Privacy Policy

1. Who we are

Mad4Motors is the data controller for the personal information described in this policy. We are based at Silverstone Park, Northamptonshire NN12 8GX, United Kingdom. You can contact us at any time at privacy@mad4motors.com.

2. What information we collect

Information you give us

• Account details: full name, email address, password (stored hashed), date of birth, phone number and postal address.
• Competition entries: the competitions you enter, ticket numbers allocated and your answers to the skill questions.
• Payment details: handled directly by our payment processor (Stripe). We do not store full card numbers on our servers.
• Marketing preferences and any communications you send us.

Information collected automatically

• Device, browser and IP information, pages viewed and approximate location, for security and analytics purposes.
• Cookies and similar technologies — see our Cookie Policy.

3. How we use your information

• To create and manage your account and process your competition entries.
• To allocate ticket numbers, run the draw and contact winners.
• To process payments and prevent fraud.
• To send transactional emails (order confirmations, ticket numbers, winner notifications, important service updates).
• To send marketing communications about new competitions, where you have opted in. You can withdraw consent at any time.
• To meet our legal obligations, including age and identity verification and anti-fraud checks.
• To improve the website, fix problems and analyse usage in aggregate.

4. Legal bases for processing

We rely on the following legal bases under UK GDPR and the EU GDPR:

• Contract — to enter and perform the competition contract with you.
• Legitimate interests — to operate the site securely, prevent fraud, and improve our service.
• Consent — for optional marketing emails and non-essential cookies.
• Legal obligation — for tax, accounting and regulatory record keeping.

5. Who we share your data with

We never sell your personal data. We share it only with trusted third parties acting on our instructions, including:

• Payment processors (Stripe) for secure card processing.
• Cloud infrastructure and database providers that host the site and store your data within the UK and EEA.
• Email and notification providers to send transactional and (where opted in) marketing messages.
• Identity verification providers when claiming a prize.
• Regulators, law enforcement or other authorities where required by law.

6. International transfers

Where any of our service providers process data outside the UK or EEA, we ensure appropriate safeguards are in place — typically the UK International Data Transfer Addendum or the EU Standard Contractual Clauses.

7. How long we keep your data

• Account data: for as long as your account is open, plus up to 12 months after closure.
• Order, ticket and payment records: 7 years, to meet UK accounting and tax requirements.
• Marketing data: until you unsubscribe or withdraw consent.

8. Your rights

Under UK GDPR and the EU GDPR you have the right to:

• Access the personal data we hold about you.
• Request correction of inaccurate information.
• Request deletion of your data, subject to our legal retention obligations.
• Object to or restrict certain processing, including direct marketing.
• Receive a portable copy of the data you provided to us.
• Withdraw consent at any time, without affecting the lawfulness of prior processing.

To exercise any of these rights, email privacy@mad4motors.com. We will respond within one month.

9. Security

We protect your data with industry-standard measures including TLS encryption in transit, encryption at rest, hashed passwords, role-based access controls and continuous monitoring. No system is ever completely secure, so please choose a strong unique password and notify us immediately of any suspicious activity on your account.

10. Children

Our service is strictly for adults aged 18 or over. We do not knowingly collect data from anyone under 18 and will delete any such data promptly if discovered.

11. Complaints

If you are unhappy with how we have handled your personal data, please contact us first and we will do our best to resolve the issue. You also have the right to complain to the UK Information Commissioner's Office (ico.org.uk) or, in Ireland, the Data Protection Commission (dataprotection.ie).

12. Changes to this policy

We may update this policy from time to time. The current version will always be available on this page and the "last updated" date above will be revised.