Introduction
BIG Lotto for Health Charities (“we”, “us”, “our”) is committed to protecting your personal data and respecting your privacy. This Privacy Notice explains what data we collect, how we use it, and your rights.
Participating charities and partners may also provide their own privacy notices where they act as Joint data controllers.
Please note that when you select a charity under the Lottery, they will also be a data controller for your personal information.
Who we are
BIG Lotto for Health Charities is promoted and operated by ANC Trading Ltd, Suite 68, Lake View House, Wilton Drive, Warwick, CV34 6RG.
ANC Trading Ltd is the Data Controller for the purposes of UK GDPR and the Data Protection Act 2018.
StarVale Management & Technologies Ltd acts as the External Lottery Manager (ELM) and Data Processor, processing personal data on behalf of ANC Trading Ltd and in accordance with its instructions.
How we collect your information
We collect personal data directly from you when you join or play the Lottery, contact us, visit our website, or interact with approved third parties such as:
Payment Providers
Participating Charities (where applicable).
What information we collect
We may collect personal details (name, address, email, phone, DOB), financial details, lottery activity, and technical data such as IP address. Your personal data is stored securely within systems operated by us and our External Lottery Manager, using UK/EU-based hosting where possible, with appropriate safeguards in place.
How we use your information
We use your information to:
- administer your lottery account and entries
- process payments and distribute prizes
- verify eligibility (e.g. age and residency checks)
- comply with legal and regulatory obligations, including Gambling Commission requirements
- prevent fraud and protect the integrity of the lottery
- support the promotion and effectiveness of the lottery and associated charitable fundraising
- share relevant information with participating charities, where applicable
Lawful bases for processing
We rely on the following lawful bases:
- Contract – to administer your participation in the lottery
- Legal obligation – to comply with applicable gambling and financial regulations
- Legitimate interests – to operate and improve the lottery and support charitable fundraising and to share your information with your chosen charity.
- Consent – where required for specific marketing communications
Where we rely on legitimate interests, we ensure that these are balanced against your rights and freedoms.
Who we share your data with
BIG Lotto for Health Charities and your chosen charity will have joint control of your personal information, i.e. we will be joint controllers. We will only share your personal information, in compliance with data protection legislation, with the following:
- StarVale Management & Technologies Ltd (External Lottery Manager / Data Processor) – to operate and administer the lottery on our behalf
- Payment providers – to process payments and distribute prizes
- IT and system providers – to host and maintain the lottery platform
- Marketing service providers – where communications are permitted
- Professional advisers – including legal, financial, and audit services
- Regulators such as the Gambling Commission – where required by law
- Law enforcement agencies – where necessary to prevent or detect crime
Marketing and communications
ANC Trading Ltd does not send direct marketing communications unless consent has been obtained where required.
Participating charities may contact you where permitted under data protection law.
You can manage your communication preferences at any time via your account or by contacting us
Data security
We use appropriate technical and organisational measures to protect your data.
Starvale use secure bespoke systems with access controls. Data is transferred within a secure, password-protected environment and transferred using Secure File Transfer Protocol (SFTP) technology Sensitive data is always encrypted and all staff receive regular training on data protection with regular monitoring and security assessments. We also submit to an annual independent external audit to ensure we comply with the Gambling Commission’s Remote gambling and software technical standards.
ANC maintain robust security measures to safeguard personal information. Data is stored within a secure, password-protected environment and transferred using Secure File Transfer Protocol (SFTP) technology. Access is restricted to authorised individuals and is managed in accordance with the principle of least privilege. We regularly review our security controls to ensure the ongoing confidentiality, integrity, and availability of personal data.
Data retention
We retain your data only as long as necessary for legal and operational purposes.
Your rights
Under UK data protection law, you have the following rights. Some rights are subject to limitations (for example, safeguarding or legal obligations) and may not always apply. If we cannot fulfil a request, we will explain why.
- Right to be informed – to know how your data is used.
- Right of access – to request a copy of your personal data.
- Right to rectification – to correct inaccurate or incomplete data.
- Right to erasure – to request deletion where legally permitted.
- Right to restrict processing – to limit how we use your data in certain circumstances.
- Right to data portability – to receive certain data in a structured, machine‑readable format.
- Right to object – to processing based on legitimate interests or for direct marketing.
- Rights around automated decision‑making – we do not make decisions that produce legal or similarly significant effects solely by automated means.
Complaints Process: If you are unhappy with how we handle your personal data, you have the right to raise a complaint with us using the email address mentioned below.
Please provide:
- Your name and contact details
- A clear description of your concern
- Any relevant dates or reference numbers
What happens next?
- We will acknowledge your complaint within 30 days of receiving it.
- We will investigate your concerns.
- We may contact you if we need further information.
- We will respond as soon as possible and without undue delay.
Cookies
We use cookies to improve site performance and user experience. You can manage preferences via your browser.
Third-party links
Our website may contain links to third-party websites. We are not responsible for the privacy practices of these external sites.
Changes to this notice
We may update this notice from time to time and will communicate significant changes. Otherwise, we will upload a small notice on our website to inform you that the privacy notice has been refreshed.
Contact us
For questions please email the BIG Lotto for Health Charities the team at hello@biglotto.org.uk.