Privacy Policy

Ossuary Draws Ltd (“we”, “us”) operates the Ossuary prize-draw platform (the “Service”). We are the controller of the personal data you provide when you use the Service.

If you have any question about this policy or your data, contact us through the details provided in the Contact section of this site.

Account data: your name and email address when you register, and your account role.

Entry data: the competitions you enter, your riddle answers, ticket numbers, and any instant-win outcomes recorded against your account.

Payment data: we do not store your card details. Payments are processed by Stripe, our payment processor. We receive only the transaction status and a reference so we can fulfil your entry. See Stripe’s Privacy Policy for how Stripe handles card data.

Usage data: anonymised analytics about how the Service is used, such as pages visited and events triggered.

We use your personal data to:

• create and manage your account;
• record and fulfil your competition entries and instant-win plays;
• process payments through Stripe and deliver prizes to winners;
• display your entry history in your account dashboard;
• meet our legal and regulatory obligations as a prize-competition operator.

We donate 2% of all ticket sales to Mind Mental Health Charity. To report on that donation we may share aggregated, non-personal sales figures with Mind. We do not share your personal data with Mind as part of this contribution.

We process your personal data on the basis of contract (to fulfil your entries), legal obligation (to operate lawfully), and legitimate interest (to keep the Service secure and improve it). You have the right to access, correct, or request deletion of your personal data, and to object to certain processing. To exercise these rights, contact us through the Contact section.

We share data only with: Stripe (payment processing), the hosting and infrastructure providers that run the Service, and regulators or law-enforcement bodies where we are legally required to. We never sell your personal data.

Your data is stored securely by our infrastructure providers. We keep your account and entry data for as long as your account is active and for the period required to meet our legal and record-keeping obligations as a prize-competition operator.

Under UK data-protection law you have the right to access your data, have it corrected, request its deletion, and lodge a complaint with the Information Commissioner’s Office (ico.org.uk) if you believe we have mishandled it.

We may update this policy from time to time. The “Last updated” date above will reflect the most recent revision.