Enter to Win

Privacy Policy

Last updated: 6 November 2026.

Who is responsible for your information?

Dean Hodgson, a sole trader trading as APEX CARD CO Competitions, is the controller of personal information used to operate this website and business. Correspondence address: 16 Manor Road, Thetford, IP25 6RQ, United Kingdom. Email: dean@apexcardco.co.uk. We are a sole-trader business, not a limited company.

Information we handle and where it comes from

We receive information you provide when creating an account, placing an order, contacting us or arranging fulfilment. This can include your name, email, address, contact details, account information, correspondence, order references and transaction history. Our service providers can supply payment confirmations, delivery updates and technical information needed to operate the website securely.

Technical information can include IP address, browser and device information, page activity and security logs. Payment providers handle payment credentials; do not send card details or banking passwords to our support email.

Why we use information and our lawful bases

  • Account, order and fulfilment administration: to provide the services you request, communicate about your order and arrange delivery. The lawful basis is performance of a contract or steps you request before a contract.
  • Customer enquiries: to respond and resolve issues. We rely on the contract where the enquiry concerns it, or our legitimate interest in answering enquiries and providing support.
  • Security and misuse prevention: to protect accounts, investigate suspected fraud and maintain reliable systems. We rely on our legitimate interests in protecting customers and our business, subject to your rights.
  • Records and legal obligations: to maintain accounting records, respond to lawful requests and meet applicable legal duties. We rely on legal obligation. For establishing or defending legal claims, we rely on our legitimate interests.
  • Basic website measurement: to understand traffic and improve usability using Basecomp basic cookieless analytics. We rely on our legitimate interest in understanding and maintaining our website. The current configuration does not enable external advertising pixels or Google Analytics.
  • Optional marketing: where you have opted in, to send the updates you requested. We rely on consent. You can withdraw it at any time by using an unsubscribe link where provided or emailing us. Withdrawal does not affect earlier lawful processing, and service messages about an existing order are separate from marketing.

Where information is necessary to provide a requested service or comply with law, we may be unable to provide that service without it. Optional marketing consent is not a condition of receiving customer support.

Who receives information?

We share relevant information with Basecomp as our website and account platform, the payment provider handling your transaction, email and communications providers, and delivery services where required. Professional advisers, public authorities or law-enforcement bodies may receive information where necessary for legal obligations or claims. We do not sell your personal information.

Public results can include a winner’s first name and surname initial under the current website setting. Contact us about a privacy concern or an objection to publication; we will consider it alongside any applicable disclosure obligation. Photographs, testimonials and additional publicity are not required simply because you contact us.

Service providers and international processing

Service providers can have their own privacy notices and responsibilities, particularly payment and social-media providers. Contact us for information about the providers relevant to your data and any international processing. Where a restricted international transfer is required, applicable UK transfer safeguards must be in place; this notice does not replace those safeguards.

How long we keep information

  • Routine enquiries: normally up to 12 months after resolution.
  • Inactive accounts: reviewed after 24 months of inactivity to decide what can be deleted or anonymised. This is a review point, not a promise that transaction records will be deleted then.
  • Transaction and dispute records: up to six years after the transaction or resolution, with longer retention only where a legal duty or continuing claim requires it.
  • Marketing preferences: while needed to honour your choices. After an opt-out, limited suppression information may be kept so we do not contact you again.
  • Technical and security information: only for as long as needed for its security, operational or investigation purpose, assessed according to the incident and platform requirements.

Deletion requests are considered individually. We may retain information we still need for a legal obligation or claim, while deleting information no longer required.

Your data-protection rights

Depending on the circumstances, you can ask to access, correct or erase your information; restrict processing; receive a portable copy of certain information; or object to processing based on legitimate interests. You can object to direct marketing at any time and withdraw consent where we rely on it. These rights are subject to legal conditions and exceptions.

Email dean@apexcardco.co.uk to make a request. We may need proportionate information to verify your identity. We normally respond within one month; if a lawful extension applies, we will explain why.

Complaints

Please contact us with any concern so we can investigate. You can also complain to the UK Information Commissioner’s Office at ico.org.uk/make-a-complaint/. You do not have to contact us first to exercise your right to approach the regulator.

Cookies, external links and security

Read our Cookie Policy for the current storage and tracking setup. External sites, including Instagram, apply their own privacy terms. We use account access controls and the platform’s security features to protect information; no internet service can guarantee absolute security.

Children and changes

This service is intended for adults aged 18 and over. If you believe a child has supplied information, contact us so we can investigate and take appropriate action. We update this notice when our processing changes and bring significant changes to your attention where required.