Privacy Policy

This policy explains how personal information is collected and processed when you use our website, including when you subscribe to updates, purchase products/services, enter competitions, or contact us.

Our services are not intended for children, and we do not knowingly collect personal data from individuals below the legal participation age.

This policy should be read with any additional privacy notices shown at data collection points.

Croco Giveaways is the data controller responsible for your personal information.

We have appointed a Data Privacy Manager to oversee privacy and compliance matters.

• Company: Croco Giveaways
• Email: [email protected]
• Phone: +447349168033
• Address: 2 Dudley Drive, Ruislip, United Kingdom, HA4 6QN

We may update this policy from time to time to reflect legal, operational, or service changes.

The latest version is always available on the website.

Please keep your account and contact information accurate and up to date.

Our site may link to external websites/apps/plugins. We do not control those third-party services and are not responsible for their privacy practices.

We may collect, use, store, and transfer the following categories of personal information:

• Identity Information: first name, last name, username, date of birth
• Contact Information: billing/postal address, email address, phone number
• Transaction Information: purchases, competition entries, payment references
• Technical Information: IP address, browser type, login data, device/OS information
• Profile Information: account credentials, order history, competition activity
• Usage Information: website interaction data
• Marketing and Communication Preferences: consent and contact preferences

We do not directly collect/store full card data. Payment processing is handled by independent payment providers (such as Stripe and other configured processors).

We may also use aggregated/statistical data that does not directly identify individuals.

We do not intentionally collect special category data, except where legally required for verification.

If required data is not provided, we may be unable to provide services or competition access.

We may use identity, contact, technical, profile, and usage data to determine relevant promotions, competitions, and offers.

You may receive marketing communications if you requested information, bought services, or entered competitions.

You can opt out at any time via unsubscribe links or by contacting us directly.

Opting out of marketing does not affect service-related communications (orders, entries, account updates).

We use cookies and similar technologies for functionality, performance, analytics, and user experience.

You can configure browser settings to reject some/all cookies. Disabling cookies may affect website functionality.

See our Cookie Policy for more information.

We only use your data for the purposes it was collected for, unless a compatible purpose applies.

Where legally required, we will notify you before using data for a new purpose.

We may process data without consent where permitted or required by law.

We may share personal data with:

• trusted service providers and technology partners
• payment processors
• professional advisers (legal, accounting, insurance, audit)
• regulators/law enforcement where required
• successors in merger, acquisition, or business transfer scenarios

Third parties acting on our behalf must follow appropriate security and data protection obligations.

Some providers may operate outside the UK. We apply lawful safeguards for international transfers.

Safeguards may include approved jurisdictions and legally approved contractual clauses.

We use appropriate technical and organizational controls to protect personal information.

Access is restricted to authorized personnel/partners with legitimate business need and confidentiality obligations.

We maintain breach handling procedures and notify regulators/users where legally required.

We retain personal information only as long as reasonably necessary for legal, tax, accounting, regulatory, dispute, and operational obligations.

Retention periods vary by data type and legal/business need.

Where appropriate, we anonymise data for analytical/statistical use.

Depending on applicable law, you may have rights to:

• access your personal information
• request correction of inaccurate information
• request deletion of your data
• object to certain processing
• request restriction of processing
• request transfer/portability of data
• withdraw consent (where consent is the lawful basis)
• lodge a complaint with a supervisory authority

Requests may require identity verification. We aim to respond within one month where applicable.

To exercise your rights, contact [email protected]. We may need to verify identity before processing requests.

We process personal data based on one or more lawful grounds:

• consent
• performance of a contract
• compliance with legal obligations
• legitimate business interests

Where legitimate interests are used, we assess impact on your rights and freedoms.

We may use third-party providers for:

• hosting and IT support
• payment processing
• marketing campaigns
• analytics and optimization
• legal and financial services
• regulatory compliance

Providers may include platforms such as Stripe and other tools integrated into our service in line with applicable privacy laws.

You may request that we stop sending marketing communications at any time.

Essential transactional/account communications may still be sent where necessary to provide services.

If you have questions or requests about this Privacy Policy or your personal information, contact [email protected].