Privacy Policy

Company: Limitless X Competitions Ltd

Company Number: 15245251

Registered Address: Milburn House, 3 Oxford Street, Workington, Cumbria, CA14 2AL

ICO Registration: [Pending — registration in progress at ico.org.uk]

Data Protection Officer: [email protected] (appointment pending — interim contact: [email protected])

We collect the following personal data when you use our services:

• •Name — to identify you as a competition entrant and for prize fulfilment
• •Email address — for account management, competition entry confirmation, winner notification, and marketing (with consent)
• •Date of birth — to verify you are aged 18 or over (legal requirement for competition entry)
• •Postal address — for prize delivery and free postal entry processing
• •Payment reference — Stripe handles all card data directly. We never see, store, or process your card number, CVV, or expiry date. We retain only a Stripe payment reference ID for transaction records.

We process your personal data under the following legal bases:

• •Contractual necessity — processing required to fulfil your competition entry and deliver prizes (Article 6(1)(b) UK GDPR)
• •Legitimate interests — fraud prevention, age verification, and platform security (Article 6(1)(f) UK GDPR)
• •Consent — marketing communications and non-essential cookies (Article 6(1)(a) UK GDPR). You can withdraw consent at any time.

• •Financial records: 7 years (HMRC requirement)
• •Marketing data: 2 years after last contact, then deleted
• •Competition entry records: 3 years after competition close (for audit and dispute resolution)
• •Account data: Retained while your account is active. Deleted within 30 days of account closure request.

Under UK GDPR, you have the right to:

• •Access — request a copy of all personal data we hold about you
• •Rectification — correct any inaccurate personal data
• •Erasure — request deletion of your personal data (subject to legal retention requirements)
• •Restriction — restrict processing in certain circumstances
• •Portability — receive your data in a structured, machine-readable format
• •Object — object to processing based on legitimate interests
• •Withdraw consent — for marketing communications at any time

To exercise any of these rights, email [email protected] or write to us at our registered address. We will respond within 30 days.

To request deletion of your personal data, email [email protected] with the subject line "Data Deletion Request".

We will delete your data within 30 days, except where we are legally required to retain it (e.g., financial records for HMRC compliance, or competition records required for audit purposes).

We share personal data only with the following third parties, and only to the extent necessary to provide our services:

• •Stripe — payment processing (PCI DSS Level 1 certified). Stripe processes card data directly; we never handle it.
• •HubSpot — email marketing and CRM (when configured). Used for competition updates and marketing communications only with your consent.
• •Make.com — workflow automation. Processes data in transit only; does not store personal data.

We do not sell your personal data to any third party. Ever.

We use cookies to operate the site and improve your experience. For full details, see our Cookie Policy.

This Privacy Policy is governed by the laws of England and Wales. If you have a complaint about how we handle your data, you have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

For any privacy-related enquiries:

Email: [email protected]

Post: Data Protection Officer, Limitless X Competitions Ltd, Milburn House, 3 Oxford Street, Workington, Cumbria, CA14 2AL