A saved LEGO® set is a wish, not a competition entry. Free Prize Draws keeps those two activities separate. The contact for the website and this notice is [email protected].
Can anyone see my wishlist?
The wishlist lives in the browser where you made it. Saving records the set name, set number and an update time in local storage; it does not send a wishlist to our server. Somebody sharing your browser profile could nevertheless open it. Removing an item, clearing the list or deleting the site’s browser data removes that local copy. After 90 days without an update, the next visit removes the expired list. If you download a copy, you decide where that file is kept and when it is deleted.
Does the postal checklist collect my address?
No. The tick boxes are temporary for the page you have open. This tool does not collect your address, a promoter-account login or a postal entry. Printing produces a document through your browser. A posted entry goes to the competition organiser, not to Free Prize Draws.
What happens when a page opens?
Our hosting service and WordPress security tools use request information—such as the network address, browser, time and requested page—to deliver the site and detect trouble. This operational processing serves our legitimate interests in protecting the directory. Staff sign-ins also need WordPress cookies.
Cloudflare Web Analytics supplies visit and loading-performance measurements. Its beacon sends those measurements to Cloudflare; it does not use analytics cookies or browser storage to track you. Read how Cloudflare’s measurement works. This is separate from security logs, which can contain IP addresses. Browser controls can restrict scripts and stored site data, but clearing storage also clears the wishlist you asked us to remember.
What if I write to the site?
Your email address and message reach our mailbox and its service provider. We use them to answer, investigate a correction or manage a website issue. Our legitimate interest is handling that correspondence; a particular request can also create a legal duty. We keep the exchange for the enquiry, necessary follow-up and any related dispute or required record, rather than indefinitely for an unrelated purpose. There is no need to send identity documents, passwords or copies of private entry records.
On pages that accept comments, the chosen name and approved contribution are visible to readers. Comment fields and technical information are processed for moderation and spam checks. Public contributions may remain with the discussion. Embedded media can contact its own provider when loaded, so check that provider’s privacy explanation before interacting.
Who deals with a competition entry?
The organisation running the draw deals with its forms, ticket payments, mailing preferences and prize delivery. Following our link opens that organisation’s service; your wishlist is not transferred with it. Its privacy notice explains what it asks you for.
For our own operations, hosting, security and email suppliers have access to the records needed to provide their services. Technical logs and backups follow the relevant operational retention arrangements. Where processing involves another country, the supplier’s location and transfer arrangements matter; ask us for details of the service concerned. We remain responsible for the handling described here.
How can I make a privacy request?
Write to the contact address above for access to information held by the site, to correct it, or to seek deletion or restricted use. Portability may apply to qualifying records. You have a right to object where we rely on legitimate interests, and can withdraw consent where that is the basis for an optional use. These rights depend on the record and circumstances. The ICO accepts data-protection complaints if you remain concerned. A browser-only wishlist is under your control: we have no server copy to retrieve.