Last updated: 12 September 2026
Who controls your data
Pullz Limited trading as PrizePull is intended to act as controller for PrizePull customer data. Company number: 17421859. Registered office: 52 Castle Avenue, Yiewsley, West Drayton, England, UB7 8LQ. Privacy contact: support@prizepull.co.uk.
Information we may collect
- name, date of birth, email, telephone number, delivery and billing address;
- account credentials and preferences;
- age/identity verification result or reference, while minimising unnecessary identity-document storage;
- competition entries, allocated numbers, orders, spend limits and account-control settings;
- payment status and provider references, but not full card details where hosted payment tooling is used;
- free-entry submissions and validation records;
- winner verification and prize-delivery records;
- support, complaints, fraud/security and audit logs;
- cookie/device information where permitted.
Why we use it
Purposes include providing accounts, processing entries and payments, validating free entries, enforcing limits, operating/auditing draws, verifying winners, delivering prizes, preventing fraud, keeping accounting/legal records, answering support requests and—where permitted—sending marketing.
Lawful bases
Depending on the activity, PrizePull may rely on performance of a contract, compliance with legal obligations, legitimate interests (for example fraud prevention and service security), and consent for specific optional marketing/cookies. The final mapping must be checked against the production implementation.
Who receives data
Data may be shared with approved providers supporting payments/acquiring, hosting, database/storage, email, age/identity verification, analytics where consented, fraud/security, professional advisers, delivery/courier services and draw/audit services. Final production vendors must be recorded before launch.
Winner records
PrizePull intends to publish a proportionate public result record. More detailed verification and fulfilment data remains internal unless there is a lawful basis and any required consent for wider publicity.
Retention
Different records require different retention periods. Accounting/payment, draw-audit, fraud/security, support, winner fulfilment and marketing records should each follow a documented retention schedule. Data should not be kept longer than necessary.
Your rights
Subject to applicable UK data-protection law, you may have rights of access, correction, deletion, restriction, objection, portability and withdrawal of consent. You may also complain to the Information Commissioner's Office. Contact support@prizepull.co.uk first if you would like us to handle a request.
Under-18s
PrizePull is not intended for anyone under 18. If we reasonably believe an account belongs to a minor, access and participation may be restricted while the matter is investigated.
Security
PrizePull intends to use role-based access, encrypted transport, managed payment tooling, backups, audit logs and server-side validation. No internet service can promise absolute security.