Campaign privacy notice

Who is responsible

Harris Consultancy manages this Christmas campaign. Contact hello@harris-consultancy.co.uk or 01844 617301 about your information.

What we collect and why

We use entry names, email addresses, optional postcodes and reward/redemption records to run the giveaway. Business applications contain a contact name, business email, website, business type, service area and information supplied for review. Approved businesses can publish a business name, offers, logo, images and optional public location. Cards contain the names and message you enter; anyone with a card link can read it. An optional card-email request also uses your email address to verify the request and deliver your copy.

Our basis for using information

We rely on legitimate interests to administer requested campaign participation, review businesses, deliver requested cards, prevent abuse and resolve reward queries. Marketing emails rely on your separate, optional consent. Taking part or being imported as a business does not subscribe you to marketing.

Who can see it

Harris Consultancy and the hosting and email-delivery providers used to operate this website process the information needed for those services. Businesses see their own portal information and can redeem tickets issued for their rewards. At a customer’s request, they can search the exact entry email to see only that business’s reward, recipient name, code and redemption status. They do not receive our marketing lists. Private business feedback and review responses are visible only to the submitting business and Harris Consultancy. Approved business profile and offer details are public; application contact details are not automatically published. Businesses may separately opt into a directory for other approved partners to share their public links, business description, logo and live offers. The directory does not include login email addresses or street addresses. Unticking the sharing choice and saving the profile removes the directory listing, but does not retract posts already shared by others. A business contact may be added from details supplied directly to Harris Consultancy or by its administrator from an existing business relationship. Ask us if you want the specific source of an imported record.

How long we keep it

Entries, cards, business feedback, campaign events and application/card-email request records are normally removed by scheduled cleanup after 180 days from creation. Unverified application and card-email requests are removed after one day. Business participation records remain while needed to manage the relationship and outstanding rewards. Consent evidence and minimal suppression records are kept while needed to manage your choices, prevent accidental re-subscription and demonstrate them; ask us to review or remove information that is no longer needed. Hosting backups and email-service records may follow separate retention schedules.

Your choices and rights

Marketing is optional. Use Email preferences in the website footer or an unsubscribe link to change your choices, or contact us. You may ask for access, correction, deletion or restriction and, where applicable, a portable copy. You may object to processing based on legitimate interests, including campaign administration. We will explain if an outstanding reward or another obligation means we need to retain a record. You can complain to the Information Commissioner’s Office at ico.org.uk/make-a-complaint/ or 0303 123 1113.

Security and automated features

Sign-in uses time-limited email verification and a necessary session cookie. We use hashed identifiers for rate limiting and account protection. Rewards are selected automatically from enabled remaining stock using configured weights; an entry is not a guarantee of a particular reward. Business approvals are reviewed by Harris Consultancy.

Website and supplier details

This notice describes the campaign features. Contact Harris Consultancy for details of its current hosting, email providers, backup schedules and any international-transfer arrangements. Any separate website privacy policy also applies to other website services and optional analytics.