Privacy policy

Why this Privacy Notice is important to ‘You’, ‘Your’.

This Privacy Notice is important because it explains to You how we may use the personal Information We collect and hold about You. Should you have any questions about this Privacy Notice please see the contact details at the bottom of the Notice.

UK Data Protection Law.

Throughout this Privacy Notice we will talk about UK Data Protection Law, this predominantly means the Data Protection Act 2018 and the Privacy and Electronic Communications (EC Directive) Regulations 2003 as well as the EU GDPR regulations which came into force on 25th May 2018.

Who We are – ‘We’, ‘Us’, ‘Our’.

Dreamprizedraw.com is owned by Ortex Marketing Ltd. Ortex Marketing Is a company registered in England & Wales under company number 11760703. Our registered office is:

Our Data Protection Officer is James Butler. He can be contacted by Email: dpo@ortexmarketing.co.uk or Write to: The Data Protection Officer, Ortex Marketing Ltd, First Floor, Swan Buildings, 20 Swan Street, Manchester, M45JW Ortex Marketing Ltd.

We want this Privacy Notice to be honest, open and transparent because We know that Your privacy, and the protection of Your Personal Information is important to You. We take every reasonable precaution to ensure compliance with UK Data Protection Law. Further information about Your rights under UK Data Protection Law is available from the Office of the Information Commissioners (ICO) Website. If You wish to find out more please visit: www.ico.org.uk

We do not want to collect or hold any Personal Information about You that You do not wish or intend to give. That is why it is important that You read this Privacy Notice carefully.

What information do You hold about Me?

We collect three categories of Personal Information about You; Identifiable Information, Anonymous Information and Lifestyle Information.

• ‘Identifiable Information’ means any information about You from which You can be personally identified, common examples include (but are not limited to); Your name, address, date of birth and email address.
• ‘Anonymous Information’ means information that does not identify You personally but categorizes You into certain groups or categories. Commonly this is demographic information such as; age group, gender, marital status and income. Anonymous Information is useful because it allows Us to build statistical and analytical information about You which means We can better identify products and services that are relevant to You.
• ‘Lifestyle Information’ means information about Your way of life and interests. Like anonymous information it does not identify You personally but helps Us understand You better. Together We call this ‘Personal Information’.

We do not collect or hold any health, financial or credit details pertaining to You or any individual, adverse or otherwise.

Where is Your Personal Information held?

The Personal Information We collect will be held by Us on Our database which is hosted on secure servers based in the European Economic Area (“EEA”). We use a variety of physical and network security technologies and procedures to help protect Your information from unauthorized access, use, or disclosure. We also operate stringent people processes which means that only a limited number of people in our organization have access to the information contained in the database. We have established procedures to cope with events that happen that are beyond Our control. We are also certified as meeting the requirements of ISO 27001:2013 in the provision of data cleansing and the management of consumer lists.

How do We collect Your Personal information?

We collect Personal Information about You in several ways including the following:

• when You enter one of Our competitions or prize draws;
• when You complete one of Our lifestyle questionnaires or surveys;
• when You complete Our unsubscribe form;
• when You submit a Data Protection Enquiry or Subject Access Request (SAR);
• when We purchase or license Your information from other suppliers.
• when We are supplied Your Data by third party companies for the purpose of using our Data Cleansing and/or Data Validation services

When You are entering Personal Information onto Our website it is not until You click the submit button that Your Personal Information is transferred to Us. Unfortunately, the internet is not a 100% secure medium and We cannot guarantee or accept any liability for any loss or damages in relation to information that You submit that is lost in transit. We also purchase &/or license Personal Information from other third parties. We call these third parties Data Contributors. Your Personal Information may be collected by Data Contributors if You have submitted information to a website, (for example when entering a prize draw), completed a telephone survey or lifestyle questionnaire or when buying goods and services from third parties. Regardless of the way Your Personal Information is collected Our Data Contributors warrant to Us that You have consented to Your Personal Information being passed to Us and that the consent is current. We call this permission Opt-In. We only ever work with Data Contributors that operate within UK Data Protection Law and are registered with the ICO at the time of purchase.
You have the right under UK Data Protection Law to Opt-Out of receiving marketing material at any time and more information is shown about this in section 11 and 12 below.Who do We share Your Personal Information with?

Data, like many other products and services can be sold or licensed. When We license data to third parties We call them Clients. We work hard to ensure that We only deal with reputable Clients who like Us operate in accordance with UK Data Protection Law. We enforce this through Our contractual relationships with Our Clients in which they undertake to operate in accordance with the UK Data Protection Law and continue to enforce the rights You have. More information about those rights is set out in this Privacy Notice. Sometimes Our Clients operate in countries outside of the European Economic Area (EEA) who operate under different data protection laws. Where this happens We enforce additional contractual provisions to ensure they provide an adequate level of protection as required by UK Data Protection Law.

We have two types of clients/partners that we may share your data with:

1. Direct End Clients, and

2. Marketing Services Providers.

We have listed below the business categories that our clients fall into as well as providing an explanation about Marketing Services Providers.

1. Direct End Clients. Below is a list of business categories in which Our Clients operate. Depending on what personal information We hold about You, Our Clients may contact You by post or email for direct marketing, debt collection and tracing.

2. Marketing Services Providers.

We will share your data with the Marketing Services Providers listed below, who will use it for a variety of direct marketing purposes.

To understand more about the use of your data by Marketing Services Providers please see Section 9 of this Privacy Notice below. To find out how to exercise your data protection rights in relation to their use of your data (including how to opt-out), please click through to the websites of the companies listed below:

What do We Use Your Personal Information for? (Our Purpose for Processing your Data)

We Use Your Personal Information to:

• Pass your details on to selected Clients who will contact You with offers and promotions;
• Help other companies to profile and extend their personal databases;
• Provide You with information about the products and services We offer;
• Conduct market research;>
• To unsubscribe You from Our databases;
• To add You to Our suppression file/Do not contact file;
• Send You newsletters with news items and blogs from our websites including competitions and promotions;
• To communicate with You about an enquiry You have made;
• To wealth screen You to ascertain that You are likely to have sufficient financial capability to support specific fundraising or other activity;
• Help Clients who undertake online marketing to help provide online advertisements that are relevant to You. You may be contacted by post or email only;
• To make a profile of You. We use some of the information You provide to match with Our clients data so that they will better understand the characteristics of their customers, such as age and interests. This only happens when You are both on Our and Our clients databases. We do not give them specific information about You but We will tell them how many of their customers fall into a specific criteria such as in a certain postcode or have a pet. We will also help identify whether or not You have similar attributes to a typical customer of Our client so that they can target You with tailored offers of goods and services. We will never profile You on the basis of ethnicity, religion, politics or health as these are not valid reasons for which You should be targeted for marketing purposes, we also do not hold or collect this information. We also do not make automated decisions about You which have a negative impact on Your rights. Marketing Services Providers we share Your data with can also use profiling to target You for marketing purposes.

We will share your data with the Marketing Services Providers listed above, who will use it for a variety of direct marketing purposes. Marketing Services Providers carry out data profiling. They will combine your data with data they get from other sources (including public sources) and use it to create “predictive models”. Marketing Services Providers use these models to try to predict behaviour and preferences (e.g. how likely you are to buy a holiday online or take a particular type of holiday) or likely circumstances (e.g. whether you are eligible for a particular credit card).

Marketing Services Providers will also try to match and then link your data with data that they receive about you from other sources, to make sure that the data they hold about you is correct (e.g. to check whether you have recently moved address).

They share your data, including the profiled data they have created about you, primarily to:

• help organisations better understand the likely characteristics of their customers (and find others like them);
• improve the relevancy and appropriateness of an organisation’s marketing to its customers (e.g. offers, its products and services); and
• help them communicate with their customers more effectively offline and online. This may mean that you receive tailored advertising via direct mail or when you visit a website.

To understand more about the use of your data by Marketing Services Providers, and to find out how to exercise your data protection rights in relation to their use of your data (including how to opt-out), please click through to the websites of the companies listed above.

Processing Clients Data

Our business activities also involve us acting as a Data Processor to process our clients’ data on their specific instructions. This data may contain personal data that belongs to our clients (in legal terms they are the Data Controller). We do not do anything with this data other than as instructed by our clients. Appropriate technical and organisational measures are taken against unauthorized or unlawful processing of our clients’ personal data and against accidental loss or destruction of, or damage to, our clients’ personal data. Our clients’ data is not kept for longer than is necessary for those purposes provided to us.

In the performance of our Data Cleansing and Data Validation services, we are often requested to cross reference our clients’ data to data we receive from our suppliers. Both the clients’ data and our suppliers’ data contain Personal Data that may relate to individuals. Our website provides more details on the Data Cleansing services and the Data Sources that we use. When we process our clients’ data against our suppliers’ data we do so on the legal basis of Legitimate Interest.

Information we receive from other sources. We may combine this information with information You give to Us and information We collect about You. We may use this information and the combined information for the purposes set out above (depending on the types of information We receive).

We process data under the following lawful basis’:

Consent: where we have Your consent to receive marketing communications for compatible products and services through specified channels.
Legitimate Interest: there is a legitimate interest for ourselves and our clients in processing data to provide products and services to consumers through marketing campaigns. On a case by case basis, a balancing test is performed to ensure that we balance the potential impact of the campaign on the consumer and their rights of processing data, with the interests of ourselves and our clients.
Legal Obligation: we may need to process data under this basis, for example where a Subject Access Request (SAR) is made to remove or amend details, this data will be processed under the lawful basis of Legal Obligation.

We will use the following legal basis for each activity listed:

What if I don’t want to receive any more information from You?

You can opt out anytime from Us holding Your Personal Information on Our database by unsubscribing here. We call this process suppression. This is standard marketing industry practice approved by the ICO and means that just enough information about You is retained to ensure that Your wishes are respected. Suppressing, rather than deleting, Your details has the objective of preventing Your records being reintroduced into Our database in the future. Following suppression of Your details, marketing communications should stop within a maximum period of twenty eight days for electronic communications and two months for postal communications.What other rights do I have?

Data protection law provides You with several rights in relation to Your personal data:

Right of access . You can ask Us for a copy of the personal data We hold about You across Our entire business. This is known as a Data Access Request (DSAR).

Right to rectification. If You think the personal data We hold about you is inaccurate or incomplete, You can ask for it to be corrected or completed.

Right to erasure or right to be forgotten. You can ask us to delete the personal data We hold about You.

Right to restrict processing. If You are concerned about the accuracy of the data We hold about You, You can ask that we restrict our use of it until the query is resolved.

Right to object. You have the right to object to us processing your data for direct marketing purposes and this extends to any associated profiling activity to support direct marketing. This is an absolute right, meaning that if you object to this, we must no longer process your personal data for this purpose.

Right to request that Your data be transmitted directly to another data controller (Known as right to data portability).

Right to be informed. We must provide You with information about how and why we’re using Your personal data.

Rights in relation to automated decision making and profiling. Under data protection rules, the use of automated decision-making and profiling is tightly controlled, particularly where any resulting decision made about you is made solely by automated means and produces a legal or similarly significant effect. In these circumstances, you have the right not to be subject to such decisions unless certain specific criteria are satisfied.

Right to lodge a complaint with a supervisory authority – If we cannot deal with your complaint to your satisfaction you also have the right to complain to a relevant supervisory authority which include; The Information Commissioners Office; Wycliffe House, Water Lane, Wilmslow, SK9 5AF, or call: 0303 123 1113 or online at https://ico.org.uk/concerns/ and The Advertising Standards Authority – https://www.asa.org.uk/make-a-complaint.html Our general disclosure to You.

• We will hold information about You on Our database until such time as You ask Us to remove Your information.
• Once You have clicked ‘submit ‘ on Our website You consent to Ortex Marketing Ltd, being able to send You communications via email if you have chosen that method until such times as You exercise Your right to unsubscribe from receiving such communications. If You have requested to be contacted by post We will use Legitimate Interest to send You post, again until you exercise Your right to unsubscribe from receiving such communications.
• We will share information about You with Clients and Sponsors. Information about You may be held and used by Clients and Sponsors on their websites and/or on databases owned and controlled by them.
• You consent to Our Clients and Sponsors sending You communication via email if you have chosen that method until such times as You withdraw your consent for sending such communications. If You have requested to be contacted by post Our Clients and Sponsors will use Legitimate Interest to send You post, again until you exercise Your right to unsubscribe from receiving such communications.
• Our Data Retention Policy / How long will We keep Your data for?
  We take Your data privacy rights seriously. Whilst the law does not put a time limit on the amount of time We should hold Your personal data, We wish to retain data for as long as it is required for the purposes for which it was collected; for as long as it remains accurate and up-to-date; and most importantly, for as long as You are happy for us to do so.In addition, to help Us maintain the most recent indication of your marketing and data processing preferences, if We hold Your email address We will provide You with ongoing reminders of Your data subject rights with access to this privacy notice. We refer to this as engagement or notification recency. Therefore Our data retention policy considers the purpose, the legal basis under which it is processed and also the most recent engagement.For Marketing – where We process Your data under consent we will stop using it for marketing purposes after ten years. Where We rely on legitimate interests We will also continue to process Your data for ten years. However, where We hold an email address for You We will maintain regular contact and will ensure that You have the opportunity to opt out at least once every six months.For Profiling – We will stop using Your data for this purpose after ten years.

  It is important that the personal data We hold and process is accurate and up-to-date. Therefore, we regularly refresh the database against suppression lists and remove those who no longer wish to be contacted. As we explain in the section 10 of this Privacy Notice marked “What if I don’t want to receive any more information from You? you can withdraw your consent to us at any time by unsubscribing via email.

  Our backup policy is to backup data daily, overwriting the previous days backup. One backup each month will then be held offsite for a period of three months before being securely deleted.

Cookies used on this website.

Cookies are small text files that are placed on your computer by websites that you visit. They are widely used in order to make websites work, or work more efficiently, as well as to provide information to the owners of the site. The table below explains the cookies we use, why we use them, and how to change your cookie settings.
Essential cookies are required for normal operations of a website, for example submitting a form. For non-essential cookies, the basic operations of a website could function without them but some features would be missing. First party cookies are cookies which relate to the website you are visiting, whilst third party cookies may carry information with you as you visit other websites.

• Disabling cookies

Cookies help you get the most out of our website. However, you may set up your browser to delete or block some or all of them or to notify you when you are sent a cookie.
Further methods for blocking specific cookies are detailed within the table above.
Please remember, if you do delete or block the use of some or all of the cookies described above, some features of our websites, such as submitting forms, will not work and your experience may be affected. If you do not adjust your settings to delete or block cookies, then they will be placed on your browser when you visit our websites. You can adjust your settings at any time.
Find out how to manage cookies in popular browsers:

• Chrome
•  Edge
•  Firefox
•  Safari
•  Safari (iOS)
•  Opera

To find out more about cookies, including how to see what cookies have been set, visit www.aboutcookies.org or www.allaboutcookies.org The sale or acquisition of Ortex Marketing Ltd or its assets.

If Ortex Marketing Ltd or any of its assets are acquired by or merged with another entity, your Personal Information may be one of the transferred assets. If We choose to sell or transfer Our assets, We may choose to retain a copy of Your information post sale or merger.Changes to this Privacy Notice.

We will occasionally update this Privacy Notice. We will tell You about these changes by posting a notification at the foot of Our websites. If the changes We make to the Privacy Notice in any way affect Your rights under UK Data Protection Law, especially in relation to how We collect and hold information about You We will contact You to explain the changes and obtain Your permission to do so.Contact Us via email.

If You have any comments or queries in connection with this Privacy Notice, please contact Ortex Marketing Ltd by: Email at dpo@ortexmarketing.co.uk; or Write to: The Data Protection Officer, Ortex Marketing Ltd, First Floor, Swan Buildings, 20 Swan Street, Manchester, M45JW

If you have any queries about data usage please email us at dpo@ortexmarketing.co.uk