Version number: Version 1.0

Effective date: 17/03/2026

​

Data Protection Policy: KW Promotions Ltd (T/A The Big Prize Company)

​1. Introduction

​This policy sets out how KW Promotions Ltd (the "Company") handles the personal data of our members and winners. We are committed to complying with the UK GDPR and the Data Protection Act 2018.

​

​2. Data We Collect

​We collect only the minimum data necessary to run our prize draws and verify winners:

• ​Identity Data: Name, Date of Birth (to verify age).

• ​Contact Data: Email address, Phone number, Postal address (for prize delivery).

• ​Financial Data: We do not store full card details; these are handled by our encrypted third-party payment providers.

​

​3. Purpose of Processing

​We process data to:

• ​Manage your account and entries.

• ​Notify winners and publish winner details (Name and County) as required by the CAP Code.

• ​Prevent fraud and money laundering in cooperation with our banking partners.

​

​4. Data Retention & Security

• ​Retention: We hold member data for as long as an account is active. Inactive accounts are deleted after 12 months.

• ​Security: Access to the Wix backend is restricted to Company Directors (Karl Williams & Westley Lay) via two-factor authentication.

​

​5. Individual Rights

​Members have the right to:

• ​Request access to their data.

• ​Request deletion of their data ("Right to be Forgotten").

• ​Self-Exclude: Members can use our dedicated form to immediately cease processing for gambling-related activities. (See 'Responsible Play - Gamble Aware' link in black footer below).

​

​6. Data Sharing

​We only share data with:

• ​Payment Processors: For transaction security.

• ​Authorities: If legally required to prevent crime.

• ​Public: Limited winner details for transparency.

​

​​

​