1. Who We Are

bedrawn is a luxury raffle platform operated from London, United Kingdom. We are the data controller for personal data collected through this platform. For privacy-related queries, contact privacy@bedrawn.app.

2. What Data We Collect

We collect your name, email address, and password on signup. If you are a seller, we collect identity documents for KYC verification. We collect transactional data (draws entered, tickets purchased, wallet activity). We collect technical data including device type, IP address, and usage patterns.

3. How We Use Your Data

To operate your account and process draw entries. To send you win notifications, draw reminders, and updates you have opted into. To verify seller identity and prevent fraud. To improve the platform using anonymised analytics. We do not sell your personal data to third parties.

4. Legal Basis

We process your data under the following legal bases: contract performance (to operate your account and draws), legitimate interests (to prevent fraud and improve the platform), and consent (for marketing communications). You may withdraw consent for marketing at any time in Settings.

5. Data Retention

We retain your account data for as long as your account is active. Transactional records are kept for 7 years for tax and legal compliance. Upon account deletion, personal data is removed within 30 days, except where retention is required by law.

6. Your Rights

Under UK GDPR, you have the right to access your data, correct inaccurate data, delete your data (right to erasure), restrict processing, and data portability. To exercise any of these rights, email privacy@bedrawn.app. We will respond within 30 days.

7. Cookies

We use essential cookies to keep you logged in and maintain session state. We use analytics cookies (with your consent) to understand how the platform is used. You can manage cookie preferences in your browser settings.

8. Third Parties

We use AWS for hosting and data storage. We use Stripe for payment processing. These providers are bound by data processing agreements and GDPR-compliant terms. We do not share your data with advertisers.