Legal Obligation (Art. 6(1)(c)).
2.3.3. Payment Processing
Purpose: Handle entry fee transactions securely.
Legal Basis: Performance of a Contract (Art. 6(1)(b)).
2.3.4. Service Notifications & Customer Support
Purpose: Provide updates, respond to inquiries, and send administrative emails.
Legal Basis: Performance of a Contract (Art. 6(1)(b)) and/or Legitimate Interests (Art. 6(1)(f)).
2.3.5. Internal Administration & Legal Compliance
Purpose: Perform audits, detect fraud, ensure compliance.
Legal Basis: Legal Obligation (Art. 6(1)(c)) and Legitimate Interests (Art. 6(1)(f)).
2.3.6. Personalization & Analytics
Purpose: Improve user experience, analyze trends, tailor content.
Legal Basis: Legitimate Interests (Art. 6(1)(f)); where cookies are used, consent is obtained.
2.3.7. Marketing
Purpose: Send promotional messages (with your consent).
Legal Basis: Consent (Art. 6(1)(a)) or Soft Opt-In under PECR.

3. HOW WE PROTECT YOUR DATA

3.1. Security Measures

We implement industry-standard measures, including SSL encryption, secure data centers, and role-based access controls.
Our staff receive data protection training to ensure confidentiality.

3.2. Incident Response

We have procedures to handle any personal data breach.
Where required by law, we will notify both you and the relevant regulator (e.g., the ICO).

4. DATA SHARING

4.1. Third-Party Service Providers

We may share your personal data with trusted suppliers (e.g., payment gateways, marketing platforms, web hosts) who operate under confidentiality agreements and process data only under our instructions.

4.2. Legal Requirements

We may disclose data to comply with legal obligations or respond to lawful requests from public authorities.

4.3. No Third-Party Marketing

We do not sell or rent your personal data to external parties for marketing purposes.

5. INTERNATIONAL DATA TRANSFERS

5.1. Transfers Outside the UK/EEA

Where data is transferred outside the UK/EEA, we rely on Standard Contractual Clauses or equivalent safeguards.

5.2. Further Information

You may contact us at contact@xdrivecompetitions.com for details of the specific safeguards used.

6. DATA RETENTION

6.1. Retention Period

We retain personal data while your account is active or as required by law (e.g., for tax or accounting).
Competition records are typically kept for up to 6 years for dispute or regulatory purposes.

6.2. Account Closure

Upon account deletion, your data will be erased or anonymized unless further retention is legally necessary.

7. YOUR RIGHTS

Under UK GDPR, you have the right to:

Access – Request a copy of your personal data.
Correction – Rectify inaccurate or incomplete data.
Erasure – Request deletion of unnecessary or unlawfully processed data.
Restriction – Limit processing in certain circumstances.
Portability – Receive a machine-readable copy of your data.
Objection – Object to processing based on legitimate interests or direct marketing.
Withdraw Consent – Withdraw consent at any time where applicable.

To exercise your rights, contact contact@xdrivecompetitions.com.
You may also file a complaint with the Information Commissioner’s Office (ICO) if you believe your rights have been violated.

8. MARKETING & PRIZE PROMOTIONS

8.1. Photo and Prize Details

By entering our competitions, you acknowledge that we may publish your first name, initial of surname, and general location (e.g., county) to announce winners.
For broader marketing use (e.g., social media, website banners), we will either:

Obtain your explicit consent, or
State in the Official Rules that publicity is a condition for certain prizes.

8.2. Promotional Communications

We may send marketing via email or WhatsApp if you opt in or qualify for soft opt-in.
You can unsubscribe anytime via the link in our emails or by contacting us.

9. CHANGES TO THIS PRIVACY POLICY

We may update this Policy periodically. The “Last Updated” date will reflect the latest revision.
Significant changes will be communicated via the Website or email.

10. CONTACT US

If you have any questions or wish to exercise your rights:
Email: contact@xdrivecompetitions.com
Phone: +44 7379 400072
Address: XDRIVE COMP LTD, 128 City Road, London, England, EC1V 2NX

We aim to respond to all requests within one month.

11. CHILDREN’S PRIVACY

We do not knowingly collect data from individuals under 18 years old.
If you believe a child has provided personal data, please contact us, and we will delete it promptly.

✅ End of Policy
We value your trust and are committed to keeping your data secure, in full compliance with UK GDPR and applicable laws.