1. Introduction
This Privacy Policy explains how DONJUAN&CO LTD, a company registered in England and Wales, with its registered office at:
International House
6 South Molton Street
London W1K 5QF
United Kingdom
(hereinafter referred to as the “Company”, “we”, “us”)
collects, uses, stores, and protects your personal data in accordance with:
• the UK GDPR
• the Data Protection Act 2018
2. Data controller
The data controller is:
DONJUAN&CO LTD
Email: contact@donjuanandco.uk
Address: International House, 6 South Molton Street, London W1K 5QF, United Kingdom
3. Data collected
We may collect the following categories of personal data:
3.1 Identification Data
• first name and last name
• date of birth
• postal address
• email address
• phone number
3.2 Participation Data
• number of tickets purchased
• answers to the skill-based question
• transaction history
3.3 Financial Data
• transaction identifiers
• payment method details (processed via secure third-party providers)
We never store full credit card numbers.
3.4 Technical Data
• IP address
• browsing data
• cookies
• device fingerprinting (for fraud prevention purposes)
3.5 KYC Data (where applicable)
• identity document copies
• proof of address
• verification selfie
4. Purpose of precessing
We process your data for the following purposes:
• managing competition entries;
• verifying eligibility;
• conducting draws via RandomDraws;
• preventing fraud and abuse;
• carrying out AML/KYC checks;
• processing payments;
• complying with legal obligations.
5. Legal basis
Processing is based on:
• performance of a contract (competition participation);
• compliance with legal obligations;
• legitimate interests (fraud prevention, security);
• consent (marketing and non-essential cookies).
6. data sharing
Your data may be shared with:
• payment service providers;
• identity verification providers;
• anti-fraud service providers;
• hosting providers;
• competent authorities where required by law.
We never sell your personal data.
7. international transfers
Where data is transferred outside the United Kingdom:
• we rely on Standard Contractual Clauses (SCCs); or
• use providers located in countries deemed adequate.
8. Data retention
We retain your data for the following periods:
• participation data: 3 years
• financial data: 6 years (legal/accounting obligations)
• KYC data: 5 years
• technical logs: 12 to 24 months
9. Security
We implement appropriate technical and organisational measures, including:
• SSL encryption
• restricted access to data
• secure hosting infrastructure
• intrusion monitoring systems
10. Your rights
Under the UK GDPR, you have the right to:
• access your data;
• rectify inaccurate data;
• request erasure;
• restrict processing;
• object to processing;
• data portability;
• withdraw consent at any time.
To exercise your rights, please contact:
contact@donjuanandco.uk
You also have the right to lodge a complaint with the supervisory authority:
Information Commissioner’s Office (ICO)
11. Cookies
The website uses:
• necessary cookies (site functionality);
• analytical cookies;
• anti-fraud cookies.
A consent banner allows you to manage your preferences.
12. Marketing communications
If you consent to receive marketing communications:
• you may unsubscribe at any time;
• an unsubscribe link is included in every email.
13. Children’s data
This website is strictly intended for individuals aged 18 and over.
If we become aware that a minor has provided personal data:
• the account will be deleted;
• the data will be erased.
14. Modifications
We may update this Privacy Policy at any time.
The applicable version is the one published on the website at the time of use.