Privacy Policy

1. Introduction

MagicComp ("we", "us", "our") is committed to protecting your privacy. This Privacy Policy explains how we collect, use, disclose, and safeguard your information when you visit our website and use our services.

We are the data controller for the purposes of the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.

2. Information We Collect

2.1 Personal Information

We may collect the following personal information:

• Name and contact details (email, phone number, address)
• Date of birth (for age verification)
• Payment information (processed securely via third-party providers)
• Account credentials
• Competition entry history
• Communication preferences

2.2 Automatically Collected Information

When you visit our website, we automatically collect:

• IP address and device information
• Browser type and version
• Pages visited and time spent
• Referring website
• Cookie data (see our Cookie Policy)

3. How We Use Your Information

We use your information to:

• Process competition entries and payments
• Notify winners and deliver prizes
• Manage your account and provide customer support
• Send transactional emails (order confirmations, draw results)
• Send marketing communications (with your consent)
• Prevent fraud and ensure fair play
• Comply with legal obligations
• Improve our website and services

4. Legal Basis for Processing

We process your personal data on the following legal bases:

• Contract: To fulfil our contract with you when you enter competitions
• Legitimate Interests: To operate and improve our business
• Consent: For marketing communications and non-essential cookies
• Legal Obligation: To comply with applicable laws

5. Data Sharing

We may share your information with:

• Payment Processors: Stripe, PayPal for secure payment processing
• Delivery Partners: To deliver physical prizes
• Service Providers: Email, hosting, analytics providers
• Legal Authorities: When required by law
• Winner Announcements: First name, surname initial, and general location may be published

We do not sell your personal information to third parties.

6. Data Retention

We retain your personal data for:

• Account data: Duration of account plus 6 years
• Transaction records: 7 years (legal requirement)
• Marketing preferences: Until you unsubscribe
• Competition entries: 2 years after competition closes

7. Your Rights

Under UK GDPR, you have the right to:

• Access: Request a copy of your personal data
• Rectification: Correct inaccurate information
• Erasure: Request deletion of your data ("right to be forgotten")
• Restriction: Limit how we process your data
• Portability: Receive your data in a portable format
• Object: Object to certain processing activities
• Withdraw Consent: Where processing is based on consent

To exercise these rights, contact us at privacy@magiccomp.com.

8. Data Security

We implement appropriate security measures including:

• SSL/TLS encryption for data transmission
• Secure password hashing
• Regular security assessments
• Access controls and staff training
• PCI-DSS compliant payment processing

9. International Transfers

Your data is primarily stored in the UK/EEA. Where transfers outside this area occur, we ensure appropriate safeguards are in place (e.g., Standard Contractual Clauses).

10. Children's Privacy

Our services are not intended for anyone under 18. We do not knowingly collect data from minors. If we discover we have collected data from someone under 18, we will delete it immediately.

11. Changes to This Policy

We may update this policy from time to time. We will notify you of significant changes via email or website notice.

12. Complaints

If you have concerns about how we handle your data, please contact us first. You also have the right to lodge a complaint with the Information Commissioner's Office (ICO) at ico.org.uk.

13. Contact Us

For privacy-related enquiries:

• Email: privacy@magiccomp.com
• Post: Data Protection Officer, [Company Address]