Privacy Policy – Drive Y Dream Limited

Effective Date: August 2025
  1. 1. Introduction
    1. 1.1. This Privacy Policy ("Policy") explains in detail how Drive Y Dream Limited ("Promoter", "we", "our", "us"), company number 16535997, with its registered office at 85 Great Portland Street, First Floor, London, England, W1W 7LT, collects, processes, stores, and protects personal data of users ("you", "your") in connection with our skill-based prize competitions and related services ("Services").
    2. 1.2. We recognise the importance of safeguarding your personal information and are fully committed to handling it in a lawful, fair, and transparent manner, in accordance with the UK General Data Protection Regulation (UK GDPR), the Data Protection Act 2018, and all other applicable UK privacy laws.
    3. 1.3. This Policy is intended to provide you with clear and comprehensive information about what personal data we collect, why we collect it, how we use it, how long we keep it, with whom we may share it, and what rights you have in relation to that data.
    4. 1.4.This Policy should be read alongside our Terms and Conditions, Acceptable Use Policy, and any other applicable policies that govern your relationship with us.
    5. 1.5. By accessing our website, creating an account, entering a competition, or otherwise providing us with your personal data, you acknowledge that you have read and understood this Policy and agree to its terms. If you do not agree with this Policy, you must not use our Services.

  2. 2. Data Controller and Contact Information
    1. 2.1. For the purposes of UK data protection legislation, Drive Y Dream Limited acts as the "data controller". This means we are responsible for determining the purposes and means by which your personal data is processed.
    2. 2.2. We may engage third-party service providers to act as "data processors" on our behalf for specific operational purposes, such as payment processing, identity verification, IT hosting, or marketing support. These processors are contractually bound to handle your data in accordance with strict confidentiality and security standards.
    3. 2.3. If you have any questions about how we handle your data, wish to exercise your privacy rights, or wish to make a complaint, you may contact us using the following details:

      Drive Y Dream Limited
      Company Number: 16535997
      Email: contact@driveydream.com
      Address: 85 Great Portland Street, First Floor, London, England, W1W 7LT

    4. 2.4. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO), the UK's data protection supervisory authority, via www.ico.org.uk or by calling 0303 123 1113.

  3. 3. Personal Data We Collect
    1. We collect and process different categories of personal data depending on your interactions with our Services, including but not limited to:
    2. 3.1. Identification Data -- Full legal name, date of birth, proof of age, and gender.
    3. 3.2. Contact Data -- Residential address, billing address, email address, and telephone number.
    4. 3.3. Account Data -- Username, password, security questions, and account preferences.
    5. 3.4. Transaction Data -- Payment card details, bank account information (where relevant), billing address, payment history, and competition entry records.
    6. 3.5. Competition Data -- Your answers to Skill Questions, number of entries purchased, results of any draws, prize fulfilment status, and related correspondence.
    7. 3.6. Technical Data -- IP address, device identifiers, browser type, operating system, time zone setting, geolocation data (where enabled), and cookie information.
    8. 3.7. Verification Data -- Copies of official identification documents (passport, driving licence, national ID card) and proof of address (utility bill, bank statement) for compliance with anti-money laundering (AML) and fraud prevention obligations.
    9. 3.8. Communications Data -- Records of your correspondence with us via email, phone, chat, or postal mail.
    10. 3.9. Marketing Preferences -- Information about whether you have consented to receive marketing communications from us, and your related choices.

  4. 4. How We Collect Your Personal Data
    1. We obtain personal data through various channels, including:
    2. 4.1. Direct Interactions -- When you register for an account, enter a competition, request customer support, submit a free postal entry, provide verification documents, or contact us for any other reason.
    3. 4.2. Automated Technologies -- When you interact with our website, we may automatically collect Technical Data through the use of cookies, analytics tools, server logs, and similar technologies.
    4. 4.3. Third-Party Sources -- We may receive information about you from payment processors, identity verification providers, fraud prevention services, delivery companies, and marketing affiliates in the course of providing our Services.
    5. 4.4. Publicly Available Sources -- We may collect information about you from publicly available registers, such as Companies House, the Electoral Roll, or social media platforms, where relevant to our legitimate interests or legal obligations.
    6. 4.5. Legal and Regulatory Requests -- We may collect information from law enforcement agencies, regulators, or other public authorities in connection with compliance or investigation matters.

  5. 5. Legal Basis for Processing Personal Data
    1. Under UK GDPR, we may only process your personal data where we have a valid legal basis for doing so. The legal bases we rely upon include:
    2. 5.1. Performance of a Contract -- Processing is necessary to fulfil our obligations under the Terms and Conditions, including processing competition entries, verifying eligibility, and awarding prizes.
    3. 5.2. Compliance with a Legal Obligation -- We are required to process certain personal data to meet our obligations under UK law, including anti-money laundering (AML), tax, and consumer protection legislation.
    4. 5.3. Legitimate Interests -- We process personal data for purposes that are in our legitimate business interests, such as operating our competitions efficiently, improving our Services, ensuring network security, and preventing fraud, provided such interests are not overridden by your fundamental rights.
    5. 5.4. Consent -- In certain cases, we will rely on your explicit consent, such as for sending you marketing communications or processing special categories of personal data. You have the right to withdraw your consent at any time.
    6. 5.5. Legal Claims -- Processing may be necessary for the establishment, exercise, or defence of legal claims.

  6. 6. Purposes for Which We Use Your Personal Data
    1. We process your personal data for a variety of operational, legal, and compliance purposes, including but not limited to:
    2. 6.1. Account Creation and Management -- To register you as a user, maintain your account details, and enable you to participate in our competitions.
    3. 6.2. Competition Administration -- To process entries, verify correct answers to Skill Questions, manage draws, and award prizes.
    4. 6.3. Payment Processing -- To facilitate payments for entries, prevent fraudulent transactions, and comply with financial regulations.
    5. 6.4. Identity Verification -- To confirm eligibility, age, and residency, particularly where required for high-value prizes or to meet anti-money laundering obligations.
    6. 6.5. Customer Support -- To respond to your queries, handle complaints, and provide assistance in relation to our Services.
    7. 6.6. Legal Compliance -- To meet our obligations under applicable laws, including gambling, tax, and consumer protection regulations.
    8. 6.7. Fraud and Security Monitoring -- To protect the integrity of our competitions, detect suspicious activities, and prevent misuse of our Services.
    9. 6.8. Marketing and Communications -- To send you competition updates, promotional offers, and other marketing content where you have provided consent.
    10. 6.9. Website Analytics and Improvement -- To analyse how our website is used, improve its functionality, and tailor the user experience.
    11. 6.10. Dispute Resolution and Enforcement -- To resolve disputes, enforce our Terms and Conditions, and defend against legal claims.

  7. 7. Sharing Your Personal Data
    1. We may share your personal data with the following categories of recipients, strictly on a need-to-know basis and subject to appropriate contractual safeguards:
    2. 7.1. Payment Service Providers -- For processing payments securely and preventing fraud.
    3. 7.2. Identity Verification Providers -- To confirm eligibility and comply with anti-money laundering requirements.
    4. 7.3. IT and Hosting Providers -- For website hosting, cloud storage, and cybersecurity monitoring.
    5. 7.4. Delivery and Logistics Companies -- To arrange for the shipment or collection of physical prizes.
    6. 7.5. Marketing Service Providers -- For email campaigns, SMS notifications, and push alerts (only where consent has been given).
    7. 7.6. Legal and Regulatory Authorities -- Where required to comply with a legal obligation, enforce our rights, or respond to lawful requests from public bodies.
    8. 7.7. Professional Advisors -- Including lawyers, accountants, and auditors for legitimate business purposes.
    9. 7.8. Affiliates and Business Partners -- Where you have entered a competition in collaboration with another brand or partner organisation.
    10. 7.9. We do not sell or rent your personal data to third parties for their own independent marketing purposes.

  8. 8. International Transfers of Personal Data
    1. 8.1. In the course of providing our Services, it may be necessary to transfer your personal data outside the United Kingdom.
    2. 8.2. Whenever we transfer your data internationally, we ensure a similar level of protection by implementing at least one of the following safeguards:
      • Using countries that have been granted an adequacy decision by the UK government, confirming that they provide an adequate level of data protection;
      • Entering into Standard Contractual Clauses (SCCs) approved for use in the UK, which legally oblige the recipient to protect your data;
      • Requiring service providers outside the UK to adopt equivalent data protection standards through binding contractual commitments.
    3. 8.3. By using our Services, you acknowledge that your data may be transferred to, and processed in, jurisdictions that may have different data protection rules than your country of residence, but always under safeguards consistent with UK data protection law.

  9. 9. Data Retention
    1. 9.1. We will only retain your personal data for as long as necessary to fulfil the purposes for which it was collected, including to satisfy legal, accounting, or reporting requirements.
    2. 9.2. Different types of personal data may have different retention periods, for example:
      • Account Data -- Retained for the duration of your account's activity and for up to 6 years after closure to comply with legal obligations.
      • Transaction Records -- Retained for a minimum of 6 years to meet tax and financial regulations.
      • Competition Data -- Retained for up to 3 years after the competition for auditing and dispute resolution purposes.
      • Verification Data -- Retained for as long as legally required under AML regulations, typically 5 years after the relationship ends.
    3. 9.3. Once the retention period has expired, your data will be securely deleted or anonymised so that it can no longer be associated with you.

  10. 10. Your Rights Under UK GDPR
    1. As a data subject, you have the following rights in relation to your personal data:
    2. 10.1. Right of Access -- To request a copy of the personal data we hold about you.
    3. 10.2. Right to Rectification -- To have inaccurate or incomplete data corrected.
    4. 10.3. Right to Erasure -- To request deletion of your personal data where it is no longer necessary for the purposes for which it was collected, or where you have withdrawn consent.
    5. 10.4. Right to Restrict Processing -- To request that we suspend processing of your data in certain circumstances.
    6. 10.5. Right to Data Portability -- To request transfer of your data to you or another controller in a structured, commonly used, and machine-readable format.
    7. 10.6. Right to Object -- To object to processing based on our legitimate interests, including direct marketing.
    8. 10.7. Right to Withdraw Consent -- Where we rely on your consent for processing, you may withdraw it at any time without affecting the lawfulness of processing carried out before withdrawal.
    9. 10.8. Right to Lodge a Complaint -- To raise concerns with the Information Commissioner's Office (ICO) if you believe your data has been processed unlawfully.

  11. 11. Exercising Your Rights
    1. 11.1. You may exercise any of your rights under clause 10 by submitting a written request to us at contact@driveydream.com or by post to our registered office.
    2. 11.2. We may request proof of identity before responding to your request, to ensure that personal data is not disclosed to anyone without proper authority.
    3. 11.3. We aim to respond to all legitimate requests within one month. In complex cases or where multiple requests have been made, this period may be extended by a further two months, in which case we will notify you of the extension and the reasons for it.
    4. 11.4. We will not charge you a fee for exercising your rights unless your request is manifestly unfounded, repetitive, or excessive, in which case we may charge a reasonable administrative fee or refuse to comply with your request.

  12. 12. Data Security
    1. 12.1. We implement appropriate technical and organisational measures to protect your personal data against unauthorised access, accidental loss, destruction, or damage. These measures include encryption, firewalls, secure server configurations, and regular security audits.
    2. 12.2. Access to your personal data is strictly limited to employees, contractors, and service providers who have a business need to know and are bound by confidentiality obligations.
    3. 12.3. We maintain procedures to deal with any suspected data breach and will notify you and the relevant supervisory authority of a breach where we are legally required to do so.
    4. 12.4. While we take all reasonable measures to secure your data, no method of electronic storage or transmission over the Internet is completely secure, and we cannot guarantee absolute security.

  13. 13. Cookies and Similar Technologies
    1. 13.1. Our website uses cookies, web beacons, and similar technologies to improve your user experience, analyse site traffic, and provide relevant marketing.
    2. 13.2. Cookies are small data files stored on your device that allow us to recognise your browser and remember certain information.
    3. 13.3. We use:
      • Strictly Necessary Cookies -- Required for basic site functionality, such as logging in and processing payments.
      • Performance Cookies -- To collect information about how visitors use our site, helping us improve its performance.
      • Functional Cookies -- To remember your preferences and personalise your experience.
      • Targeting Cookies -- To deliver relevant advertisements based on your interests.
    4. 13.4. You can manage or disable cookies via your browser settings. However, blocking certain cookies may affect the functionality of our website.
    5. 13.5. Further details are available in our separate Cookie Policy.

  14. 14. Marketing Communications
    1. 14.1. Where you have provided your consent, we may send you marketing communications by email, SMS, push notifications, or other electronic means regarding our competitions, offers, and related services.
    2. 14.2. You can withdraw your consent or opt out of receiving marketing communications at any time by:
      • Clicking the unsubscribe link in any marketing email;
      • Updating your account preferences; or
      • Contacting us directly at contact@driveydream.com.
    3. 14.3. Please note that even if you opt out of marketing communications, we may still send you service-related messages necessary for the administration of your account and competitions (e.g., entry confirmations, draw notifications, and prize arrangements).

  15. 15. Changes to This Privacy Policy
    1. 15.1. We may update or amend this Policy from time to time to reflect changes in our practices, legal requirements, or other operational reasons.
    2. 15.2. When we make material changes, we will post the updated Policy on our website and update the "Effective Date" at the top. In some cases, we may notify you directly by email or through your account.
    3. 15.3. We encourage you to review this Policy periodically to stay informed about how we process your personal data.
    4. 15.4. Continued use of our Services after changes are posted constitutes your acceptance of the revised Policy.

Drive Y Dream Limited Privacy Policy | Company Number: 16535997