CompetitionShowroom Ltd (“we,” “us,” or “our”), registered in England & Wales (company no. 17044777), registered office: Lonsdale House, High Street, Lutterworth, Leicestershire, LE17 4AD, UK, operates https://competitionshowroom.com (the “Service”). We are committed to protecting your privacy under the UK General Data Protection Regulation (UK GDPR) and the Data Protection Act 2018.
1. Data Controller
CompetitionShowroom Ltd is the data controller for personal data processed through the Service.
Postal address: Lonsdale House, High Street, Lutterworth, Leicestershire, LE17 4AD, UK
Privacy enquiries: legal@competitionshowroom.com
ICO registration no.: ZC158009
2. Information We Collect
We do not collect names, email addresses, or payment details to browse the Service. We collect:
(a) Usage data (automatic)
Standard browser request data: IP address, browser type/version, pages visited, time and date of visit, time spent on each page.
(b) Cookies and similar technologies
Non-essential cookies (analytics, marketing) are only set after you give consent via our cookie banner. See our Cookie Policy for full details.
(c) Contact form submissions
Name, email address, and message body — used only to respond to your enquiry. Never used for marketing.
(d) Weekly digest subscriptions
If you choose to subscribe to our weekly competition digest, we store your email address together with a record of your consent: the date and time, the page you subscribed from, the exact wording of the consent statement you were shown, your IP address, and your browser user-agent. We are required to keep this record as evidence that consent was freely given, and we use the IP address to limit automated signup abuse.
Subscriptions use double opt-in: we email you a confirmation link and add you to the list only when you click it. If you do not confirm within 72 hours the link expires. Every email we send carries a one-click unsubscribe link and the corresponding List-Unsubscribe headers.
3. Lawful Bases for Processing
- Consent (Art. 6(1)(a)) — analytics and marketing cookies. Withdraw at any time via the cookie banner.
- Consent (Art. 6(1)(a), and reg. 22 PECR) — sending you the weekly digest. We rely on your express opt-in; we do not rely on the PECR “soft opt-in”, as we do not sell you goods or services. Withdraw at any time via the unsubscribe link in any email.
- Legitimate interests (Art. 6(1)(f)) — essential site operation, security, server logging, aggregate analytics, and maintaining a suppression record of unsubscribed addresses so that we do not email you again.
- Contract / pre-contract (Art. 6(1)(b)) — responding to contact form enquiries.
4. Analytics & Third-Party Tools
Subject to your consent, we use Google Analytics 4 (Google Ireland Ltd). The GA tag is only loaded after you accept analytics cookies — it does not fire pre-consent (Google Consent Mode v2 defaults to denied). You may also install the Google Analytics opt-out add-on.
We use Silktide Consent Manager to capture your cookie preferences and an audit log of consent events.
We use Resend (Plus Five Five, Inc.) as our email service provider to deliver confirmation emails and the weekly digest. Resend processes your email address on our instructions under a data processing agreement. Subscriber records and consent evidence are stored in our Supabase database.
5. Affiliate & Outbound-Link Tracking
CompetitionShowroom Ltd participates in affiliate marketing programmes including networks such as Awin. When you click an outbound link to an operator:
- The destination URL may contain affiliate/referral parameters allowing attribution of the visit to us.
- The operator or network may set their own cookies on your device under their own privacy policies.
- We pass no directly identifying personal data — only click and campaign parameters.
We are not responsible for third-party operators’ or affiliate networks’ privacy practices. Please review the privacy policy of any third-party site you visit.
6. Data Retention
- Server access logs: up to 30 days, then deleted or aggregated.
- Google Analytics data: 14 months at Google, then automatically reset.
- Cookie consent records: up to 24 months (UK GDPR accountability audit trail).
- Contact form submissions: up to 24 months after final reply, then deleted.
- Digest subscribers: retained while you are subscribed. Unconfirmed signups are deleted once the 72-hour confirmation window lapses. If you unsubscribe we retain your email address and the date of withdrawal on a suppression list, so we can be sure not to contact you again, along with a non-identifying record of the original opt-in; your IP address and browser user-agent are erased at that point.
7. International Data Transfers
Where processors such as Google transfer data outside the UK, transfers are protected by the UK International Data Transfer Addendum to the EU Standard Contractual Clauses, plus the processor’s own technical safeguards (e.g. IP truncation for GA).
8. Sharing
We do not sell personal data. We share data only with processors required to operate the Service (hosting, analytics, consent management), and only to the extent necessary. We may disclose data if required by law or a competent authority.
9. Your Rights
Under UK GDPR you have the right to access, rectify, erase, restrict, object to, and port your data, and to withdraw consent at any time. Email legal@competitionshowroom.com or write to our registered office. You may also lodge a complaint with the ICO.
10. Changes to This Policy
We may update this policy from time to time. The “Last updated” date above always reflects the most recent revision.