Privacy Policy for Hertz Competitions

Last Updated: 29 December 2025
Hertz Competitions respects your privacy and is committed to protecting personal data under UK GDPR and Data Protection Act 2018.

This Policy explains how we collect, use, and protect data when you use our website or enter Competitions.
1. Data Controller We are the data controller. Contact: hertzcompetitions@gmail.com.
2. Data We Collect

• Identity/Contact: Name, email, address, phone (for orders/entries).

• Transaction: Payment details (processed securely by provider – we don't store full card info), order history.

• Usage/Technical: IP address, browser, device info, cookies (via analytics).

• Marketing: Preferences if you opt-in.

Collected via forms, checkout, cookies.
3. How We Use Data (Lawful Bases)

• Contract: Process entries, orders, notify winners, deliver prizes.

• Legal Obligation: Tax/reporting, fraud prevention.

• Legitimate Interests: Improve site, detect fraud, promote (balanced against your rights).

• Consent: Marketing emails (opt-out anytime).

4. Sharing Data

• Service providers: Payment processors (e.g., [Your Gateway]), hosting, analytics (Google Analytics), email tools.

• Legal: Authorities if required.

• No sale of data.

Some processors outside UK/EEA – with safeguards (e.g., adequacy decisions).
5. Data Retention

• Orders/entries: 7 years (tax/legal).

• Marketing: Until unsubscribe.

• General: As needed, then deleted/anonymised.

6. Your Rights Under UK GDPR: Access, rectification, erasure, restriction, objection, portability, withdraw consent. Contact us to exercise. Free, respond within 1 month. Complain to ICO (ico.org.uk) if unhappy.
7. Security We use technical/organisational measures (SSL, PCI compliance via provider).
8. Cookies We use essential/performance/marketing cookies. Manage via browser or our consent tool.
9. Changes Updated here; material changes notified.

Contact for questions.