📜 Ticket Data Policy

Effective date: 11 November 2025
Last updated: 11 November 2025

This policy explains how Everlasting Luck LTD creates, stores and deletes ticket-level data for our competitions. It sits alongside our Privacy Policy and Terms and Conditions. If anything here conflicts with those documents, the stricter control applies.

1. Scope and definitions

Scope – ticket-level records generated by our competitions (including ticket numbers, timestamps and outcome flags such as instant win or draw win).
Not covered here – account details, order information and payment data. Those are managed under our Privacy Policy and statutory accounting rules.

Definitions

Competition end – the earlier of the advertised end date or the point at which all tickets are sold, followed by the time needed to settle wins.
Ticket data – the minimum information required to allocate tickets, determine outcomes and evidence fairness (for example ticket numbers, competition ID, relevant timestamps and outcome status).

2. Lawful basis

We process ticket data under:

Contract – to deliver the competition you enter and determine winners.
Legitimate interests – to ensure fairness and security, prevent abuse, answer queries and defend legal claims.
Legal obligation – to keep records we must retain under UK law.

3. Retention on the live system

We keep full ticket-level data while a competition is running and until all wins are settled.
From the competition end (or sell-out, if later) we retain ticket data on the live system for 90 days to allow checks, handle disputes and complete audits.
After 90 days, a scheduled process permanently deletes ticket-level records and related metadata from the live system. Deletion events are logged.

This deletion does not remove order confirmations, receipts or accounting records, which are stored separately in line with legal and tax requirements.

4. Audit records (limited, separate from the live system)

Before live-system deletion, we retain a minimal audit record for each competition containing only what is necessary to evidence entries and outcomes and to defend legitimate claims.
We keep these limited audit records for up to 540 days from competition end, after which they are deleted or irreversibly anonymised so that individuals are no longer identifiable.
These records do not include card or bank details.

Why 540 days?
This period is designed to cover typical payment dispute windows and fraud investigations while remaining proportionate to the purpose of defending legal claims.

5. Security

We apply layered security, including role-based access, encryption in transit, secure storage for audit records and change logging. Access is restricted to authorised personnel on a need-to-know basis and reviewed regularly.

6. Data sharing and processors

We use reputable providers for hosting, payments and communications. Where a provider processes personal data on our behalf, we have contracts in place that meet UK GDPR requirements. If personal data is transferred outside the UK, we use appropriate safeguards.

7. Your rights

You have rights over your personal data, including access, rectification, erasure, restriction, objection and portability, subject to legal limits.

Access requests – if you entered a competition, you can request a copy of your own entries and outcomes. We may ask for proof of identity and details of the competition to locate your records. We aim to respond within one calendar month of a verified request.
You can also complain to the UK Information Commissioner’s Office (ICO) if you are unhappy with how we handle your data.

8. Entrants

Our competitions are for UK residents aged 18+. We do not knowingly process children’s data for competitions.

9. Changes to this policy

We may update this policy to reflect technical, legal or operational changes. If changes are material, we will highlight them on our website.

10. Contact

Everlasting Luck LTD
Suite 105, Fence House, Fence Avenue, Macclesfield, Cheshire, SK10 1LT, United Kingdom
Email: in**@****************co.uk