Privacy Policy

1. Data Controller

CompetitionShowroom Ltd is the data controller for any personal data processed through the Service.

Postal address: CompetitionShowroom Ltd, 31 Bradden Road, Greens Norton, Towcester, NN12 8BS, United Kingdom.
Privacy contact: legal@competitionshowroom.com

ICO registration: in progress. Our reference will be published here once issued by the Information Commissioner's Office.

2. Information We Collect

We do not collect names, email addresses, or payment details in order to browse the Service. We collect three categories of data:

(a) Usage data (automatic)

When you visit the Service your browser automatically sends standard request data including IP address, browser type and version, the pages you visit on our Service, the time and date of your visit, and time spent on each page.

(b) Cookies and similar technologies

We use a small number of cookies. Non-essential cookies (analytics, marketing) are only set after you have given consent via our cookie banner. See our Cookie Policy for the full list and categories.

(c) Contact form submissions

If you submit our contact form we collect the name, email address, and message body you provide so that we can respond. We do not use this data for marketing.

3. Lawful Bases for Processing

• Consent (UK GDPR Art. 6(1)(a)) — for analytics and marketing cookies and any optional tracking. You can withdraw consent at any time via the cookie banner.
• Legitimate interests (UK GDPR Art. 6(1)(f)) — for essential site operation, security, fraud prevention, basic server logging, and aggregated analytics of how the Service is used so we can improve it.
• Contract / pre-contract (UK GDPR Art. 6(1)(b)) — to respond to enquiries you submit via our contact form.

4. Analytics & Third-Party Tools

Subject to your consent, we use Google Analytics (Google Ireland Ltd) to measure aggregate use of the Service. Google Analytics may set cookies and process pseudonymous identifiers and IP addresses (which Google truncates / anonymises in line with EU/UK requirements). If you decline analytics in our cookie banner, the Google Analytics tag is not loaded.

You can also install the Google Analytics opt-out browser add-on for further control.

We use Silktide Consent Manager to capture and store your cookie preferences and an audit log of consent events.

5. Affiliate & Outbound-Link Tracking

CompetitionShowroom Ltd participates in affiliate marketing programmes, including those operated by networks such as Awin. When you click an outbound link from our Service to an operator's website:

• The destination URL may contain affiliate / referral parameters that allow the operator or network to attribute the visit to us.
• The operator's website (and, where applicable, the affiliate network) may set their own cookies on your device under their own privacy policies and lawful bases.
• We do not pass any directly identifying personal data — only the click and any non-identifying campaign parameters we have configured.

We are not responsible for the privacy practices of operators or third-party affiliate networks. We recommend you review the privacy policy of any third-party site you visit.

6. Data Retention

• Server access logs: retained for up to 30 days for security and abuse investigation, then deleted or aggregated.
• Google Analytics data: retained at Google for the default 14 months, then automatically reset.
• Cookie consent records: retained for up to 24 months as an audit trail under UK GDPR accountability requirements.
• Contact form submissions: retained for up to 24 months after the final reply, then deleted unless we are legally obliged to retain them for longer.

7. International Data Transfers

Where third-party processors (such as Google Analytics) transfer data outside the United Kingdom or European Economic Area, the transfer is protected by appropriate safeguards — typically the UK International Data Transfer Addendum to the EU Standard Contractual Clauses — and by the processor's own technical and organisational measures (including IP truncation and pseudonymisation in the case of Google Analytics).

8. Sharing

We do not sell personal data. We share data only with the third-party processors required to operate the Service (hosting, analytics, consent management) and only to the extent necessary. We may disclose data if required to do so by law or by a competent authority.

9. Your Rights

Under UK GDPR you have the right to:

• Access the personal data we hold about you.
• Rectify inaccurate or incomplete data.
• Erase your data ("right to be forgotten") where applicable.
• Restrict or object to processing.
• Withdraw consent at any time, for any processing based on consent (via the cookie banner or by emailing us).
• Data portability for data processed by automated means under consent or contract.
• Lodge a complaint with the Information Commissioner's Office (ICO) if you believe we have mishandled your data.

To exercise any of these rights, email legal@competitionshowroom.com or write to us at our registered office above.

10. Security

We use industry-standard technical and organisational measures — including TLS encryption in transit, access controls on our infrastructure, and the principle of data minimisation — to protect the limited data we process. No system is perfectly secure, but we take our obligations seriously.

11. Changes to This Policy

We may update this Privacy Policy from time to time. The "Last Updated" date above always reflects the most recent revision. Material changes will be flagged in a banner on the Service for a reasonable period.