Privacy policy
How we collect, use and protect your personal data under UK GDPR and the Data Protection Act 2018.
Last updated: 13 October 2026.
1. Who we are
Girlguiding Tay and Ochils (Scottish charity SC002886), Old Third, Tullibardine, Auchterarder, Perthshire, PH3 1NJ, is the data controller for personal data collected through this website, the County Lottery and our donation forms. For data protection questions, email [email protected] or write to the Data Protection Lead at the address above.
Girlguiding (the national charity) is a separate controller for membership data held in its own systems, such as when you register to join or volunteer through girlguiding.org.uk.
2. What data we collect
| Data | Why we use it | Lawful basis |
|---|---|---|
| Name, address, postcode, email | Registering you as a player or donor, sending tickets and receipts, paying prizes | Contract |
| Date of birth and age-verification result | Confirming you are 18 or over before you play and before a prize is paid | Legal obligation and legitimate interests (preventing underage gambling) |
| Payment references (not full card numbers) | Taking payment, refunds, preventing fraud | Contract and legitimate interests |
| Draw entries, ticket numbers and results | Running draws, keeping draw records, making returns to Perth & Kinross Council | Contract and legal obligation |
| Spending limits, breaks and self-exclusion | Supporting safer gambling and honouring your choices | Legitimate interests and legal obligation |
| Bank details (winners only) | Paying prizes | Contract |
| Gift Aid declarations | Claiming Gift Aid from HMRC | Legal obligation |
| Communication preferences | Sending news only if you opt in | Consent |
| Messages you send us | Answering enquiries and complaints | Legitimate interests |
3. Who we share it with
We never sell your data. We share it only with:
- Stripe Payments UK Ltd, our payment processor, to take payments and prevent fraud;
- our electronic age-verification provider, which checks your name, address and date of birth against credit reference and electoral roll data (this check leaves a “soft footprint” that does not affect your credit score);
- our email and website hosting providers, who process data on our instructions under contract;
- HMRC, for Gift Aid claims;
- Perth & Kinross Council, the police or other authorities, where the law requires it or to prevent crime.
Some providers may process data outside the UK. Where they do, we make sure appropriate safeguards are in place, such as UK adequacy regulations or the International Data Transfer Agreement.
4. How long we keep it
- Player accounts, ticket and draw records: 6 years after your account closes, to meet financial and licensing record-keeping requirements.
- Self-exclusion records: for the length of the exclusion plus 6 years, so that we can honour it.
- Gift Aid declarations: 6 years after your last donation claimed.
- General enquiries: 2 years after the matter is closed.
5. Your rights
You have the right to be informed; to access your data; to have it corrected; to have it erased; to restrict processing; to data portability; to object to processing (including direct marketing at any time); and rights related to automated decision-making. We do not make decisions about you based solely on automated processing, except that an age check result may pause your entry until a person reviews it.
To use any of these rights, email [email protected]. We will reply within one month. Some data must be kept by law, for example self-exclusion and financial records, even if you ask us to delete it.
6. Security
Card payments are handled entirely by Stripe. Access to player data is limited to the volunteers who need it, protected by strong passwords and two-factor authentication, and covered by a confidentiality agreement.
7. Complaints
If you are unhappy with how we have used your data, please tell us first. You also have the right to complain to the Information Commissioner’s Office (ICO): ico.org.uk/make-a-complaint (opens in a new tab), helpline 0303 123 1113. The ICO’s Scotland office is at Queen Elizabeth House, Sibbald Walk, Edinburgh, EH8 8FT.
8. Changes
We will post any changes to this policy here with a new date.