Privacy policy

This explains what personal information Dustline Draws collects, why we need it, who else sees it, how long we keep it, and what you can ask us to do with it. Last updated 6 November 2026.

Draft. This policy will be reviewed by a solicitor, along with the terms, before the first draw opens.

Who we are

Dustline Draws is a trading name of SKMB Software Ltd, company number 17532454, registered office Bartle House, 9 Oxford Court, Manchester, M2 3WQ. We decide how your information is used, which makes us the controller under UK data protection law.

For anything in this policy, email hello@skmbsoftware.co.uk or write to us at the registered office.

What we collect

• Your account. Your email address. If you sign in with Google, we also receive the name and profile picture on your Google account.
• Before your first paid entry. Your full name, date of birth, phone number and postal address. We use these to check that you are 18 or over and live in England, Scotland or Wales.
• Your entries and payments. Your tickets, orders, wallet balance and wallet history. Card payments are taken by Stripe. We never see or store your card number.
• Free postal entries. What you write on the postcard: your name, address, date of birth, and an email address or phone number.
• Responsible play. Any spend limit, cooling-off period or self-exclusion you set.
• If you win. What we need to deliver the prize or pay the cash alternative, such as a delivery address or bank details, and the handover photo if you agree to one.
• Technical information. Our hosting provider handles your IP address so it can deliver pages to you and protect the site from abuse.

Why we use it

• To run your account and your entries, give you ticket numbers, run the draws and deliver prizes. This is needed for our agreement with you (contract).
• To check age and where you live. Draws are only open to adults in England, Scotland and Wales, and we must not let anyone else enter (legal obligation and contract).
• To keep financial records. Tax law requires us to keep records of payments and prizes (legal obligation).
• To prove each draw is fair by publishing entry lists and results, as described below (legitimate interests).
• To apply your spend limits, cooling-off and self-exclusion (contract and legitimate interests).
• To email you. Sign-in links, receipts, and news about draws you have entered are part of the service. We may also email account holders when new draws open. You can stop those at any time by replying to one or by emailing us (legitimate interests).
• To keep the site secure and prevent fraud or duplicate accounts (legitimate interests).

We do not sell your information, and we do not use it for advertising.

What we publish

• Entry lists. Before every draw we publish the list of ticket numbers. Each one shows only the entrant’s first name and the initial of their surname, and whether it was an online or postal entry.
• Winners. We publish the winner’s first name, initial, town and ticket number, and a handover photo if they agree to one.
• Live draws. Draws are streamed on Facebook and YouTube. The stream shows the published entry list and the result, nothing more.

Who we share it with

Only the companies that run parts of the service for us, and only what each one needs:

• Render hosts the site and the database, on servers in Frankfurt, Germany.
• Stripe takes card payments.
• Resend sends our emails.
• Google, only if you choose to sign in with Google.
• The independent draw service that picks each winner. It receives the published entry list, so only ticket numbers, first names and initials.

We may also share information with our professional advisers, with HMRC, or with the police and other authorities when the law requires it.

Some of these companies are based in the United States or have support staff there. When information leaves the UK, it is protected by UK adequacy regulations, including the UK–US data bridge, or by the UK International Data Transfer Addendum.

How long we keep it

• Your account stays while it is open. When you close it, we delete or anonymise it, apart from the records below.
• Entries, payments, wallet history and winner records are kept for six years after the end of the financial year they belong to, because tax law requires it.
• Postcards are destroyed once the entry is recorded and the draw’s result is final. The recorded entry is kept like any other entry.
• Self-exclusion records are kept for as long as the exclusion lasts, so we can keep applying it.
• Sign-in links expire after 24 hours.

Cookies

We only use the cookies the site needs to work: one that keeps you signed in, and two used while you sign in, which protect the form and return you to the page you came from. There are no analytics or advertising cookies, so there is nothing to consent to. Stripe and Google set their own cookies on their own pages if you pay by card or sign in with Google.

Your rights

You can ask us to:

• give you a copy of the information we hold about you
• correct anything that is wrong
• delete your information, where we do not have to keep it
• limit how we use it, or object to a use based on our legitimate interests
• give you your information in a format you can take elsewhere

Email hello@skmbsoftware.co.uk. We reply within one month. We may ask you to confirm who you are first.

Under 18s

Dustline Draws is for adults only. If we find that we hold information about someone under 18, we void their entries, refund any payments, and delete what we do not need to keep.

Complaints

If you are unhappy with how we have handled your information, please tell us first. You can also complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint or on 0303 123 1113.

Changes to this policy

If we change how we use your information, we will update this page and change the date at the top.