Privacy Policy

1. Who We Are

Savannah Software LTD ("we", "us"), trading as BHP Giveaways, is the data controller for personal data collected through bhp-g.co.uk. We are registered in England & Wales (128 City Road, London EC1V 2NX). Contact: hello@bhp-g.co.uk.

2. Data We Collect

We collect: (a) account data — name, email address, and password (stored hashed); (b) competition data — ticket purchases, skill answers, and order history; (c) winner data — for announced winners, name and general location (town/city); (d) technical data — IP address, browser type, and usage data via server logs.

We do not store payment card details — all payments are processed by our PCI-compliant payment provider.

3. How We Use Your Data

We use your data to: run competitions and process entries; communicate with you about your entries and any prizes; comply with legal obligations; improve our website. We will not sell your personal data to third parties. We may share data with our payment processor (Stripe) and hosting provider (Vercel) solely to provide our services.

4. Legal Basis

We process your data on the basis of: contract performance (running the competition you entered); legitimate interests (fraud prevention, service improvement); and legal obligation (record-keeping). Where we send marketing emails, we rely on consent which you may withdraw at any time.

5. Data Retention

We keep your account data for as long as your account is active. Order records are retained for 7 years for accounting purposes. You may request deletion of your account at any time — see Your Rights below.

6. Your Rights

Under UK GDPR you have the right to: access your data; correct inaccurate data; request deletion ("right to be forgotten"); object to processing; data portability. To exercise any right, contact hello@bhp-g.co.uk. You also have the right to lodge a complaint with the Information Commissioner's Office (ico.org.uk).

7. Cookies

We use essential cookies only: a session cookie for authentication (Supabase auth) that expires when you close your browser. We do not use advertising or tracking cookies.